Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/jtw47htspCaZBqLn-szAwwLDgRI.roa
File: jtw47htspCaZBqLn-szAwwLDgRI.roa (raw, json)
Hash identifier: 4ge4ZfZPpCPnlsJ6k5nbKp3z9nIWCai+fnrSIWJ/WUA=
Subject key identifier: 8E:DC:38:EE:1B:6C:A4:26:99:06:A2:E7:FA:CC:C0:C3:02:C3:81:12
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 019425FD615555902B2599A6A6DE92C4AB94
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/jtw47htspCaZBqLn-szAwwLDgRI.roa
Signing time: Thu 02 Jan 2025 07:49:09 +0000
ROA not before: Thu 02 Jan 2025 07:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213044
IP address blocks: 45.154.217.0/24 maxlen: 24
2a0a:d6c0:217::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:61:55:55:90:2b:25:99:a6:a6:de:92:c4:ab:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8edc38ee1b6ca4269906a2e7faccc0c302c38112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:cd:da:9f:a0:fb:26:36:1f:5a:02:08:7e:
d8:3e:ad:f4:0c:a2:14:11:0d:7a:b8:0d:1f:8c:ee:
2d:1d:59:bb:43:f4:66:24:0b:f7:22:23:6d:ad:f2:
e1:3a:3f:0a:90:97:16:66:c5:21:c2:64:b4:bc:9a:
bc:df:12:db:01:06:e7:13:56:1a:fa:ba:93:d0:07:
63:83:71:fd:bc:98:4b:08:72:9d:0c:38:47:ad:87:
5d:d6:95:65:1d:3b:c4:a6:58:ae:a3:71:fa:f3:24:
22:2a:9b:b7:41:88:0d:cc:69:09:4a:4c:ff:ae:b1:
e1:d4:36:78:c6:eb:bc:bc:05:c6:ae:fa:7c:fc:1c:
8b:de:27:51:1f:60:bc:4c:c2:1f:16:b0:05:52:88:
23:a2:ef:ed:34:a5:8d:5f:9e:66:1b:32:63:f5:68:
1b:78:48:96:a6:c6:be:dc:d3:61:7f:6d:f9:72:4d:
1e:5e:22:e5:68:17:1c:16:2d:97:f4:76:88:4a:17:
20:95:b2:b5:46:a8:dd:2e:ac:77:f0:d1:a2:39:a3:
34:f2:7e:88:f1:dc:78:23:8c:a2:52:75:e5:e6:f5:
11:95:cd:9f:be:25:8d:15:71:e8:72:99:c4:89:d4:
d6:12:a1:4d:13:e2:f3:55:51:fe:7e:9a:6e:5c:d7:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DC:38:EE:1B:6C:A4:26:99:06:A2:E7:FA:CC:C0:C3:02:C3:81:12
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/jtw47htspCaZBqLn-szAwwLDgRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.217.0/24
IPv6:
2a0a:d6c0:217::/48
Signature Algorithm: sha256WithRSAEncryption
be:5f:15:c1:20:ef:da:f5:b6:5f:cd:56:89:6f:de:cc:02:24:
b4:f7:bc:55:c9:98:d0:65:ad:ae:0b:78:6e:e9:41:90:1c:f1:
48:65:fd:43:b6:3b:82:5d:a6:7e:c2:f0:f7:cd:96:5d:11:18:
64:99:fa:da:3f:03:03:27:29:3b:ba:1b:52:fc:79:ba:9a:f1:
87:80:18:3f:3e:c4:0f:0e:ce:76:ff:58:f1:c5:a5:9a:65:69:
ef:13:2b:15:60:20:f0:f8:37:82:0a:6e:43:0f:56:c8:52:a9:
42:e9:71:f8:4d:1c:a6:27:14:b8:30:e8:be:22:65:c7:76:31:
4f:d8:13:5e:d2:c7:a8:8f:df:cb:56:83:96:ca:2b:e5:04:5c:
e3:85:5e:5e:8b:55:14:3d:62:6f:75:d7:81:2f:f1:6d:b3:78:
22:75:e1:98:d9:15:eb:96:d6:63:48:09:32:6f:69:dd:a9:9f:
7a:a4:bf:f3:57:15:7e:e1:fd:21:6d:db:87:bd:7c:dd:be:94:
1c:92:57:2a:9b:12:38:88:02:54:07:c2:90:a3:7a:40:e3:d2:
2a:7c:ae:53:91:1c:42:6d:8a:55:d5:8d:a8:c6:43:a6:7e:08:
94:df:79:24:9a:7f:40:83:b8:12:f6:46:6a:33:2d:47:81:78:
1b:3a:7c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:11 2025 by rpki-client