Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/JMIXuwUBCaOmERtHlzG7ISJ3JvY.roa
File: JMIXuwUBCaOmERtHlzG7ISJ3JvY.roa (raw, json)
Hash identifier: Hw2s88epzhilOmADkh2atAnnbAnZEDzpVgH8yNCsz2o=
Subject key identifier: 24:C2:17:BB:05:01:09:A3:A6:11:1B:47:97:31:BB:21:22:77:26:F6
Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial: 019425FC1B4A76DE40F3595C5970B3E042D5
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/JMIXuwUBCaOmERtHlzG7ISJ3JvY.roa
Signing time: Thu 02 Jan 2025 07:47:46 +0000
ROA not before: Thu 02 Jan 2025 07:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44092
IP address blocks: 45.13.128.0/22 maxlen: 22
45.13.128.0/24 maxlen: 24
45.13.129.0/24 maxlen: 24
45.13.130.0/24 maxlen: 24
45.13.131.0/24 maxlen: 24
185.149.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:1b:4a:76:de:40:f3:59:5c:59:70:b3:e0:42:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121a37282dd992d88658160559e048392798c84b
Validity
Not Before: Jan 2 07:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24c217bb050109a3a6111b479731bb21227726f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e4:1e:13:44:4c:e9:2a:7a:06:04:d2:bb:73:
73:f0:c0:87:f6:90:89:dd:1e:5d:84:28:5b:88:04:
18:65:bc:42:0b:ec:e0:75:48:60:7b:03:8b:de:dd:
28:12:fd:66:fb:19:0a:9a:15:a8:a1:62:4c:71:e0:
1d:73:24:be:7e:dd:51:9b:ad:3a:dd:58:7f:7c:35:
97:f3:4a:5a:b1:cd:d3:90:55:6c:e1:ad:2b:cb:a5:
65:73:b0:af:fc:7c:3d:6c:9a:7c:72:a4:1a:10:bf:
3c:1c:b9:98:16:f7:21:8a:55:31:00:40:d9:78:0e:
80:70:8d:b5:e6:9b:8c:31:44:bc:7e:24:9b:02:3b:
b3:ac:49:32:b1:dd:9f:2b:1f:d4:de:01:b4:91:1c:
ed:19:f2:2b:ee:e9:24:fa:ff:f1:2b:34:40:68:e8:
a7:8f:23:46:d4:16:d7:73:28:8e:2e:ec:f6:c6:b0:
47:9d:67:16:1f:09:ac:f8:46:3c:af:03:ea:72:6e:
1e:38:c0:a8:18:ec:10:e7:9f:b1:4c:ba:7d:52:f0:
70:ac:85:d2:42:d5:a1:2e:df:7b:8f:72:7a:af:18:
01:0a:16:81:1f:fe:48:9d:3d:9c:b3:dd:38:e6:27:
4e:70:1f:00:52:76:bb:e2:f5:52:71:3a:32:8d:ec:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C2:17:BB:05:01:09:A3:A6:11:1B:47:97:31:BB:21:22:77:26:F6
X509v3 Authority Key Identifier:
keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/JMIXuwUBCaOmERtHlzG7ISJ3JvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.128.0/22
185.149.35.0/24
Signature Algorithm: sha256WithRSAEncryption
77:1a:d2:90:10:90:a4:3b:67:74:72:92:c8:7f:ae:f9:3f:93:
55:a4:68:94:a9:a8:8c:a7:4b:77:16:c6:a7:13:df:aa:28:66:
b7:8d:92:2e:0b:09:8a:b3:d9:b2:16:e5:9d:3d:51:e2:82:ff:
23:f6:81:14:c7:bd:f9:ab:30:28:af:6c:ba:40:cc:60:05:08:
d6:b3:ec:a9:03:73:8f:52:2d:9f:e1:63:60:bd:ab:c2:9a:1f:
cf:87:be:8e:01:6f:23:7d:94:58:51:f5:f7:b7:20:78:a6:c2:
c2:db:5d:ef:f2:68:73:08:bf:3c:52:20:2a:fa:7f:83:e3:3b:
70:72:6f:4e:ee:2e:82:5f:72:23:1e:3c:49:e4:62:b0:76:b8:
d2:95:18:f6:66:27:c6:8f:35:32:b5:7e:ae:29:00:83:f5:0d:
57:79:89:23:2b:ea:65:6b:10:d6:bb:17:2a:d1:14:d9:51:98:
00:3b:3a:63:4f:fc:9a:5a:6e:a3:00:e8:fd:6b:35:69:d6:f6:
cc:fa:8b:d8:33:c4:86:c2:88:b6:da:d1:9d:61:ed:4f:d5:b0:
35:f1:02:b1:f5:72:12:27:9e:b3:35:fd:b4:08:44:c5:02:22:
95:12:10:d1:22:f1:f8:f4:69:40:5b:a2:67:a8:6c:d5:ff:56:
8c:6d:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:02:00 2025 by rpki-client