Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/jj37qJoM-F2DIu2yrpP_u4N4p_Q.roa
File: jj37qJoM-F2DIu2yrpP_u4N4p_Q.roa (raw, json)
Hash identifier: u+aLWBuI4ugoUEiwtD15eBZYraJvR3ZaiYIJKaMcZQM=
Subject key identifier: 8E:3D:FB:A8:9A:0C:F8:5D:83:22:ED:B2:AE:93:FF:BB:83:78:A7:F4
Certificate issuer: /CN=60d0b0207603be43d8492e9851378b8b4f09594f
Certificate serial: 0FABF822
Authority key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/jj37qJoM-F2DIu2yrpP_u4N4p_Q.roa
Signing time: Sat 01 Jan 2022 10:59:25 +0000
ROA not before: Sat 01 Jan 2022 10:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1103
IP address blocks: 145.5.0.0/16 maxlen: 16
130.115.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262928418 (0xfabf822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Validity
Not Before: Jan 1 10:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e3dfba89a0cf85d8322edb2ae93ffbb8378a7f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:78:d4:44:a0:4a:35:1a:33:53:d5:72:43:
01:45:77:cf:4a:a3:8f:9f:9b:84:7c:52:87:b0:72:
8f:fc:4e:8b:ec:a8:c1:33:0b:4f:18:f4:45:1d:05:
0f:20:77:d4:18:85:71:22:88:49:66:18:06:67:58:
c1:f5:d6:46:af:99:25:e5:9c:4e:d6:fe:e2:49:ab:
52:f2:94:43:42:28:50:a8:70:3c:ec:9d:f7:1c:29:
f6:63:c5:55:0b:54:3a:40:a0:3f:47:9c:e4:e3:10:
ae:ec:0c:88:c1:2c:cd:41:69:59:3f:26:fd:2b:d0:
84:d3:9d:ac:1a:d1:55:3b:d1:b7:7d:68:f1:7e:09:
2f:b4:88:39:07:98:18:b1:3f:49:bf:23:51:a6:be:
98:2b:d0:6e:6d:85:4a:8b:62:61:58:40:23:5b:23:
86:81:a6:da:bc:93:c1:e0:bc:b8:de:fa:ae:82:48:
c3:62:ce:d5:8d:c2:f3:81:93:61:52:41:22:6c:95:
35:9f:10:f7:81:de:65:e3:17:68:ac:fa:c6:ca:5a:
27:a9:73:ae:ed:15:bd:3f:da:00:28:c5:c9:0e:0c:
dc:7f:3d:eb:16:d9:7c:39:0b:a3:cd:d5:4b:54:f1:
2a:f3:08:b3:7c:f9:5b:31:46:4a:96:1c:1e:89:72:
58:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3D:FB:A8:9A:0C:F8:5D:83:22:ED:B2:AE:93:FF:BB:83:78:A7:F4
X509v3 Authority Key Identifier:
keyid:60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/jj37qJoM-F2DIu2yrpP_u4N4p_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.115.0.0/16
145.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:69:8d:b6:89:35:fa:f8:55:f1:3e:d1:fd:4f:b2:b3:de:90:
1e:99:33:04:17:d8:43:f5:bd:b8:93:09:df:5a:a3:71:57:9a:
e7:36:e2:06:50:63:b9:df:8a:0b:c7:16:9b:47:dc:32:7d:5d:
b6:8d:8f:e9:69:e4:38:18:d5:69:40:99:bd:da:78:77:1b:2d:
55:f8:f3:68:d3:ed:7e:4b:72:4e:0f:24:ec:6b:a5:04:a3:cf:
b1:a4:65:1c:97:dc:e8:db:25:a1:a5:93:9f:9c:67:af:45:8a:
bf:33:5d:5e:c0:c3:37:ae:d7:f8:95:7d:45:72:45:27:da:63:
fa:52:01:de:40:30:3a:29:25:c7:bd:0e:60:45:5d:aa:9a:6a:
ab:df:57:f7:b5:6f:ba:f8:8d:76:02:f5:4c:11:12:d0:f7:50:
50:74:a5:50:e0:cb:4f:90:04:a3:49:e1:16:86:43:19:c4:65:
66:f7:57:68:35:1e:44:ce:79:5d:0e:40:5d:89:a7:a6:f8:0a:
0b:02:80:ce:2e:a6:06:76:32:08:35:1b:f5:af:e5:dc:6b:a9:
31:6e:57:3e:4d:a4:47:86:50:4c:f6:43:4e:ee:