Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/jhG-vTkdlpjYguSrH-CSircoeWs.roa
File: jhG-vTkdlpjYguSrH-CSircoeWs.roa (raw, json)
Hash identifier: cAgke9T307bzVBpaLZZN0F2a8YsAVtB5/LiObhYKPs4=
Subject key identifier: 8E:11:BE:BD:39:1D:96:98:D8:82:E4:AB:1F:E0:92:8A:B7:28:79:6B
Certificate issuer: /CN=d4b39fc8a53be1dc674b6da755e86110952174e4
Certificate serial: 018CC86F17991E71E52F0C665E4C634BDED3
Authority key identifier: D4:B3:9F:C8:A5:3B:E1:DC:67:4B:6D:A7:55:E8:61:10:95:21:74:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LOfyKU74dxnS22nVehhEJUhdOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/jhG-vTkdlpjYguSrH-CSircoeWs.roa
Signing time: Tue 02 Jan 2024 04:29:32 +0000
ROA not before: Tue 02 Jan 2024 04:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44326
IP address blocks: 45.154.32.0/23 maxlen: 23
2a0f:a300::/32 maxlen: 32
2a0f:a301::/32 maxlen: 32
2a0f:a304::/32 maxlen: 32
2a0f:a307::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:17:99:1e:71:e5:2f:0c:66:5e:4c:63:4b:de:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b39fc8a53be1dc674b6da755e86110952174e4
Validity
Not Before: Jan 2 04:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e11bebd391d9698d882e4ab1fe0928ab728796b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:12:d2:fc:19:6f:6b:43:90:c6:00:a0:21:
46:43:7b:01:85:49:a2:48:f6:99:39:f9:7f:6c:b9:
42:ab:95:9c:e4:14:a3:ef:0a:26:7c:d0:52:ee:be:
c3:a2:e4:6a:3e:9f:5d:89:fd:72:6b:04:1b:fc:80:
35:09:d3:75:ed:dc:d3:1a:d3:d7:c8:b2:16:28:2f:
05:ba:98:82:16:6a:63:34:35:aa:d7:f6:a7:e3:48:
f8:9d:46:6c:9d:96:a4:80:15:d6:4d:2f:16:e6:52:
6a:76:d5:54:60:a4:1d:1a:e1:d5:c2:1f:40:a4:f0:
ee:e4:49:dc:37:e0:59:36:1a:e5:90:c6:6b:cd:d1:
2f:d2:36:f3:f2:4f:15:06:2d:99:34:bb:1a:64:85:
ca:c7:02:bb:69:b3:d0:7c:bd:d6:1d:1a:cc:32:ca:
93:d3:97:99:97:97:4b:17:b4:af:6d:dc:c9:76:e8:
9d:a8:5b:8b:b7:0b:92:82:3b:4b:e3:b0:33:3f:a4:
0e:10:73:5d:d7:7e:fb:fb:2a:40:d6:62:0c:ee:b1:
d5:49:57:cc:1f:b7:07:b3:43:ce:39:3b:0c:cc:05:
51:34:bc:c2:aa:36:9a:66:12:8f:0b:ba:90:1e:92:
d1:1b:56:6e:e8:1f:84:86:bf:21:89:c5:33:a8:d9:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:BE:BD:39:1D:96:98:D8:82:E4:AB:1F:E0:92:8A:B7:28:79:6B
X509v3 Authority Key Identifier:
keyid:D4:B3:9F:C8:A5:3B:E1:DC:67:4B:6D:A7:55:E8:61:10:95:21:74:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LOfyKU74dxnS22nVehhEJUhdOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/jhG-vTkdlpjYguSrH-CSircoeWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/6bbf55-4d87-4e42-ba5e-e2f93533d6e4/1/1LOfyKU74dxnS22nVehhEJUhdOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.32.0/23
IPv6:
2a0f:a300::/31
2a0f:a304::/32
2a0f:a307::/32
Signature Algorithm: sha256WithRSAEncryption
43:24:67:7b:83:9c:84:33:ab:2a:30:5b:24:6e:dc:6e:56:b3:
10:4b:f7:83:94:7a:f3:59:06:2f:ca:78:6a:1b:88:c2:03:8a:
60:29:98:d1:42:ec:ae:82:1a:80:62:8b:11:7f:6f:9a:b1:44:
73:12:fa:ba:21:f2:da:e8:a7:67:0f:cf:5e:bc:46:b5:e8:35:
8e:23:62:a5:be:38:7b:f4:42:ed:43:02:c2:09:a2:72:f5:66:
99:69:c4:f6:f3:47:ef:cd:3c:b1:e8:48:d9:3f:94:b9:f3:9d:
2a:4a:88:ee:6e:44:42:22:65:37:0f:95:78:c8:d8:c2:69:bc:
16:fc:55:ba:ff:33:7d:9a:55:15:40:80:d3:4d:06:b3:2d:0d:
83:44:60:99:f7:0e:1c:ab:29:31:1d:2e:85:6c:5a:14:1a:8a:
cc:41:15:c1:2c:1e:87:3d:01:75:ee:3e:05:cf:c7:b3:25:3a:
72:df:dc:7d:a4:31:69:c4:57:80:29:94:8c:2a:9b:2d:91:f4:
d8:8b:72:fa:7b:79:16:e2:df:e3:a1:82:8a:f9:47:62:b5:a7:
d2:b9:e8:b5:ee:9d:18:c5:c5:db:23:72:34:cc:19:28:6c:d1:
86:30:e5:fe:f0:84:a2:a7:9f:69:9c:79:f1:fb:05:35:e5:e1:
ed:20:06:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:03 2025 by rpki-client