Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/iXRbYtEdayUGgfednpdbuUAmtTE.roa
File: iXRbYtEdayUGgfednpdbuUAmtTE.roa (raw, json)
Hash identifier: BA8BRTiRvXcxfOsWPEuTsk8Vb3jpRrMVlDgqyjSxqRw=
Subject key identifier: 89:74:5B:62:D1:1D:6B:25:06:81:F7:9D:9E:97:5B:B9:40:26:B5:31
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 04770549
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/iXRbYtEdayUGgfednpdbuUAmtTE.roa
Signing time: Sat 07 May 2022 06:08:45 +0000
ROA not before: Sat 07 May 2022 06:08:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 91.199.163.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74909001 (0x4770549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: May 7 06:08:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89745b62d11d6b250681f79d9e975bb94026b531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:47:64:cc:3b:51:13:fc:fc:d9:4d:51:17:
63:7b:86:bd:5e:c8:c4:e0:41:a3:86:62:b1:91:de:
4b:b9:1f:c9:72:e9:05:3b:c1:80:f1:da:25:4a:c3:
84:93:07:eb:f9:d0:11:08:c9:44:57:f4:95:82:8b:
f5:b3:4c:0c:30:c6:49:0c:1c:4e:32:e4:aa:6c:7c:
9d:42:19:51:17:09:b6:07:59:4d:6a:a8:40:d9:76:
35:97:8b:25:a3:60:03:b6:f0:e9:16:51:cf:06:3c:
42:d5:4f:a5:83:b0:b5:6d:9c:73:4e:5e:9e:29:b7:
25:9d:f4:86:8f:5c:3b:b9:e2:fc:d4:49:80:72:8b:
6d:c7:bc:c8:2c:ae:5f:19:ed:a4:20:e8:db:3e:1e:
a4:c7:11:d0:8c:0f:4b:d3:da:00:9a:78:dc:4b:78:
b8:43:0d:45:42:89:5a:4b:eb:14:36:b0:87:8b:fb:
b5:61:91:19:b4:4f:84:84:3c:e4:71:aa:ff:2a:e5:
e1:2b:ea:49:a7:0c:b4:92:9f:6a:8c:e8:ed:c8:26:
5b:24:4b:7e:49:cb:45:e5:dc:de:cd:1c:e9:1f:c5:
94:cb:93:8a:ad:3c:b1:12:2e:1f:7b:46:db:78:79:
43:dc:a2:53:fd:cd:55:0b:dd:8d:c9:09:3e:56:03:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:74:5B:62:D1:1D:6B:25:06:81:F7:9D:9E:97:5B:B9:40:26:B5:31
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/iXRbYtEdayUGgfednpdbuUAmtTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
91.199.163.0/24
Signature Algorithm: sha256WithRSAEncryption
56:4c:7e:e4:b3:d8:e8:6e:4e:9e:1f:99:6b:8c:0f:f1:ae:93:
ff:63:bf:9d:f3:25:75:f4:b4:83:96:4d:78:8a:27:1c:b7:8e:
c9:ed:33:6b:62:b0:56:d1:28:d3:a5:64:1d:89:08:be:49:52:
d1:93:46:7c:d2:89:b1:db:26:40:f3:21:62:75:7c:f4:e7:0a:
08:a5:2b:ba:66:7c:c8:03:d7:4b:9f:3e:9e:0f:14:69:16:7f:
f9:ad:32:b3:ab:47:ee:ea:a3:19:9d:b3:f6:9e:d6:de:5e:b3:
c3:78:5b:43:42:99:99:88:9d:8a:b3:b8:22:dd:c4:c0:7a:14:
22:25:1a:19:11:ae:ce:f2:fa:17:73:d9:9f:98:2d:b0:2b:c6:
92:84:a5:9d:3f:69:56:26:f3:b9:5b:c4:d3:77:30:aa:04:3a:
6f:7e:5c:fa:75:bb:c6:c0:c0:42:01:56:af:3e:c4:3b:a4:07:
10:76:a8:b6:a9:3b:d8:7e:b3:07:98:4f:ea:1a:9c:4a:4d:62:
f2:b1:81:a0:05:24:57:fe:16:2f:c9:25:a5:22:08:6c:a7:9a:
8d:1e:8f:b2:de:b4:60:04:c2:d0:4e:c5:f2:2b:d2:94:ae:4b:
9c:72:77:7a:98:53:d1:c1:0a:dc:ad:d0:e2:7f:8d:7b:92:e1:
7f:65:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:29:48 2025 by rpki-client