Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/RNJp3-8zs5Ufa0YCWb6GL5c67xY.roa
File: RNJp3-8zs5Ufa0YCWb6GL5c67xY.roa (raw, json)
Hash identifier: AkAAXZZH6qfrjoWZDqrNIdzgkFtLYVYtc1z/tLn9KJQ=
Subject key identifier: 44:D2:69:DF:EF:33:B3:95:1F:6B:46:02:59:BE:86:2F:97:3A:EF:16
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01904B69FA0D0052A62DA004CFCB2051E65D
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/RNJp3-8zs5Ufa0YCWb6GL5c67xY.roa
Signing time: Mon 24 Jun 2024 18:02:34 +0000
ROA not before: Mon 24 Jun 2024 18:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3758
IP address blocks: 45.86.188.0/23 maxlen: 24
80.94.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4b:69:fa:0d:00:52:a6:2d:a0:04:cf:cb:20:51:e6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jun 24 18:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44d269dfef33b3951f6b460259be862f973aef16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:81:d2:22:7d:c7:e5:7a:f9:c1:53:39:f7:
49:20:55:36:f7:ae:fa:1b:34:a9:51:fa:62:cd:e1:
ec:4c:63:3b:0e:a1:28:f2:54:8f:1b:7c:99:29:e8:
ac:8e:9e:e1:82:33:71:97:d5:60:dd:8e:54:82:8c:
50:79:be:85:37:6f:cc:48:f9:b9:87:3b:f6:de:aa:
7a:9f:6f:74:62:79:d5:b6:df:0a:ec:4d:d2:95:4c:
9a:9f:cb:1e:ea:b5:db:a2:a0:47:af:fc:7d:80:a6:
5e:89:5d:67:2d:58:2d:12:ef:1a:b4:6a:f7:94:16:
9c:20:a9:a7:5c:f2:61:bd:a2:fd:ad:81:17:3a:12:
31:e9:63:f7:6d:26:4c:a8:25:e4:70:5d:ca:b8:bd:
28:1d:7d:7b:d2:5e:fd:ba:f0:ce:e2:b8:b9:c1:f7:
6b:cc:b6:c8:7a:ec:53:b7:b0:8f:40:81:c1:78:96:
81:98:ed:9e:04:a1:28:d1:eb:00:80:b8:29:3d:9d:
9a:d1:3f:3a:a8:70:8f:75:94:a5:0f:15:ee:92:e4:
a7:b6:84:c2:8e:ec:4c:c2:79:af:97:b9:5c:36:75:
76:3a:39:60:96:92:b9:6c:08:c8:2f:a1:3d:04:13:
48:5e:51:58:f4:2f:ed:26:97:d1:23:be:7e:82:90:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D2:69:DF:EF:33:B3:95:1F:6B:46:02:59:BE:86:2F:97:3A:EF:16
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/RNJp3-8zs5Ufa0YCWb6GL5c67xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.188.0/23
80.94.89.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c6:04:f9:21:ad:94:36:56:2e:9a:f1:a6:e1:93:e4:17:57:
63:ed:c5:cc:90:85:d6:7a:de:93:54:4e:9b:54:29:ea:47:9c:
5c:07:bc:6a:d2:70:62:1e:c5:74:ce:57:95:51:2d:b5:b1:c9:
20:bd:28:c6:12:ba:84:46:f2:19:ad:e7:c9:d1:6f:40:7d:64:
96:4d:86:fb:d3:db:91:be:30:50:e6:80:cf:92:0a:0d:19:ad:
99:fc:63:f3:c5:f0:02:9d:bd:5b:14:2a:02:f4:35:8c:3a:81:
c8:30:2d:28:17:8f:69:34:04:9a:85:d0:c5:76:b2:99:70:fd:
51:26:5b:2d:0f:ff:b5:00:96:34:f9:cc:6f:51:81:11:4a:ae:
1e:23:81:11:bc:90:e0:51:95:b2:94:61:02:39:06:05:b5:b6:
0c:50:97:ea:da:a5:14:67:ea:0d:ee:96:8f:87:34:7f:af:39:
78:53:4d:5d:3c:3b:90:f4:d7:3a:db:2c:9b:22:57:b5:ba:88:
21:7d:38:74:49:52:61:d4:c1:fe:ae:16:ff:f1:50:96:4d:6c:
14:9e:5c:83:35:08:79:30:9f:72:83:cf:60:a2:9b:60:d1:00:
8b:82:b4:24:95:d1:55:5c:bd:c8:24:f2:44:27:b8:6a:a8:40:
b5:32:d1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:50 2025 by rpki-client