Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/lJu4vvomNeL77Z8YpH2r84A1bZM.roa
File: lJu4vvomNeL77Z8YpH2r84A1bZM.roa (raw, json)
Hash identifier: mTkLp4XIHK60hTMHWyRMAysJ6XfiJSK2I0bd+JC5zqI=
Subject key identifier: 94:9B:B8:BE:FA:26:35:E2:FB:ED:9F:18:A4:7D:AB:F3:80:35:6D:93
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019421B24847368221B325F11A692DB31ECB
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/lJu4vvomNeL77Z8YpH2r84A1bZM.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60542
IP address blocks: 45.139.8.0/23 maxlen: 23
45.139.8.0/24 maxlen: 24
45.139.9.0/24 maxlen: 24
91.243.119.0/24 maxlen: 24
194.180.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:48:47:36:82:21:b3:25:f1:1a:69:2d:b3:1e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=949bb8befa2635e2fbed9f18a47dabf380356d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:05:92:e2:c2:5e:8c:26:27:f9:0c:60:cb:
9e:33:18:d3:b8:ba:f7:57:8d:14:9e:ef:8e:d4:08:
f8:62:04:ee:a2:80:f1:1a:54:a3:fe:e5:e9:5c:51:
c7:42:6d:ab:0b:b4:bc:80:86:e0:10:26:91:88:e9:
28:28:e8:ec:55:2b:b4:db:20:e6:b7:d4:72:f4:38:
6d:8b:38:92:2f:4a:91:6c:c5:ed:d6:34:2c:dd:22:
87:fc:29:3a:72:11:61:6f:0f:8e:cd:c0:95:84:4b:
af:28:97:fe:0c:43:0b:6b:63:65:6f:e1:97:f9:82:
f0:c4:aa:27:f3:42:f9:0e:d6:9d:6b:29:e9:52:4f:
f9:db:5f:aa:8a:1d:4e:17:38:8e:52:e6:e2:63:2c:
2c:ff:dd:67:50:4d:0e:39:ab:2a:a9:ef:68:5c:27:
41:b2:9b:62:be:ae:c3:b7:3d:c1:e1:ac:4e:52:ab:
46:02:de:b7:95:ad:2a:c6:5f:14:90:eb:17:bc:1a:
c0:65:12:ca:91:07:43:99:bd:93:a7:35:6b:8f:49:
db:23:9c:92:02:dd:7e:51:bb:57:e2:47:e4:9f:7a:
99:ab:d5:b3:cc:43:d1:98:93:0a:ff:9e:27:ae:aa:
42:d0:78:52:4a:80:8d:01:c5:ce:c1:6c:7b:02:33:
d3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:B8:BE:FA:26:35:E2:FB:ED:9F:18:A4:7D:AB:F3:80:35:6D:93
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/lJu4vvomNeL77Z8YpH2r84A1bZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/23
91.243.119.0/24
194.180.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:9f:60:e7:3c:a6:fa:c8:5d:3f:e6:37:e0:45:19:06:58:42:
37:b6:07:8b:0f:18:b0:c0:84:97:f0:c4:f6:eb:c1:76:c5:da:
a0:62:6c:3a:a5:f7:ec:c1:17:05:42:9c:91:b1:60:06:52:4c:
54:4a:ab:93:ae:87:fc:50:eb:b6:2f:bf:cd:6b:24:fc:9d:85:
1f:6f:ad:1d:06:60:6f:2b:a5:e8:c5:0a:0a:47:e3:09:c4:66:
5a:6d:9f:a3:3b:44:ca:ae:63:80:45:c1:11:f5:9c:a8:31:d6:
ea:14:b2:48:1b:b8:f0:0d:5a:56:58:fa:b9:8d:d6:d9:db:95:
51:01:7a:7a:86:41:af:81:d5:67:bc:14:74:81:58:73:2b:79:
ad:73:32:2e:73:d2:d2:f9:d8:f5:d8:a6:99:74:86:4a:29:27:
6b:a1:4a:3b:db:5e:11:74:3f:31:68:92:a5:7e:1b:85:1f:cd:
bf:16:86:cc:cf:d6:b5:44:27:67:0e:7c:c5:d4:cd:c4:80:4f:
3d:cc:56:85:26:e6:67:df:22:62:55:bb:7e:84:37:af:b1:d0:
51:8d:29:2b:b6:84:c9:ec:d5:95:ad:64:57:de:26:c0:f2:5e:
92:91:cc:dc:20:fe:2c:9e:42:08:0f:54:52:02:7b:7a:3d:14:
6b:11:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:09 2025 by rpki-client