Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/gI52XuVPpzK0iFjXQOOMmAH0OwQ.roa
File: gI52XuVPpzK0iFjXQOOMmAH0OwQ.roa (raw, json)
Hash identifier: 13Qvjqyv86LI1d9Oi24xy2x8fmEL5bsraM4zwNJnvNc=
Subject key identifier: 80:8E:76:5E:E5:4F:A7:32:B4:88:58:D7:40:E3:8C:98:01:F4:3B:04
Certificate issuer: /CN=8a6fbe22e80be7f14c1c39f848b1b80c9248ede8
Certificate serial: 09A8C5E3
Authority key identifier: 8A:6F:BE:22:E8:0B:E7:F1:4C:1C:39:F8:48:B1:B8:0C:92:48:ED:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/im--IugL5_FMHDn4SLG4DJJI7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/gI52XuVPpzK0iFjXQOOMmAH0OwQ.roa
Signing time: Wed 22 Jun 2022 13:54:32 +0000
ROA not before: Wed 22 Jun 2022 13:54:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205614
IP address blocks: 45.89.160.0/23 maxlen: 24
45.89.162.0/24 maxlen: 24
2a0b:e880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162055651 (0x9a8c5e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6fbe22e80be7f14c1c39f848b1b80c9248ede8
Validity
Not Before: Jun 22 13:54:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=808e765ee54fa732b48858d740e38c9801f43b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:f4:43:64:a1:cc:a4:26:a4:4c:23:04:ca:
26:6c:e1:e5:70:cd:72:d9:8d:fc:c3:7b:d1:24:20:
08:67:33:14:05:c4:4d:1e:55:d6:d7:5d:65:5d:0b:
3d:25:0e:07:fd:55:9b:65:f4:a3:ca:e2:27:26:71:
87:30:6c:2e:e8:e0:3c:a2:56:43:be:13:ed:f7:1a:
57:5c:65:90:85:60:6e:f4:50:c5:0a:60:04:7e:fc:
51:37:1b:6b:9f:ec:5f:cf:c8:9b:04:fb:9d:ea:02:
2b:50:8d:ca:4c:6b:a7:17:cd:0e:e8:a3:37:4e:52:
9c:ca:20:ca:a3:6b:22:f9:79:ef:64:98:d8:9e:35:
43:20:68:9a:c5:96:59:e1:2d:b0:f3:02:e6:73:2a:
31:00:77:75:f0:59:d7:80:58:46:15:f2:be:a7:81:
8c:14:9a:1c:57:50:78:13:11:36:e1:91:ff:60:01:
89:1a:9b:b2:74:62:4b:42:12:45:cf:a5:c1:14:87:
10:a5:3a:cf:9f:02:4c:b5:7f:b7:ff:99:1e:24:9c:
9c:06:b2:60:06:57:2f:66:3e:af:e8:ad:11:3c:3b:
a9:e7:50:ee:1b:46:ee:cc:09:ab:b6:e0:1b:a9:50:
8c:44:30:81:6a:ea:11:9f:6c:0b:0e:01:1d:eb:de:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8E:76:5E:E5:4F:A7:32:B4:88:58:D7:40:E3:8C:98:01:F4:3B:04
X509v3 Authority Key Identifier:
keyid:8A:6F:BE:22:E8:0B:E7:F1:4C:1C:39:F8:48:B1:B8:0C:92:48:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/im--IugL5_FMHDn4SLG4DJJI7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/gI52XuVPpzK0iFjXQOOMmAH0OwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c31324-c1ca-4daa-afa5-34d9143943b7/1/im--IugL5_FMHDn4SLG4DJJI7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.160.0-45.89.162.255
IPv6:
2a0b:e880::/29
Signature Algorithm: sha256WithRSAEncryption
92:fb:c8:ff:95:64:f9:55:ad:c9:36:53:0c:1a:84:06:0b:9b:
c2:e7:86:0e:bd:32:a8:de:1c:67:3f:44:da:ae:a7:8b:0f:5b:
2d:aa:64:6c:a5:a2:3c:a4:3c:7e:9b:f0:6e:88:f5:a0:16:0c:
11:8e:74:70:7b:e9:a8:71:7d:89:2e:ad:f9:09:2e:35:f0:ad:
08:70:15:98:a6:0f:34:82:98:58:5e:38:70:9a:e4:16:e7:50:
a2:e1:a8:5f:cc:75:8b:49:46:44:ef:79:28:1d:a4:ed:2b:4e:
48:2f:16:bc:88:be:c5:ca:80:fb:9f:64:ff:0b:16:88:09:db:
e6:d8:5d:54:2e:3a:6e:b6:84:ab:b8:6a:9b:87:3a:19:49:43:
5d:35:70:82:73:f5:22:ad:3f:24:1c:96:80:b7:46:3c:b4:e5:
ce:ec:be:e2:6b:0a:49:fd:15:e5:a7:d7:9b:31:51:78:e1:63:
59:96:8c:ae:94:8c:6e:43:f1:63:a8:fc:08:44:1b:81:71:db:
f5:c3:4e:22:18:09:c2:cd:11:dd:e0:91:39:00:47:a1:d5:1f:
55:96:7a:6e:e9:32:90:28:24:c2:fa:bb:6a:06:7a:a4:33:ca:
6e:bc:d4:86:1c:49:c6:37:fe:58:f3:a3:b8:6c:d0:f8:9c:e2:
2c:c4:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:51:12 2025 by rpki-client