Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/_JxuUmQNn1m3KtCimjG9Vgr7i_M.roa
File: _JxuUmQNn1m3KtCimjG9Vgr7i_M.roa (raw, json)
Hash identifier: hJQU6rbuZYGS1pkrfUwG7QwSC6DVL5unzpcEQ2Wukds=
Subject key identifier: FC:9C:6E:52:64:0D:9F:59:B7:2A:D0:A2:9A:31:BD:56:0A:FB:8B:F3
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 0194266B9270128C02A40A8C53E1C7431839
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/_JxuUmQNn1m3KtCimjG9Vgr7i_M.roa
Signing time: Thu 02 Jan 2025 09:49:31 +0000
ROA not before: Thu 02 Jan 2025 09:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35830
IP address blocks: 45.80.106.0/23 maxlen: 23
45.140.204.0/23 maxlen: 23
212.119.40.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:92:70:12:8c:02:a4:0a:8c:53:e1:c7:43:18:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 2 09:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc9c6e52640d9f59b72ad0a29a31bd560afb8bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bc:41:d2:4d:18:82:ce:54:4c:a1:40:3f:6e:
cd:9f:71:f3:48:ab:d1:ef:0d:32:4a:71:b7:ff:c6:
ad:3e:6d:cb:2b:74:b0:b7:b9:30:16:28:7f:80:07:
fd:32:1d:67:7f:e4:5c:18:fe:45:b1:1f:76:87:ad:
e5:1b:cb:6b:9d:a3:aa:f5:56:ff:70:69:9a:2d:59:
c9:cf:3a:46:44:54:09:6b:24:23:13:4f:f4:8c:0b:
a8:23:bb:4d:b6:0a:a6:5c:2c:8e:14:b2:fe:e7:3a:
de:e3:50:01:57:f3:4c:33:5f:2a:24:25:7d:29:52:
30:a6:69:26:d2:5f:c6:0a:60:ec:86:c1:d3:ac:54:
cc:ca:8c:5c:49:73:6b:19:29:a0:ac:54:5f:24:00:
c2:fa:88:ec:94:7a:28:d4:8f:af:61:c4:cb:9f:09:
eb:56:d0:7e:d1:ed:88:de:58:4b:1d:1e:77:09:3b:
52:83:53:7a:1f:99:c2:7e:3d:40:dd:be:0f:af:83:
86:90:43:06:ba:2d:17:96:b9:44:21:7c:18:79:b2:
0f:bf:2a:be:1f:08:7a:f7:71:ce:9d:ef:60:ac:28:
5d:fa:45:e1:23:c9:69:30:7e:a2:4d:d8:27:78:16:
78:b7:b2:58:5d:0b:03:b8:f6:9d:65:79:e0:a9:91:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9C:6E:52:64:0D:9F:59:B7:2A:D0:A2:9A:31:BD:56:0A:FB:8B:F3
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/_JxuUmQNn1m3KtCimjG9Vgr7i_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.106.0/23
45.140.204.0/23
212.119.40.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:7d:71:97:da:80:95:e3:a4:62:b6:c5:8a:d2:66:84:2f:b9:
d0:39:08:2e:4e:71:0f:69:1f:96:d6:ce:de:1d:04:4c:db:38:
24:e4:ee:38:18:16:9d:e2:97:42:80:78:af:44:44:5e:29:d8:
f6:8a:c9:d1:6f:7b:ad:6b:11:81:ad:f2:cd:49:43:21:09:da:
16:3c:df:24:38:ea:4d:f2:d6:54:7b:d5:9d:62:e5:b4:0c:70:
e5:e5:66:19:3f:70:d2:d0:b2:20:67:cb:06:a9:5d:3e:d1:29:
48:92:6a:ec:ea:e0:36:37:a6:3c:c7:9f:d4:72:04:dc:40:06:
77:40:0c:f9:bc:a0:5a:ca:3b:6a:28:cc:be:9b:19:c5:7c:1d:
86:9c:a2:3b:3d:a8:4e:34:b0:ce:c7:36:4b:06:60:57:15:f9:
c4:13:32:3e:5f:51:25:c7:41:6a:6f:1a:26:ed:cf:45:02:7e:
3b:42:e6:59:d2:eb:1d:df:9f:9a:9b:28:c2:09:e7:4b:81:7f:
60:86:c5:f5:94:a0:c5:05:62:aa:2d:6c:58:bb:d5:47:c4:57:
d2:6b:34:82:66:2d:6d:3a:41:e6:2a:81:d9:2f:e0:0d:d4:c1:
ce:cd:ba:99:1b:6d:f3:d2:be:6f:3e:03:e7:b3:2c:e3:d8:74:
9c:b5:3f:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:37:18 2025 by rpki-client