Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa
File: JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa (raw, json)
Hash identifier: kV6T9GvL2JmIx9RKefMlHDbvnYr8DiGL3xFPvQ3Jx8U=
Subject key identifier: 24:F3:BA:3E:56:CE:ED:3D:A5:C4:E5:F0:ED:52:9B:44:CD:86:7B:94
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0194236A48E823596761D4B09D3AA118F362
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201838
IP address blocks: 45.90.200.0/22 maxlen: 24
45.145.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:48:e8:23:59:67:61:d4:b0:9d:3a:a1:18:f3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24f3ba3e56ceed3da5c4e5f0ed529b44cd867b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:21:1f:60:d8:1e:f1:0e:2b:5c:a1:48:bb:
6e:6e:3d:e3:02:cf:db:d3:8d:ac:05:95:2c:2a:b0:
44:10:a3:ec:fc:76:a8:dc:da:f5:04:36:6e:d4:cd:
fc:91:4e:be:74:26:46:83:83:a8:5a:ab:d9:77:5c:
04:13:0b:63:82:8a:95:38:b8:24:5d:17:55:53:a4:
be:53:94:5a:d9:a9:29:90:37:74:c9:1c:2d:d1:50:
7c:5e:79:1c:49:bf:3a:10:84:f1:39:0a:ce:71:54:
9b:c2:a8:3a:a0:b9:49:39:94:3d:52:0d:9d:56:ba:
26:89:e4:32:eb:45:00:3f:13:90:75:ac:4d:9a:2f:
8b:c2:7d:2c:ad:81:c1:a8:a9:1c:56:d9:7e:d3:75:
44:fa:d7:89:b3:36:ad:43:96:03:93:54:1c:41:d4:
6b:4c:80:1f:c5:a0:b3:70:ed:bc:7c:23:8c:a6:89:
7e:55:14:95:07:88:35:4a:a0:1a:57:6e:a4:0a:75:
9f:0f:24:ba:23:c1:68:2f:78:ff:3f:09:c1:38:d6:
5f:77:00:f8:b8:c7:f8:49:b5:6b:bb:d7:5d:08:d3:
91:9e:1f:f3:40:21:20:8a:8b:84:98:d2:c2:78:47:
69:6a:15:86:1b:49:9d:f4:76:69:79:fa:1a:aa:d4:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F3:BA:3E:56:CE:ED:3D:A5:C4:E5:F0:ED:52:9B:44:CD:86:7B:94
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.200.0/22
45.145.148.0/22
Signature Algorithm: sha256WithRSAEncryption
10:e0:e8:05:42:ca:3d:67:8e:76:18:a7:af:1b:46:04:94:57:
e7:5d:62:42:17:dd:01:7d:b5:49:31:05:db:16:13:35:71:df:
f0:42:b1:9b:d9:42:d8:42:7f:f1:aa:6b:db:a5:e5:60:99:d1:
f9:1f:ac:b9:e1:f9:f5:22:03:93:01:d4:6c:72:92:82:94:e9:
88:08:49:0b:40:35:b8:89:9d:46:88:3e:02:2c:82:33:30:11:
c7:f4:33:c5:fb:55:2b:ed:c8:59:49:6a:5c:85:1a:85:8f:41:
24:b1:87:2f:93:2d:70:5a:16:91:a8:d8:b6:c4:b0:7d:9d:97:
1c:97:a2:f3:36:05:5b:95:2e:f5:0e:09:37:5f:b0:bb:0a:b6:
c1:f8:9d:14:46:65:f9:39:22:e5:f6:94:a3:bf:4c:52:3a:95:
b7:74:d8:de:d7:3f:be:6f:ad:80:8e:ae:b5:0c:13:7f:75:a2:
d5:9a:b2:93:24:12:1f:4c:1d:5e:fd:8b:4d:9b:cc:bb:de:39:
16:71:81:b2:c1:3b:06:e9:26:f7:14:da:96:8c:8b:f1:fb:f7:
7b:13:4d:0f:fa:71:a2:e3:5a:31:34:dd:88:b3:d5:40:fd:71:
f6:ea:99:12:32:65:26:a1:de:56:95:c4:ff:5d:06:25:9e:10:
62:03:82:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:04 2025 by rpki-client