Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/jb02JJwx14XsSOk0aF2b5W_k8F0.roa
File: jb02JJwx14XsSOk0aF2b5W_k8F0.roa (raw, json)
Hash identifier: HLiB+5ejtHpR2cP+DAT03qLHsRzQuMv58Rd2KwDkmmM=
Subject key identifier: 8D:BD:36:24:9C:31:D7:85:EC:48:E9:34:68:5D:9B:E5:6F:E4:F0:5D
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 019421438989DD3CD5F1CE15E21CD0BFEA77
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/jb02JJwx14XsSOk0aF2b5W_k8F0.roa
Signing time: Wed 01 Jan 2025 09:47:41 +0000
ROA not before: Wed 01 Jan 2025 09:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 45.143.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:89:89:dd:3c:d5:f1:ce:15:e2:1c:d0:bf:ea:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jan 1 09:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dbd36249c31d785ec48e934685d9be56fe4f05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4e:46:3f:87:fa:6e:c3:51:e5:5d:bd:8c:e5:
06:dc:1a:98:98:7e:d6:73:b4:36:39:7b:05:80:5c:
3b:0e:bc:ca:fc:37:4c:09:b3:29:ab:a1:61:f1:00:
d5:71:62:e5:8b:0d:2e:d1:d2:ba:82:5c:e1:67:fb:
25:45:db:00:27:77:70:04:43:84:de:12:97:e2:d5:
07:7e:98:b1:c8:cd:6b:c0:82:33:e7:56:2c:86:3d:
ee:2e:34:5d:8d:33:c1:af:1f:3b:19:80:74:d1:5c:
81:1b:6c:ac:35:3e:ee:1c:26:aa:07:d2:09:aa:40:
44:24:6e:ed:b3:b6:81:de:5e:1a:f5:c7:89:21:48:
30:16:86:2b:a4:41:40:4f:fc:78:d8:91:6f:c0:a8:
9a:e1:b8:78:f2:61:53:ba:85:a3:d5:ce:42:84:44:
2b:5b:89:60:2a:a7:3a:c6:3c:15:80:eb:e1:9c:77:
dd:50:bb:f4:9e:39:f4:ab:ca:63:12:2c:53:75:fb:
2f:63:8d:92:f8:77:83:fa:26:6b:df:e4:5e:fc:13:
b9:13:ff:31:7c:4c:83:8a:ac:d4:f4:b2:0b:50:2b:
7c:5d:19:a1:e0:f1:8d:9b:f9:cf:d2:99:2b:09:03:
1c:40:4c:67:b9:44:c2:21:ce:ed:da:29:8c:46:09:
f3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:36:24:9C:31:D7:85:EC:48:E9:34:68:5D:9B:E5:6F:E4:F0:5D
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/jb02JJwx14XsSOk0aF2b5W_k8F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.11.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:04:b0:8e:5d:9b:91:5c:43:59:66:cb:c7:dd:88:cb:eb:d4:
bd:ca:f0:b1:cb:42:d8:ff:cc:6b:cc:34:5b:3d:9a:82:b0:89:
ba:b4:d9:54:70:e1:a4:b3:28:5c:c8:7e:17:98:35:98:52:e1:
f9:ee:d9:58:ae:8a:fa:4b:b0:58:59:80:f2:90:22:29:a6:5d:
07:29:44:95:73:2e:3c:f8:2a:1e:fc:61:20:42:5b:82:51:7a:
66:a3:00:1f:ce:d0:df:24:13:c3:d9:71:5c:a4:07:d5:42:08:
c4:ba:ec:2f:14:f8:24:64:32:5c:e8:66:95:2d:97:5f:6f:1f:
94:9b:fa:ad:e1:d2:b5:e4:c3:fb:22:de:25:08:90:3a:b5:04:
f5:69:1f:03:6c:7a:17:53:4d:a1:e3:43:fb:1c:94:66:c1:ba:
78:e5:4b:cd:39:ef:d7:f0:b8:d5:73:7c:55:01:d9:65:e0:ed:
90:d6:71:6d:1c:cf:7c:cc:b4:53:22:7a:71:6e:93:86:a9:77:
c7:34:c4:24:5e:49:4e:52:7c:91:f7:0a:81:06:88:19:78:26:
d7:5f:79:7c:6f:bb:96:0a:2b:d8:95:55:93:a6:09:8f:e1:f9:
9e:9f:25:01:01:b2:97:34:81:cb:96:ca:eb:1a:6c:52:f4:da:
1a:55:fe:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:47 2025 by rpki-client