Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/JSLeIVxOxffOteQor6b_hZork5g.roa
File: JSLeIVxOxffOteQor6b_hZork5g.roa (raw, json)
Hash identifier: DwHKFw/7xFHoNlIh8iUs64KigZ3rxizVzdTEwhQRm88=
Subject key identifier: 25:22:DE:21:5C:4E:C5:F7:CE:B5:E4:28:AF:A6:FF:85:9A:2B:93:98
Certificate issuer: /CN=e9ccdf695989379f3984c18641e937ebb682259b
Certificate serial: 018E148B0DD1B9322299646AAB8545997D9B
Authority key identifier: E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/JSLeIVxOxffOteQor6b_hZork5g.roa
Signing time: Wed 06 Mar 2024 16:14:01 +0000
ROA not before: Wed 06 Mar 2024 16:14:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.9.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:8b:0d:d1:b9:32:22:99:64:6a:ab:85:45:99:7d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ccdf695989379f3984c18641e937ebb682259b
Validity
Not Before: Mar 6 16:14:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2522de215c4ec5f7ceb5e428afa6ff859a2b9398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:5c:3e:d8:fb:58:1f:93:00:e5:28:87:15:
f7:79:8e:75:0b:9e:16:5b:4b:da:bd:7c:87:ff:ed:
78:38:a3:8e:27:10:9c:cc:01:5f:dc:eb:86:a4:fd:
20:7b:00:a6:38:cb:09:f3:ea:85:80:d4:c6:fb:59:
ea:81:23:d8:cb:3c:52:86:38:e4:f4:83:5f:a1:10:
7a:8b:f6:6f:cb:5b:90:15:7b:16:00:60:f3:17:31:
6f:b7:bc:ea:e7:bc:cf:e8:42:44:1f:1e:67:92:b9:
30:ab:a6:30:16:e0:48:e8:ab:0b:28:c8:56:0b:f5:
d4:ea:81:33:ee:3d:03:13:e1:9c:2d:01:8c:33:f2:
e6:d8:aa:06:0b:2b:ea:09:4c:8e:40:f0:16:41:79:
04:89:51:8e:71:f9:c4:80:a8:24:b5:ff:c3:89:ac:
33:76:4a:55:e0:1e:e5:a2:9f:49:73:9c:e3:1d:bd:
b2:30:c9:12:8a:13:a1:52:fe:d3:92:d4:b7:61:2a:
7c:69:6a:d7:91:58:a5:9f:43:10:c9:03:0e:b5:ec:
99:8b:51:6e:38:6b:19:fb:20:41:e3:01:f0:ce:f0:
41:bb:6d:ac:91:b7:c6:e1:2e:f0:19:33:1a:41:b9:
f3:67:72:1b:bf:7e:e6:17:e7:ca:26:ea:6f:d7:24:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:22:DE:21:5C:4E:C5:F7:CE:B5:E4:28:AF:A6:FF:85:9A:2B:93:98
X509v3 Authority Key Identifier:
keyid:E9:CC:DF:69:59:89:37:9F:39:84:C1:86:41:E9:37:EB:B6:82:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6czfaVmJN585hMGGQek367aCJZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/JSLeIVxOxffOteQor6b_hZork5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a00641-3084-41e2-90a6-b35f6a7b7208/1/6czfaVmJN585hMGGQek367aCJZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.128.0/23
Signature Algorithm: sha256WithRSAEncryption
41:86:7d:f2:db:38:a2:36:28:6f:57:82:f1:01:81:ff:3f:e7:
