Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/j4-0AZNF6iCS-Y8DwznMUfguQKM.roa
File: j4-0AZNF6iCS-Y8DwznMUfguQKM.roa (raw, json)
Hash identifier: 9UHind5om+M7xPoByFFXJSZvuZyNAdK5MCxVIuXiRrs=
Subject key identifier: 8F:8F:B4:01:93:45:EA:20:92:F9:8F:03:C3:39:CC:51:F8:2E:40:A3
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 0194258F7E0E6B7BD614029672F08E9B6065
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/j4-0AZNF6iCS-Y8DwznMUfguQKM.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 45.134.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7e:0e:6b:7b:d6:14:02:96:72:f0:8e:9b:60:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f8fb4019345ea2092f98f03c339cc51f82e40a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ce:64:9d:57:0f:e6:c5:2c:26:43:91:31:75:
b2:a9:9f:80:a2:8d:f8:4d:81:b4:41:3d:95:97:23:
59:18:68:6c:33:d0:ad:26:11:3c:81:2a:87:6b:ea:
a2:61:fb:9a:01:f8:e7:39:63:74:28:91:c2:6b:f5:
5e:74:e8:06:a1:4d:0d:ff:26:fa:a2:b7:3d:af:6d:
5c:82:9a:30:90:c2:37:d8:5f:29:f1:25:8d:d7:69:
68:80:29:7c:69:fa:ad:c5:4e:7c:c9:4b:1c:15:f3:
2c:d5:29:25:4b:58:91:8e:06:2e:a0:32:7b:83:d0:
ce:ef:24:db:b0:7f:03:b6:ac:7b:c4:b9:18:16:a1:
af:20:23:76:1f:c7:4b:98:b2:4b:c8:93:f9:8d:90:
ed:f6:6f:9b:3d:72:c4:33:79:24:a0:e2:12:67:08:
68:68:c9:f1:f7:40:83:e6:97:d4:c0:b9:3b:f2:ca:
93:b8:e7:ed:32:8b:b2:e4:5c:f4:77:1e:21:a9:3c:
eb:1f:3c:2d:a7:42:d1:04:71:34:50:fe:37:5a:b2:
0f:ed:0e:55:97:1a:e8:89:53:72:2f:62:d1:8b:1d:
97:93:cf:bf:91:7a:92:a0:95:9a:b5:b6:c2:a5:05:
d4:ec:d9:c3:3d:01:c3:8b:30:6e:a3:bf:99:8d:7a:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8F:B4:01:93:45:EA:20:92:F9:8F:03:C3:39:CC:51:F8:2E:40:A3
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/j4-0AZNF6iCS-Y8DwznMUfguQKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.8.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e2:0b:95:59:71:bd:f7:4f:cd:49:79:71:6d:2a:db:48:ab:
3e:0e:c7:c3:af:e8:74:25:5f:33:4b:15:81:94:e6:ad:4c:c5:
e3:1d:d3:f9:21:b3:37:79:25:49:72:6a:48:7f:50:91:64:9d:
35:86:93:1f:48:84:8a:26:84:9f:f0:5f:12:91:c2:dc:34:2f:
dd:86:78:12:18:41:40:2e:16:a5:a2:59:53:18:ba:5c:a8:4a:
c3:e3:dc:5b:1d:e0:f3:58:0a:ef:01:a3:e9:c9:ae:87:c2:e4:
87:46:61:eb:ee:b4:c5:70:20:4a:fe:c4:ef:c4:c0:3d:59:09:
50:c2:35:8c:90:f3:1c:11:53:b9:0c:72:75:51:ae:ad:35:fd:
d9:0b:21:d4:45:98:15:79:d6:ab:65:28:ec:7d:56:90:8d:00:
f5:a8:b1:e3:1a:2d:17:a3:4d:c0:f6:70:74:69:c3:4b:b3:62:
26:64:b3:71:e6:21:3a:95:e6:76:1c:71:c6:bd:96:c0:7f:a9:
0e:86:f9:38:1d:e2:d1:ac:d6:ff:80:b5:79:c6:dd:de:b9:86:
ea:8d:de:fb:c3:aa:d7:be:f5:9a:e7:34:10:bb:4d:bd:0c:71:
25:0f:0c:d1:cc:68:cd:ec:f9:2a:9d:71:7f:57:61:cb:2e:53:
ed:1c:13:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:57:35 2025 by rpki-client