Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f5f918-494d-4f95-ac71-8172a18dda10/1/IPf5yvDjV2f1bbaxGM7S0CTHqbs.roa
File: IPf5yvDjV2f1bbaxGM7S0CTHqbs.roa (raw, json)
Hash identifier: lZZjVDCgRRngTPPYXCAjBtzsl4lRNgLvCB9Tw1XBuqk=
Subject key identifier: 20:F7:F9:CA:F0:E3:57:67:F5:6D:B6:B1:18:CE:D2:D0:24:C7:A9:BB
Certificate issuer: /CN=a37c433d6176d6abc2db03e7410632cd27229b93
Certificate serial: A11F96
Authority key identifier: A3:7C:43:3D:61:76:D6:AB:C2:DB:03:E7:41:06:32:CD:27:22:9B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3xDPWF21qvC2wPnQQYyzScim5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f5f918-494d-4f95-ac71-8172a18dda10/1/IPf5yvDjV2f1bbaxGM7S0CTHqbs.roa
Signing time: Sat 01 Jan 2022 02:57:51 +0000
ROA not before: Sat 01 Jan 2022 02:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48629
IP address blocks: 45.159.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10559382 (0xa11f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37c433d6176d6abc2db03e7410632cd27229b93
Validity
Not Before: Jan 1 02:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20f7f9caf0e35767f56db6b118ced2d024c7a9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:d1:16:1e:d8:cb:0c:2a:8d:f0:34:9a:57:
53:78:76:19:14:4c:b1:64:94:6d:32:b7:c7:78:c6:
74:38:c0:7d:c8:c9:b8:6e:74:70:9d:33:f8:fa:8c:
92:a0:57:14:60:eb:cf:1e:73:32:5f:38:38:51:b5:
14:4e:c0:aa:d3:a5:dc:58:d4:ae:9e:5c:37:06:3c:
7a:14:a2:56:a3:9c:fd:8b:29:49:38:56:a8:8d:d6:
1f:31:59:04:e3:b1:c4:22:1a:69:48:cc:ff:b1:8f:
47:4c:60:1d:be:35:7b:51:26:5d:1f:a7:50:f9:15:
9c:26:de:20:46:c2:fc:ac:d6:14:51:9d:10:52:5a:
b0:0a:d8:e8:f3:16:dd:6c:d0:c0:2e:38:09:67:ed:
b5:7f:18:6f:99:23:78:1d:7d:f7:e6:36:a9:43:b9:
c5:b4:fa:84:4c:58:b9:1d:df:73:98:53:ad:ca:23:
59:f7:2b:3b:11:72:07:f9:1f:40:74:4e:35:83:14:
fa:e5:ce:5d:c5:22:1c:b2:4c:8d:59:f0:36:2b:37:
9a:72:b1:2d:3d:25:56:e5:e7:ae:ad:57:2d:fc:45:
0a:07:61:95:ac:c7:14:f3:a5:7c:28:43:45:5e:20:
76:f5:44:27:26:94:39:0e:38:14:4f:b7:6c:18:c5:
db:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F7:F9:CA:F0:E3:57:67:F5:6D:B6:B1:18:CE:D2:D0:24:C7:A9:BB
X509v3 Authority Key Identifier:
keyid:A3:7C:43:3D:61:76:D6:AB:C2:DB:03:E7:41:06:32:CD:27:22:9B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3xDPWF21qvC2wPnQQYyzScim5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f5f918-494d-4f95-ac71-8172a18dda10/1/IPf5yvDjV2f1bbaxGM7S0CTHqbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f5f918-494d-4f95-ac71-8172a18dda10/1/o3xDPWF21qvC2wPnQQYyzScim5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.187.0/24
Signature Algorithm: sha256WithRSAEncryption
82:41:2f:f0:9d:30:f7:97:e0:06:30:1f:43:fe:79:db:2e:90:
be:8e:4f:1c:ae:f8:2e:53:f8:3d:95:79:cd:10:4b:47:10:db:
55:8c:b4:f5:4e:33:de:6b:a5:6d:bd:0e:a0:ea:b9:2f:ca:7b:
fd:11:5a:ca:9f:1b:c1:ad:39:33:19:dd:81:36:34:b9:aa:c3:
27:fc:f7:75:87:e8:39:75:01:df:b1:5c:cb:34:c0:41:3b:a0:
91:e7:48:9c:0e:23:be:19:7c:4d:72:58:54:70:3c:74:6e:67:
e5:ae:01:e3:45:cb:6d:a1:68:9b:07:ca:2d:8b:16:76:46:d3:
f3:99:4a:1a:34:18:fc:b8:04:da:aa:06:4f:cd:5e:3c:b1:f9:
9e:f7:83:0b:6b:68:01:68:0f:b1:0f:d5:50:0e:a9:a1:b8:8b:
52:11:36:20:9a:91:a2:49:16:61:a0:da:0e:58:96:dd:0d:ec:
63:51:44:b5:1a:21:07:d3:e6:d1:31:53:f4:b7:65:b4:1e:f8:
5b:0f:96:90:cb:9f:39:61:a1:28:b8:0d:9c:69:af:fa:9e:50:
84:29:07:5f:d4:1c:3b:88:02:41:65:e0:f2:0d:2e:df:13:07:
1c:e7:7a:91:47:e9:bc:24:1f:a1:ee:d1:d8:14:40:ea:4c:1b:
57:cf:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:30:05 2025 by rpki-client