Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/JQ0Ci3sR6qQwTIGaQ3BnkTmwr8g.roa
File: JQ0Ci3sR6qQwTIGaQ3BnkTmwr8g.roa (raw, json)
Hash identifier: NJ/+TpDDRxQ81Zlt9bMC5ccWk2cE6WfgOi0+mg4nlBs=
Subject key identifier: 25:0D:02:8B:7B:11:EA:A4:30:4C:81:9A:43:70:67:91:39:B0:AF:C8
Certificate issuer: /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial: 0194833DB34B4627823F086E7F4C674F9958
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/JQ0Ci3sR6qQwTIGaQ3BnkTmwr8g.roa
Signing time: Mon 20 Jan 2025 10:24:06 +0000
ROA not before: Mon 20 Jan 2025 10:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 45.152.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:3d:b3:4b:46:27:82:3f:08:6e:7f:4c:67:4f:99:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Validity
Not Before: Jan 20 10:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=250d028b7b11eaa4304c819a4370679139b0afc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6e:e1:ae:30:6b:68:82:7a:8b:71:ee:1b:11:
7b:a2:45:c1:f5:fb:c5:4e:2d:3e:66:fd:42:06:79:
5b:4d:71:bf:14:f7:dc:3d:07:c5:51:0a:2e:b8:e2:
1c:6b:ea:af:6b:51:23:a7:19:3d:a2:60:6d:fc:36:
15:f3:20:06:2a:ed:87:81:e5:af:d7:49:52:e5:47:
a7:73:97:10:70:0a:17:2b:d3:a4:d2:d0:85:cf:19:
c4:07:41:80:2b:41:70:58:a3:d6:21:1e:91:49:d3:
e7:6f:71:72:ca:17:53:7c:32:80:a4:3e:b5:88:3f:
d2:26:49:1e:a7:21:a3:cb:b6:bb:06:64:6f:4f:19:
9c:56:1a:31:54:3f:76:e7:0f:8a:3d:5b:9b:72:2a:
43:85:86:4b:87:ca:4a:30:64:25:16:98:15:9b:76:
06:46:c5:35:44:80:1a:a5:1e:e2:d2:67:b0:a5:89:
3a:20:bf:05:ee:40:21:da:a3:56:9b:13:e6:bc:5c:
e8:21:2f:a6:35:21:80:3c:c4:8a:fd:4e:43:bd:a6:
f4:97:4d:14:c3:2a:d1:bb:e9:34:ae:a3:8c:ab:43:
34:d4:e1:0e:83:94:84:ec:93:a8:db:31:32:35:1e:
3f:39:a3:d1:cd:9d:d2:90:8d:54:8c:f4:c4:24:f9:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0D:02:8B:7B:11:EA:A4:30:4C:81:9A:43:70:67:91:39:B0:AF:C8
X509v3 Authority Key Identifier:
keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/JQ0Ci3sR6qQwTIGaQ3BnkTmwr8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.23.0/24
Signature Algorithm: sha256WithRSAEncryption
18:00:dc:64:24:9e:1e:69:32:a2:89:a2:fa:13:47:71:3e:86:
e9:45:94:f6:92:25:78:79:d3:19:99:f4:f5:dd:5c:c2:4d:4b:
ab:38:fa:bb:d8:4c:98:07:cf:e1:a8:02:c3:6a:62:a7:1e:be:
1c:51:1e:4c:d3:be:cb:7e:ab:dd:a9:c2:10:d4:7a:c6:83:8c:
c3:61:b4:27:8e:ea:8f:50:f4:79:6b:14:15:78:01:5f:d8:9a:
ec:b1:6e:ee:03:cd:b0:21:dc:df:4d:e4:07:54:04:08:a2:7a:
f6:b9:c3:34:a6:de:93:c6:b4:96:06:66:58:51:32:bb:ab:5d:
53:15:87:c5:13:e7:7d:50:60:6f:88:b2:c4:98:4b:10:e7:bd:
43:27:aa:0c:42:bb:f7:18:3c:63:02:ac:b5:40:4e:54:4c:d2:
a8:f4:3d:bb:4a:ea:ef:20:6f:80:ee:26:a5:4a:01:b0:ed:fd:
56:19:d2:c6:9c:8e:91:03:3b:e3:15:78:93:26:2b:87:a0:34:
51:d4:0e:d8:53:6e:22:c4:22:d8:5f:34:11:85:31:e6:9c:23:
d4:5e:a9:35:bf:5f:c6:dd:4c:17:06:41:2f:32:59:d2:b8:7d:
67:bd:0f:fb:eb:ac:da:39:45:c8:96:c2:e3:82:1a:30:2c:a2:
29:e4:b1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:00:41 2025 by rpki-client