Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cjGFGT_eZ3yjuUt6lbNz97gN1WY.roa
File: cjGFGT_eZ3yjuUt6lbNz97gN1WY.roa (raw, json)
Hash identifier: p1adtCaRbGRdG1JeQ0+6JYljC+AHdr4UWB9G+UL+jEQ=
Subject key identifier: 72:31:85:19:3F:DE:67:7C:A3:B9:4B:7A:95:B3:73:F7:B8:0D:D5:66
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0194405C9E99589C2748E94A7216E0664B88
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cjGFGT_eZ3yjuUt6lbNz97gN1WY.roa
Signing time: Tue 07 Jan 2025 10:43:19 +0000
ROA not before: Tue 07 Jan 2025 10:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46918
IP address blocks: 45.91.84.0/22 maxlen: 22
91.242.64.0/22 maxlen: 24
91.242.123.0/24 maxlen: 24
91.242.125.0/24 maxlen: 24
91.242.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:5c:9e:99:58:9c:27:48:e9:4a:72:16:e0:66:4b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 7 10:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=723185193fde677ca3b94b7a95b373f7b80dd566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:7f:d2:53:2e:37:28:ef:24:06:d6:ad:65:
53:ba:59:29:f7:19:18:f4:d7:ab:b2:da:c3:29:5b:
19:78:fa:28:9f:0b:c4:d4:dc:22:c4:48:f0:9a:3c:
95:61:04:4e:99:b1:26:3f:19:f4:72:35:87:95:1a:
6c:b6:c0:f7:26:bd:cb:26:0b:d6:87:ac:24:cb:1c:
50:82:72:e5:bc:e0:ad:de:61:88:f3:6a:7b:58:ea:
5a:15:93:d4:5e:fb:4f:f3:a6:f8:4f:3f:f8:df:47:
bf:4c:4b:09:99:7f:15:be:a3:fd:e4:5d:65:82:f7:
15:ba:52:80:e7:91:a5:e1:68:ac:03:90:c6:08:5c:
68:bc:a4:7a:f6:90:7d:db:ed:9f:d2:f3:24:1d:46:
ee:9c:6c:2d:b3:cd:18:d1:2d:5e:6a:5b:a8:92:60:
5e:a8:29:d2:0b:25:57:e2:12:a3:c6:8e:2b:87:20:
83:c5:ae:0f:78:06:30:c9:df:db:6f:3b:53:a2:7b:
08:f7:44:47:e5:80:28:2e:30:f0:fb:b1:1a:04:79:
9e:5f:67:cc:93:9b:33:f5:27:32:6b:05:b3:07:93:
de:52:75:b3:b5:67:30:23:2a:e3:1c:54:65:6d:32:
0b:1c:38:99:12:25:0e:d8:ca:11:c6:0b:ed:58:61:
96:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:31:85:19:3F:DE:67:7C:A3:B9:4B:7A:95:B3:73:F7:B8:0D:D5:66
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cjGFGT_eZ3yjuUt6lbNz97gN1WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.84.0/22
91.242.64.0/22
91.242.123.0/24
91.242.125.0/24
91.242.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d0:39:f2:52:83:47:56:0e:b5:1d:d8:5b:cf:4b:67:c8:d4:
df:32:83:fd:0d:99:08:37:52:e1:f9:4b:fa:f6:63:bc:5d:54:
0a:c6:4d:cf:60:3d:29:cd:0b:2b:1a:f1:7f:13:fa:14:ad:6e:
1c:e7:10:48:cc:98:18:a7:d2:e1:38:b2:70:00:91:97:7b:ae:
7a:d4:8d:e8:b3:c6:f5:7b:9a:a6:19:af:ee:24:93:c9:27:76:
7e:fd:22:a0:d0:f1:b8:15:f9:4d:04:e8:fe:fc:6f:e4:95:71:
73:3c:96:59:cf:96:d5:6c:ab:8f:93:47:41:67:3e:52:64:3b:
b1:92:de:df:04:67:f5:39:53:2f:68:9a:ef:2b:21:fc:3c:e0:
58:5b:cf:7e:c4:0e:da:e9:68:fc:7c:7f:6f:13:82:d5:a2:8e:
f9:ea:25:30:4f:39:17:df:e6:02:e7:e3:4e:76:6e:b5:88:62:
04:71:51:ed:58:60:6f:9d:aa:5e:12:a8:2a:12:61:9d:82:da:
5e:c8:6a:52:df:2e:9c:13:e8:79:9b:6f:a2:44:3b:cc:f0:4c:
96:fa:04:f3:ac:ae:08:18:4a:95:59:4b:fd:5b:5c:23:78:a6:
7f:a1:85:e7:78:f2:63:81:9b:90:f0:54:16:41:68:a7:d3:9a:
43:38:bc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:33 2025 by rpki-client