Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/jL3Au_MpkIkPbB6eyWAlaUOmcok.roa
File: jL3Au_MpkIkPbB6eyWAlaUOmcok.roa (raw, json)
Hash identifier: UpJhs15MKItIlP0pVRD1QGUB9HN6aGOZgzCX0RvHLJg=
Subject key identifier: 8C:BD:C0:BB:F3:29:90:89:0F:6C:1E:9E:C9:60:25:69:43:A6:72:89
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 01846D9E08E2D25D6B043EA3B70052EE35AE
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/jL3Au_MpkIkPbB6eyWAlaUOmcok.roa
Signing time: Sat 12 Nov 2022 20:53:04 +0000
ROA not before: Sat 12 Nov 2022 20:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 45.152.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6d:9e:08:e2:d2:5d:6b:04:3e:a3:b7:00:52:ee:35:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Nov 12 20:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cbdc0bbf32990890f6c1e9ec960256943a67289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:ae:26:9a:ae:26:81:d2:ca:9f:4a:66:ba:
11:fe:bc:84:c7:e4:b3:1f:d5:7c:fd:c1:bb:a9:ec:
ed:41:04:da:53:71:af:7a:dc:20:41:a5:d3:98:27:
f3:38:16:28:00:07:67:b9:27:a8:a8:cb:78:31:93:
1f:96:23:f0:3d:1b:3e:48:14:66:fa:fb:36:28:2f:
76:64:37:84:49:5a:76:8f:46:98:86:8a:59:d8:86:
61:be:e1:b9:d2:18:ba:62:d7:da:3c:28:e1:1d:af:
ac:2c:87:5a:82:8e:5a:c6:94:61:c9:ba:12:8e:37:
26:85:77:03:50:b2:0a:37:66:d9:c6:2c:1c:35:6b:
f8:e0:a5:f6:e7:bb:30:9b:fa:31:8f:14:24:05:6d:
8b:33:e9:b4:c4:0f:60:a6:79:96:b2:b6:67:86:36:
a5:07:47:df:ab:db:39:d9:a1:5d:c0:0e:15:5c:08:
05:0d:01:0b:28:7d:e8:ea:31:16:45:7d:6b:88:0c:
5c:12:44:b5:de:bf:0c:d3:ac:c0:51:72:79:c3:2a:
7b:55:08:39:8c:a5:13:84:77:2a:80:1c:1d:9d:83:
1c:fe:a9:8e:0b:94:77:36:13:ba:0c:2c:68:4d:1b:
e9:80:a9:da:16:e9:4f:75:6f:f5:83:60:ff:eb:02:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BD:C0:BB:F3:29:90:89:0F:6C:1E:9E:C9:60:25:69:43:A6:72:89
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/jL3Au_MpkIkPbB6eyWAlaUOmcok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.227.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f9:97:f3:04:40:05:0a:86:e1:5a:2d:ce:0b:62:84:5b:39:
fc:c6:39:79:e5:67:c1:63:f2:84:e7:3c:31:b4:bf:d5:6d:d6:
71:d7:58:7e:ff:c4:d2:0f:c1:a2:44:78:05:ff:60:c0:85:f4:
8b:4e:4f:99:d3:2d:dd:5e:fe:17:a9:29:07:f2:14:69:6b:56:
21:f6:cc:17:08:c6:5e:63:da:74:e0:ea:7e:c1:03:4a:d0:a0:
68:ee:37:03:48:7b:ec:bb:2d:0a:ac:b4:6a:8c:16:2a:cd:3d:
ed:de:dd:93:ed:5c:65:03:c6:e3:59:43:f1:2a:09:11:01:41:
cd:70:6e:de:4b:87:12:5e:5f:9b:19:e7:47:50:75:22:30:cc:
3a:b5:91:13:6d:89:68:8a:fd:76:8c:21:bc:e9:3a:3e:ac:ba:
1e:2d:cd:e3:e9:1c:64:45:da:8c:bd:1d:8e:c3:93:02:7d:28:
94:ca:e8:bb:88:6e:ff:0b:f4:c9:96:0f:ad:21:37:60:2f:e7:
41:6c:0c:84:2d:1f:f0:9f:35:4e:14:a6:d3:d8:df:23:9f:0e:
98:43:9a:f2:d1:43:53:7a:32:41:7a:e7:be:f1:4f:84:33:31:
f0:ed:35:57:0e:18:76:e0:ac:d2:e4:78:aa:cc:8f:c1:48:fb:
9d:fc:ac:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:28 2025 by rpki-client