Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/72Lp3gMgXLCMsbrlXXDr5SM4zrw.roa
File: 72Lp3gMgXLCMsbrlXXDr5SM4zrw.roa (raw, json)
Hash identifier: adAz3jIZPGF9iKKNN5t8HD+ygmv2PMwG3grTyntjKTs=
Subject key identifier: EF:62:E9:DE:03:20:5C:B0:8C:B1:BA:E5:5D:70:EB:E5:23:38:CE:BC
Certificate issuer: /CN=241455f852c6ad4a0412e5ea308aa66172d1d147
Certificate serial: 01941FFA3334A4E34F56D325D2936851B4EF
Authority key identifier: 24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/72Lp3gMgXLCMsbrlXXDr5SM4zrw.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 46.20.80.0/20 maxlen: 24
185.159.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:33:34:a4:e3:4f:56:d3:25:d2:93:68:51:b4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241455f852c6ad4a0412e5ea308aa66172d1d147
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef62e9de03205cb08cb1bae55d70ebe52338cebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:90:82:0c:d1:b5:36:94:05:39:a8:42:92:
87:f8:80:b7:98:ec:73:b1:97:c6:2a:b8:98:a2:44:
b8:13:17:08:ab:26:8a:11:1e:48:d0:17:5a:97:99:
2f:d6:06:b2:05:2b:6d:78:4c:21:e4:71:2b:2f:35:
b9:4f:74:c6:20:52:f1:35:23:15:4d:36:ad:ec:28:
42:e5:6c:fc:d9:1f:0b:fd:f3:0f:39:0a:c7:52:a8:
7f:4d:d3:13:40:15:94:f9:c6:01:a2:12:39:45:fc:
8e:72:31:79:28:8c:17:73:87:9e:9e:3e:9f:dc:cd:
61:f7:d0:7c:75:87:75:18:be:de:9f:b2:2e:62:fa:
35:f1:61:65:8d:e7:62:72:73:22:14:52:63:25:2c:
36:de:27:57:91:c6:54:48:36:cd:f5:61:0c:77:bc:
b6:5e:24:41:20:d5:1a:e2:cb:7c:45:13:ae:27:87:
d5:76:2f:d3:55:30:70:d1:22:7a:96:5a:18:fc:b9:
5e:ce:19:c6:74:b2:cb:02:d6:04:a7:9d:b8:f3:47:
64:8a:f2:81:bb:45:b8:94:06:f6:63:1b:a2:58:93:
e5:fd:88:8e:d2:08:05:f2:6c:c0:93:b5:21:5a:f1:
e9:9a:31:42:96:aa:4a:5f:85:dd:27:72:d8:ea:7c:
32:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:62:E9:DE:03:20:5C:B0:8C:B1:BA:E5:5D:70:EB:E5:23:38:CE:BC
X509v3 Authority Key Identifier:
keyid:24:14:55:F8:52:C6:AD:4A:04:12:E5:EA:30:8A:A6:61:72:D1:D1:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/72Lp3gMgXLCMsbrlXXDr5SM4zrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/90add8-f3be-48a8-9e92-3b32c19f6385/1/JBRV-FLGrUoEEuXqMIqmYXLR0Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.80.0/20
185.159.52.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:13:cd:26:51:99:f2:08:3e:4a:7d:4d:5c:26:88:bd:db:29:
d2:df:8c:3a:a7:fe:b4:bf:1f:06:0f:70:33:d4:88:89:e5:d2:
15:73:2d:ab:1f:ec:d6:40:03:fa:e4:d7:db:45:18:dd:77:3e:
3c:be:0a:ae:c4:78:13:95:87:93:10:a5:04:de:aa:9f:0d:c6:
64:56:4a:79:9f:92:6d:46:94:48:4f:cb:51:62:26:a3:b4:e0:
bd:07:62:e9:68:6b:4f:e2:10:ce:88:c3:d4:ec:8b:59:95:59:
b8:74:75:95:e4:b3:4c:fb:97:ef:05:10:6a:02:dc:d7:1e:85:
94:1a:48:24:37:76:84:ef:f4:7c:7e:27:e0:90:63:66:9e:d0:
0a:4a:98:0e:76:ff:51:8f:95:b4:f4:94:55:4d:db:66:b2:df:
4d:b5:b9:db:c8:36:7a:89:4a:a0:10:ef:69:67:f7:ff:b5:4b:
90:db:cb:94:21:c3:cf:36:76:2a:9e:a3:9b:6a:80:cd:01:39:
2e:65:97:37:e6:fe:b9:91:b0:41:08:92:45:f6:de:2e:0f:41:
e6:cd:84:6f:84:6e:6a:f5:44:fb:b7:2e:1b:51:d5:57:26:c6:
d4:52:09:41:79:56:2a:1c:45:1f:ed:90:4d:c4:d7:86:d6:3e:
81:9c:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:48 2025 by rpki-client