b6:dd:4c:09:40:f9:00:8b:c8:78:8c:e0:9b:58:a5:2d:85:e1:
57:07:b6:56:68:c8:e0:1e:92:39:9d:4f:3f:f9:f9:59:7b:46:
aa:e7:26:fb:03:3b:df:87:05:24:83:8d:55:59:7b:aa:b7:45:
ac:68:78:7b:b9:7b:ad:7d:78:3a:cb:5c:32:fb:27:36:1f:3f:
1d:bb:88:4d:a9:83:40:b2:54:8b:a9:65:84:33:37:7b:e0:d1:
81:48:4a:2d:37:b8:3b:81:2d:42:be:17:6b:5e:df:c1:93:70:
02:cc:0c:85:db:4e:23:9b:99:8d:d2:3b:dc:6d:97:98:11:5c:
e0:ad:88:b9:6b:ea:15:86:0f:b4:a9:c1:12:d6:f4:dc:25:a8:
f3:e9:25:c8:47:37:35:70:6e:52:8c:27:7f:95:97:48:ae:14:
2b:02:45:51:29:58:ec:94:98:e9:8c:bf:38:cb:78:89:bc:50:
98:aa:9e:bb:cf:47:61:96:98:ff:fe:a0:4c:cf:fe:66:f5:52:
d1:7e:22:08:42:90:79:58:ec:c5:97:c7:ad:ff:a3:ca:cb:2b:
e7:35:15:3b:67:35:2e:83:c7:0b:fc:f4:5c:f7:4e:cd:ff:1e:
a6:c3:3b:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4Uiw3RuTIimWRqq4VFmX2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Y2NkZjY5NTk4OTM3OWYzOTg0YzE4NjQxZTkzN2ViYjY4
MjI1OWIwHhcNMjQwMzA2MTYxNDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTIyZGUyMTVjNGVjNWY3Y2ViNWU0MjhhZmE2ZmY4NTlhMmI5Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV9cPtj7WB+TAOUohxX3eY51C54W
W0vavXyH/+14OKOOJxCczAFf3OuGpP0gewCmOMsJ8+qFgNTG+1nqgSPYyzxShjjk
9INfoRB6i/Zvy1uQFXsWAGDzFzFvt7zq57zP6EJEHx5nkrkwq6YwFuBI6KsLKMhW
C/XU6oEz7j0DE+GcLQGMM/Lm2KoGCyvqCUyOQPAWQXkEiVGOcfnEgKgktf/Diawz
dkpV4B7lop9Jc5zjHb2yMMkSihOhUv7TktS3YSp8aWrXkViln0MQyQMOteyZi1Fu
OGsZ+yBB4wHwzvBBu22skbfG4S7wGTMaQbnzZ3Ibv37mF+fKJupv1yS/rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCUi3iFcTsX3zrXkKK+m/4WaK5OYMB8GA1UdIwQY
MBaAFOnM32lZiTefOYTBhkHpN+u2giWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmN6ZmFWbUpONTg1aE1HR1FlazM2N2FDSlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9hMDA2NDEtMzA4NC00MWUyLTkwYTYt
YjM1ZjZhN2I3MjA4LzEvSlNMZUlWeE94ZmZPdGVRb3I2Yl9oWm9yazVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9hMDA2NDEtMzA4NC00MWUyLTkwYTYtYjM1ZjZhN2I3MjA4
LzEvNmN6ZmFWbUpONTg1aE1HR1FlazM2N2FDSlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQmAMA0G
CSqGSIb3DQEBCwUAA4IBAQBBhn3y2ziiNihvV4LxAYH/P+e23UwJQPkAi8h4jOCb
WKUtheFXB7ZWaMjgHpI5nU8/+flZe0aq5yb7AzvfhwUkg41VWXuqt0WsaHh7uXut
fXg6y1wy+yc2Hz8du4hNqYNAslSLqWWEMzd74NGBSEotN7g7gS1CvhdrXt/Bk3AC
zAyF204jm5mN0jvcbZeYEVzgrYi5a+oVhg+0qcES1vTcJajz6SXIRzc1cG5SjCd/
lZdIrhQrAkVRKVjslJjpjL84y3iJvFCYqp67z0dhlpj//qBMz/5m9VLRfiIIQpB5
WOzFl8et/6PKyyvnNRU7ZzUug8cL/PRc907N/x6mwzv2
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:22:10 2025 by rpki-client