Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ASXdDgGnh8Klj0fzlnnnOhv5loU.roa
File: ASXdDgGnh8Klj0fzlnnnOhv5loU.roa (raw, json)
Hash identifier: wWWbyDkcRSYhjOCMVp5ySQLPVFoGVo9Lc8yvPSW0eIM=
Subject key identifier: 01:25:DD:0E:01:A7:87:C2:A5:8F:47:F3:96:79:E7:3A:1B:F9:96:85
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 0194258F6377845BD70848C6F0BACB20DB1B
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ASXdDgGnh8Klj0fzlnnnOhv5loU.roa
Signing time: Thu 02 Jan 2025 05:49:01 +0000
ROA not before: Thu 02 Jan 2025 05:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208949
IP address blocks: 45.94.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:63:77:84:5b:d7:08:48:c6:f0:ba:cb:20:db:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Jan 2 05:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0125dd0e01a787c2a58f47f39679e73a1bf99685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d2:c9:a5:82:fd:cd:62:d7:80:80:38:d0:6f:
a1:ff:23:c5:d3:1b:36:90:b8:5b:d0:1b:0b:fd:3e:
41:1f:c2:e4:bf:26:5f:94:b3:b1:11:2d:ea:42:14:
d5:e7:de:c0:70:55:4a:54:24:38:c2:6d:0f:ac:0f:
ca:62:74:0d:f4:4b:5c:07:88:e2:df:75:ac:40:bd:
2b:83:68:81:19:b2:68:63:97:dc:f2:7a:ad:5d:80:
97:9d:51:7d:31:ce:31:8d:55:a4:ba:c5:9a:de:f7:
1d:7a:75:fb:b4:22:76:7a:c8:ec:06:ca:79:74:c6:
46:aa:02:ec:e0:f9:1e:5b:bd:8e:6e:3d:21:66:5a:
83:74:0c:4d:dd:5d:ee:e2:f0:35:86:38:14:18:00:
c9:aa:09:f5:0a:4c:fd:67:e8:62:bd:73:a9:39:fa:
bc:cc:c5:2a:e3:62:a3:39:fd:dc:41:79:0c:a4:49:
02:b0:22:39:5b:94:2f:2c:be:a0:35:00:a1:65:63:
fa:ee:de:ba:5e:dc:e3:0b:18:c4:f6:3d:8a:cd:fb:
60:a8:72:cc:1d:f3:fc:9c:dd:98:0e:b2:96:c6:42:
f7:3a:25:9d:19:6f:a6:69:34:10:e4:d4:13:61:1c:
75:d5:d2:8c:9a:bc:b8:42:c2:a2:93:cd:6e:4f:59:
86:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:DD:0E:01:A7:87:C2:A5:8F:47:F3:96:79:E7:3A:1B:F9:96:85
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/ASXdDgGnh8Klj0fzlnnnOhv5loU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:9c:9a:95:cb:6c:36:50:af:f9:63:ea:74:53:5e:4c:3a:cc:
f1:82:5c:b4:3a:69:42:75:4c:9e:51:51:a4:cc:28:ba:e5:eb:
7e:61:d0:53:ff:09:71:e3:80:76:c1:21:4b:27:c8:8b:d4:50:
01:fa:4e:2a:cc:6e:f9:0c:8c:d6:41:e4:49:65:d8:8c:ae:fe:
c8:c3:51:ec:d6:95:d2:a9:19:fd:2a:6e:d9:3a:62:1b:03:92:
c4:68:ee:2e:05:bf:2c:71:13:86:79:7d:7e:31:f2:2a:b0:05:
70:6a:d4:cc:62:bb:55:03:ca:c7:12:30:78:4a:5c:22:f8:9a:
68:c2:be:c6:ac:fb:63:1c:bb:48:17:ad:6d:66:71:ea:c3:e2:
82:3a:e5:99:69:62:4b:49:55:3f:bb:0f:ff:09:27:cf:a0:e4:
47:2e:35:90:15:0d:e4:d6:ec:38:ad:cb:c2:c4:bc:89:db:90:
12:24:25:c3:df:33:99:07:05:7b:ea:e2:31:fb:9b:7e:05:85:
5c:61:60:f9:43:13:76:0a:b6:5e:29:31:d1:4f:d8:4c:e4:99:
46:5c:33:9b:1c:6e:83:4d:f9:67:f7:b3:0a:d2:34:8a:fe:c9:
58:06:f8:1b:cd:a3:0c:29:8f:35:39:84:40:bc:1d:10:a4:cf:
7c:f4:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:08:20 2025 by rpki-client