Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/jWe_TvIhj5dH5Ux2vCS3uvPznoc.roa
File: jWe_TvIhj5dH5Ux2vCS3uvPznoc.roa (raw, json)
Hash identifier: NDB0B6hhi9OkQwxq6X1dXNT80uauDo2rv8POlRS3xgc=
Subject key identifier: 8D:67:BF:4E:F2:21:8F:97:47:E5:4C:76:BC:24:B7:BA:F3:F3:9E:87
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019427B57CF74EBAFCDB5ECA1AD7A4D4C0B3
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/jWe_TvIhj5dH5Ux2vCS3uvPznoc.roa
Signing time: Thu 02 Jan 2025 15:49:52 +0000
ROA not before: Thu 02 Jan 2025 15:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 45.11.236.0/23 maxlen: 23
45.11.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:7c:f7:4e:ba:fc:db:5e:ca:1a:d7:a4:d4:c0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 2 15:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d67bf4ef2218f9747e54c76bc24b7baf3f39e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:25:f0:ee:43:61:7f:28:a1:94:f7:84:20:06:
dd:fa:5b:49:93:59:4a:9f:6e:4a:b3:c5:16:68:39:
4d:3f:4d:ae:f2:fd:49:bc:71:a0:d3:eb:31:e0:fd:
61:96:df:e7:c9:7f:fa:6c:34:84:91:8d:ef:2a:8d:
49:f5:8f:dc:6c:84:70:85:22:24:8f:64:49:ab:b2:
6e:aa:a8:bf:2a:17:b4:20:0f:6c:69:d6:64:8a:70:
2a:42:d7:58:78:42:d1:19:6f:63:e9:8d:78:84:2b:
39:ad:93:77:cc:cd:76:88:fc:3e:c1:7f:af:07:7a:
b3:73:c3:d4:55:9c:08:9d:31:b0:6a:ae:ea:f7:6a:
9f:42:32:8e:f1:85:a2:cd:27:a4:16:77:2e:dc:03:
67:84:f8:13:b3:e6:e1:00:49:81:89:0a:5e:f6:98:
9e:e3:34:22:5a:87:62:9f:9d:1d:68:d5:29:c9:fb:
57:63:85:1f:e1:bf:02:89:47:ef:f6:00:40:c7:29:
7b:d4:20:99:51:01:6c:03:72:8a:07:15:7e:95:b5:
65:ea:54:05:48:c0:e8:70:65:06:7c:fc:da:93:91:
27:5d:6f:95:1f:aa:5b:12:59:be:b6:2a:e7:54:3e:
f2:51:9e:b2:82:a2:3b:59:8f:c9:02:99:71:0f:71:
e7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:67:BF:4E:F2:21:8F:97:47:E5:4C:76:BC:24:B7:BA:F3:F3:9E:87
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/jWe_TvIhj5dH5Ux2vCS3uvPznoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
84:af:7c:f7:1e:fc:e8:e6:6a:43:5f:3d:b1:d2:b3:7e:26:45:
3c:d0:b3:35:ec:8d:18:5b:d9:a7:73:b3:6c:66:bb:1a:3f:0a:
2a:b4:24:ab:0f:af:05:1f:9a:b3:25:4d:7a:cd:e4:d6:36:e8:
3f:56:cc:95:83:04:fb:19:68:dd:49:d3:e2:85:88:e5:bb:91:
7d:cd:89:b9:59:35:1b:08:78:02:87:fe:4f:db:72:e4:ce:d1:
90:73:cc:50:30:ba:e7:c3:69:21:59:0e:db:29:c3:46:2e:c6:
75:38:d2:d8:cc:08:ee:54:81:10:40:02:7b:6b:10:f2:90:e1:
56:7e:37:c8:b8:93:6e:bc:85:27:d6:d9:bb:f3:9a:99:eb:ae:
f8:52:f2:14:aa:64:3c:8a:4a:fd:af:99:31:72:3e:e7:35:8b:
45:f7:7a:e3:20:1c:11:57:5e:a8:77:67:9d:ad:f6:f6:b4:9c:
e9:5e:17:93:15:a4:c0:a0:f8:a9:b7:e7:98:a1:03:63:97:14:
d7:c5:4f:59:cd:02:78:58:fe:33:4a:8a:53:29:f3:7b:94:5b:
ed:4b:67:2d:43:03:1e:52:15:63:d7:5e:bb:66:48:7f:3f:09:
bc:09:01:46:84:5a:ff:11:75:bf:4e:4e:19:15:45:e2:2b:74:
c3:b7:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:29:31 2025 by rpki-client