Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sKJIroaBpzQ_3O7hGgnfS2FOx6I.roa
File: sKJIroaBpzQ_3O7hGgnfS2FOx6I.roa (raw, json)
Hash identifier: t3UGh8kvXKa9iqQmha/C0CT2ClRMKh89UpPDVLPwrqs=
Subject key identifier: B0:A2:48:AE:86:81:A7:34:3F:DC:EE:E1:1A:09:DF:4B:61:4E:C7:A2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D890461348420A455AF501F3F9D1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sKJIroaBpzQ_3O7hGgnfS2FOx6I.roa
Signing time: Thu 02 Jan 2025 17:51:30 +0000
ROA not before: Thu 02 Jan 2025 17:51:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399979
IP address blocks: 45.139.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d8:90:46:13:48:42:0a:45:5a:f5:01:f3:f9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0a248ae8681a7343fdceee11a09df4b614ec7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:97:87:ec:cf:f9:9c:16:f9:3c:08:b3:0e:
2f:0c:72:44:94:26:d8:4e:da:09:b8:68:b7:b8:cf:
dd:a2:ae:ca:3e:05:ae:6b:62:8f:61:3a:c7:47:73:
10:53:79:08:ca:9d:b7:96:eb:49:f1:ab:b7:99:9c:
8f:72:8d:eb:70:f9:be:17:cc:e3:a8:24:5e:d9:8c:
03:0b:12:9a:98:dc:b5:c3:6a:47:d3:e9:96:28:83:
b5:73:f8:7f:e2:ce:eb:0e:68:5b:85:51:e3:5f:b4:
b7:3a:e8:5e:6b:ff:16:7c:a6:05:99:17:ef:0b:45:
39:8f:85:f3:10:25:07:01:39:fe:8b:60:91:26:f1:
d5:62:f1:46:c1:b7:c4:22:fd:3c:10:aa:79:87:f7:
b7:81:66:b1:db:c3:37:34:b6:f8:8d:e0:af:84:3b:
f1:08:79:b4:7e:af:76:16:e9:cd:b0:e6:1f:34:13:
f2:f7:bc:ae:28:ab:89:58:50:a4:85:cc:69:1f:08:
ea:0c:c2:61:51:e9:15:59:e1:af:63:bb:ba:f1:4a:
48:0e:eb:ff:32:5d:2d:0b:34:79:41:f9:a5:a8:48:
8f:1e:7d:4a:8e:ff:25:c8:11:6c:89:0c:c2:88:97:
88:4d:70:78:64:b1:5f:63:7f:e0:87:f3:bc:5d:30:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A2:48:AE:86:81:A7:34:3F:DC:EE:E1:1A:09:DF:4B:61:4E:C7:A2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sKJIroaBpzQ_3O7hGgnfS2FOx6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c6:ae:01:1d:af:2d:46:93:3a:91:b2:88:29:6b:ec:45:90:
76:77:49:20:62:aa:d2:92:21:f0:10:79:15:f1:13:e5:60:52:
56:fc:b0:86:f4:33:89:0f:0a:76:29:9a:59:d6:8a:0d:92:d6:
4a:07:45:22:18:25:c0:c7:50:b0:a3:b5:fa:b9:5b:84:66:86:
e2:28:3e:96:8f:f0:b4:25:61:2e:38:be:23:88:56:5d:b8:71:
74:2a:3d:2a:c1:37:9a:c0:81:86:7e:24:2d:09:55:e8:c2:31:
3e:0e:6c:ac:f4:16:3a:ab:99:ad:da:c2:a9:15:cc:55:21:34:
ab:75:1b:65:7f:ab:6e:f4:9e:c7:b0:3f:65:0f:46:79:70:98:
89:c0:67:3e:a5:92:b2:00:dc:f5:e1:b4:9e:28:21:80:f7:63:
da:a1:02:c2:43:7b:4f:58:09:f4:93:d2:eb:0f:74:72:47:a7:
2e:7b:92:33:63:72:b5:78:59:4c:e2:72:c3:ea:46:f6:a8:9e:
5b:fd:9d:12:29:7a:18:7d:29:79:cb:30:74:21:b1:09:30:f6:
58:c0:86:58:bc:54:d6:3f:4f:4a:73:43:67:41:2a:a0:37:b9:
4d:df:f5:26:5c:38:47:3e:c0:16:dd:b6:da:b3:9b:42:79:96:
7a:cd:9e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:43 2025 by rpki-client