Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e1b949-f609-47fc-81c9-36fdadbaaa67/1/jRLurUOBQwgDEMy2aLLekpCfWOw.roa
File: jRLurUOBQwgDEMy2aLLekpCfWOw.roa (raw, json)
Hash identifier: t4uwiCeaMz5P6GadyhDaQqS90UbaDJHRySqzW3Uua9A=
Subject key identifier: 8D:12:EE:AD:43:81:43:08:03:10:CC:B6:68:B2:DE:92:90:9F:58:EC
Certificate issuer: /CN=bdf03f5de72cd90d6039a935865deabf8d56b622
Certificate serial: 0182DE57733CDA91CC2CD3A531F80AFF3FE9
Authority key identifier: BD:F0:3F:5D:E7:2C:D9:0D:60:39:A9:35:86:5D:EA:BF:8D:56:B6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfA_Xecs2Q1gOak1hl3qv41WtiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e1b949-f609-47fc-81c9-36fdadbaaa67/1/jRLurUOBQwgDEMy2aLLekpCfWOw.roa
Signing time: Sat 27 Aug 2022 08:07:29 +0000
ROA not before: Sat 27 Aug 2022 08:07:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.143.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:de:57:73:3c:da:91:cc:2c:d3:a5:31:f8:0a:ff:3f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf03f5de72cd90d6039a935865deabf8d56b622
Validity
Not Before: Aug 27 08:07:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d12eead438143080310ccb668b2de92909f58ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:75:2c:23:79:de:d2:d7:17:90:ea:69:02:
92:ae:09:13:20:2d:85:37:82:a9:1c:b2:97:b6:66:
15:e3:13:81:3d:42:5c:87:85:69:c5:d4:ce:28:10:
18:39:31:a2:03:6b:0f:42:0a:60:20:a9:48:09:f6:
ea:fc:50:0d:98:72:ef:dc:2a:37:26:d6:f0:9c:0f:
0d:aa:50:8e:6e:7d:ff:4e:34:ee:c7:f4:0d:83:5e:
b9:3e:95:42:df:8b:6d:93:ed:14:40:23:f3:38:df:
a2:61:71:db:45:9b:07:93:49:4e:a9:4d:46:65:91:
f6:72:e3:e5:44:49:87:4c:73:60:a8:10:fc:ef:64:
00:82:47:d0:28:7c:ad:0d:20:b3:56:bf:9e:8e:aa:
2d:86:99:6e:f9:29:75:4d:c1:15:4a:fc:d1:4f:3b:
30:32:6c:51:1b:14:97:1f:00:41:db:cd:33:d7:32:
87:05:5b:4b:b5:7a:be:a0:51:e4:d1:aa:04:69:8f:
97:f9:d4:f2:f8:62:ab:4f:03:52:74:72:d9:1f:7f:
00:65:5e:76:1f:a4:f6:ef:ae:40:90:b9:3e:d7:65:
59:74:1a:84:b2:6b:e0:15:25:b0:50:9b:53:00:b2:
95:c1:8d:70:cd:7e:ee:6f:d0:62:f5:18:db:f1:36:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:12:EE:AD:43:81:43:08:03:10:CC:B6:68:B2:DE:92:90:9F:58:EC
X509v3 Authority Key Identifier:
keyid:BD:F0:3F:5D:E7:2C:D9:0D:60:39:A9:35:86:5D:EA:BF:8D:56:B6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfA_Xecs2Q1gOak1hl3qv41WtiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e1b949-f609-47fc-81c9-36fdadbaaa67/1/jRLurUOBQwgDEMy2aLLekpCfWOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e1b949-f609-47fc-81c9-36fdadbaaa67/1/vfA_Xecs2Q1gOak1hl3qv41WtiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.100.0/22
Signature Algorithm: sha256WithRSAEncryption
02:c9:89:55:0d:ab:d1:3f:a8:4f:62:0c:d5:88:60:13:25:3c:
e0:a7:45:a3:8a:bc:5b:e5:07:cc:14:90:8d:06:da:28:fa:2c:
96:d5:5d:1e:91:91:12:69:24:af:39:09:2b:65:ce:67:54:37:
ef:36:d8:87:a2:0c:87:86:04:54:2b:aa:bb:d4:4d:60:00:49:
f6:66:f9:83:6b:eb:4d:42:9e:40:f3:46:1e:3b:b7:41:54:e8:
25:b8:93:e2:f6:b6:31:28:aa:6a:b8:12:2a:dd:d7:4a:95:68:
27:f6:1d:39:c5:62:21:f1:2f:7d:ba:c3:70:a4:a7:53:7b:90:
bc:dc:7c:0a:6d:56:82:0c:ce:b1:62:90:24:99:f5:9d:36:2f:
30:b5:a2:93:4d:eb:99:76:0d:11:7c:57:0e:0e:4a:45:8b:0c:
cf:25:f7:5e:0b:10:48:98:89:19:27:13:bb:5c:f6:57:1d:dd:
af:0b:84:d7:b2:3f:4d:77:e6:40:7a:a0:0a:cf:66:3a:3d:7f:
94:e6:9a:0e:dc:16:67:e0:a0:d6:89:5c:ff:1f:05:07:02:d4:
f3:aa:0b:bc:59:d7:c2:ce:6c:15:4c:e1:73:3d:ee:0b:ac:22:
a8:e0:a1:90:01:e4:3f:7c:95:87:f8:59:77:11:94:f6:c3:72:
e1:f0:0c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:42 2025 by rpki-client