Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/Jvn7cmyqqPa_CUr5hSLunD2Zkcs.roa
File: Jvn7cmyqqPa_CUr5hSLunD2Zkcs.roa (raw, json)
Hash identifier: 7N4opgtB9/rM8k0DYfqG+mOlH88o5seTkfbmWpLJ1V8=
Subject key identifier: 26:F9:FB:72:6C:AA:A8:F6:BF:09:4A:F9:85:22:EE:9C:3D:99:91:CB
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 0713EA21
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/Jvn7cmyqqPa_CUr5hSLunD2Zkcs.roa
Signing time: Sat 01 Jan 2022 13:58:47 +0000
ROA not before: Sat 01 Jan 2022 13:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.129.54.0/24 maxlen: 32
45.129.55.0/24 maxlen: 32
45.129.52.0/24 maxlen: 32
45.129.53.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118745633 (0x713ea21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jan 1 13:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26f9fb726caaa8f6bf094af98522ee9c3d9991cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:70:a5:96:fa:c2:89:4b:5c:58:13:37:4b:
e2:c6:e5:6d:75:10:cb:b9:69:b9:f1:4d:b9:e9:e0:
77:cd:95:47:f6:0f:b8:d5:52:3c:35:15:08:89:dd:
6d:aa:cb:da:e8:26:1a:c7:76:c2:ee:af:5a:18:c5:
a5:59:36:ca:ad:20:25:b8:67:d8:08:30:2b:1c:c9:
0f:a2:27:f9:71:d0:eb:86:da:6f:97:d9:22:bc:fe:
f0:ba:4e:67:07:9a:be:73:40:66:ee:4f:87:ef:38:
03:72:07:ba:ce:e0:f9:0e:5a:11:5d:48:8f:10:63:
a9:56:aa:b5:25:fb:2d:d4:b1:f1:80:77:67:a8:9d:
1a:58:d1:27:90:04:86:71:57:60:f0:6c:8d:c1:af:
53:a3:74:66:0a:b1:b7:bc:24:7b:40:b1:2e:dd:b3:
bf:cf:e6:d1:50:3e:f8:ff:2f:00:0f:33:4a:66:55:
25:c0:34:c3:89:e9:07:be:c8:db:26:c7:61:c9:6f:
bc:e0:fd:30:86:47:e3:a1:2a:f5:3d:5d:6f:07:77:
66:26:8b:28:65:8c:e0:9b:e3:b0:24:3c:30:7b:1b:
87:f7:38:68:44:ee:c8:77:25:f5:0b:91:76:a1:04:
2d:92:a9:5e:4b:72:7d:63:88:fb:aa:67:f5:86:ea:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:FB:72:6C:AA:A8:F6:BF:09:4A:F9:85:22:EE:9C:3D:99:91:CB
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/Jvn7cmyqqPa_CUr5hSLunD2Zkcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.52.0/22
Signature Algorithm: sha256WithRSAEncryption
12:2f:85:32:64:8f:35:c3:f0:dd:7d:35:18:d6:1f:a0:d8:47:
0a:a6:4c:1b:bf:d8:51:36:99:0b:33:3e:9d:80:e6:cf:c0:e3:
e8:fe:76:33:9d:3d:09:cd:a8:e8:ae:7f:bf:a5:f5:ee:5d:08:
8e:1a:b4:23:69:ba:2d:5d:d8:3e:4c:ff:8a:ad:ba:4c:9a:48:
1c:e4:38:93:00:ad:3b:dc:9b:7d:3c:24:0e:72:95:e5:b7:7b:
82:83:74:88:31:ae:99:a1:f8:00:fe:94:42:bf:34:1c:1d:0a:
2f:8d:a6:76:dc:49:3e:33:7d:77:3b:c8:a6:cd:ab:95:5a:c9:
d5:db:65:62:5f:db:ac:f7:c6:15:1b:f0:9d:63:80:a5:3f:70:
8f:4c:4f:7f:83:a2:6d:7f:e0:6e:89:95:19:1f:95:e1:23:ba:
86:0c:b3:d7:77:81:d5:19:c0:72:54:b7:51:7b:e1:b7:f5:40:
b4:52:f5:83:cf:43:57:8a:61:be:cf:35:0e:12:3a:8f:ab:b2:
10:77:e7:53:7a:3e:bf:91:9d:bf:03:12:0a:1e:7a:ea:a5:fe:
d8:0e:a8:d4:9a:dc:77:9f:67:e0:bc:ec:ac:5b:cd:c0:d5:c8:
30:b0:2d:57:60:d8:25:69:57:ff:4a:1c:17:5d:c2:28:28:1b:
a0:ff:e7:f3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBxPqITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZGY1NGJlMWI1ZWQ1ZmQ1OTJmYWNhNDY4ZGYxMTEwMDk1ZjNlYTBhMB4XDTIyMDEw
MTEzNTg0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjZmOWZiNzI2Y2Fh
YThmNmJmMDk0YWY5ODUyMmVlOWMzZDk5OTFjYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALhOcKWW+sKJS1xYEzdL4sblbXUQy7lpufFNuengd82VR/YP
uNVSPDUVCIndbarL2ugmGsd2wu6vWhjFpVk2yq0gJbhn2AgwKxzJD6In+XHQ64ba
b5fZIrz+8LpOZweavnNAZu5Ph+84A3IHus7g+Q5aEV1IjxBjqVaqtSX7LdSx8YB3
Z6idGljRJ5AEhnFXYPBsjcGvU6N0Zgqxt7wke0CxLt2zv8/m0VA++P8vAA8zSmZV
JcA0w4npB77I2ybHYclvvOD9MIZH46Eq9T1dbwd3ZiaLKGWM4JvjsCQ8MHsbh/c4
aETuyHcl9QuRdqEELZKpXktyfWOI+6pn9Ybq2ucCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQm+ftybKqo9r8JSvmFIu6cPZmRyzAfBgNVHSMEGDAWgBTt9Uvhte1f1ZL6
ykaN8REAlfPqCjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdmVkw0Ylh0WDlXUy1zcEdqZkVSQUpYejZnby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvNDBkODkzLWUwOTktNDE0OC1iMjhlLTllNjE0ZjQ0NjZjNS8x
L0p2bjdjbXlxcVBhX0NVcjVoU0x1bkQyWmtjcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
NDBkODkzLWUwOTktNDE0OC1iMjhlLTllNjE0ZjQ0NjZjNS8xLzdmVkw0Ylh0WDlX
Uy1zcEdqZkVSQUpYejZnby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2BNDANBgkqhkiG9w0BAQsFAAOC
AQEAEi+FMmSPNcPw3X01GNYfoNhHCqZMG7/YUTaZCzM+nYDmz8Dj6P52M509Cc2o
6K5/v6X17l0Ijhq0I2m6LV3YPkz/iq26TJpIHOQ4kwCtO9ybfTwkDnKV5bd7goN0
iDGumaH4AP6UQr80HB0KL42mdtxJPjN9dzvIps2rlVrJ1dtlYl/brPfGFRvwnWOA
pT9wj0xPf4OibX/gbomVGR+V4SO6hgyz13eB1RnAclS3UXvht/VAtFL1g89DV4ph
vs81DhI6j6uyEHfnU3o+v5GdvwMSCh566qX+2A6o1Jrcd59n4LzsrFvNwNXIMLAt
V2DYJWlX/0ocF13CKCgboP/n8w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:18 2025 by rpki-client