Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/jJfOPh4XYz0bStaxv-izcSg_mmc.roa
File: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (raw, json)
Hash identifier: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=
Subject key identifier: 8C:97:CE:3E:1E:17:63:3D:1B:4A:D6:B1:BF:E8:B3:71:28:3F:9A:67
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019426D9986DDE794754FE3B4D9CFD389C18
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/jJfOPh4XYz0bStaxv-izcSg_mmc.roa
Signing time: Thu 02 Jan 2025 11:49:41 +0000
ROA not before: Thu 02 Jan 2025 11:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.129.52.0/24 maxlen: 32
45.129.53.0/24 maxlen: 32
45.129.54.0/24 maxlen: 32
45.129.55.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:98:6d:de:79:47:54:fe:3b:4d:9c:fd:38:9c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Jan 2 11:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c97ce3e1e17633d1b4ad6b1bfe8b371283f9a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:b8:c3:b8:c9:f0:9e:95:9e:a7:47:ef:31:
c2:59:8a:60:6e:9e:c9:5a:9b:0d:a4:9e:2f:f9:5b:
8f:fd:73:c0:f1:04:00:d3:8e:a8:3d:ce:40:c9:cd:
7d:ff:74:42:ad:20:8b:00:b3:c7:fa:26:13:19:88:
4a:7f:51:cb:bc:c9:20:87:06:ce:31:50:aa:a0:ce:
63:a6:7c:f2:af:d1:81:c7:a1:7f:05:b3:a0:97:0b:
c3:47:10:7d:22:7c:f2:00:19:35:44:82:52:39:01:
10:4d:4d:dc:62:47:1e:13:90:6d:97:52:fb:f0:05:
01:2e:00:74:89:b4:ef:44:27:93:cd:4c:84:9b:b0:
15:fe:14:b1:b4:a2:c0:ff:56:3d:72:2a:f5:34:e6:
51:99:5a:06:ec:92:16:e1:f6:f4:0c:2f:7d:ae:a6:
77:84:26:0d:28:e2:38:da:88:ea:bd:72:3b:42:e1:
d0:6a:06:78:8d:4a:5f:38:39:f4:fd:dd:2c:2c:84:
4c:f1:0e:7a:21:ff:7b:56:47:24:55:56:fc:96:82:
ed:94:62:8f:cc:56:ac:ef:f7:8f:ff:ae:ac:8c:2a:
b6:0c:cc:7e:90:af:e8:9e:e2:a8:1f:3e:4f:fc:8c:
df:af:d3:35:83:8c:61:cf:92:a6:a8:d2:3b:44:65:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:97:CE:3E:1E:17:63:3D:1B:4A:D6:B1:BF:E8:B3:71:28:3F:9A:67
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/jJfOPh4XYz0bStaxv-izcSg_mmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.52.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:1c:fc:fc:3a:c4:d2:65:34:9e:57:1b:a4:83:ad:c0:58:f5:
69:9c:74:3d:05:1d:b5:50:93:e5:85:70:1b:f2:e0:20:6b:5e:
26:4b:7e:9d:9a:64:6b:c8:c0:a2:d2:57:1a:d0:bc:f1:76:9d:
e0:ff:03:38:9e:e1:6e:43:31:9a:b0:d2:a5:5d:af:4b:5c:33:
c4:11:49:72:58:1b:ca:df:17:d8:67:91:84:76:d3:e8:a9:fc:
5c:3b:e5:28:5d:4b:c5:02:ad:e4:cc:a0:b5:d7:22:80:af:2c:
10:c8:d2:b1:f1:05:c3:0e:96:d7:e1:d1:3a:ba:55:bb:aa:2e:
95:00:c9:c8:ce:73:ac:90:4e:50:63:59:78:40:83:86:e0:4f:
80:a8:00:cb:8d:91:0b:1f:44:cb:b6:ec:13:3c:a9:49:93:5a:
f1:9a:e1:67:18:68:0d:20:c9:ff:cb:9e:62:ad:0b:e9:e8:94:
75:de:65:8e:25:29:6e:71:a1:37:d4:b3:62:14:74:bf:78:23:
10:77:4c:de:bb:45:13:f0:18:d9:31:3e:98:49:4f:1d:7c:6b:
07:93:58:5e:1f:05:d4:46:32:00:93:46:02:a5:9d:7c:19:e5:
02:4d:86:6f:da:ee:16:90:b7:57:99:7c:51:e6:94:ff:c5:89:
cd:ea:88:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:17 2025 by rpki-client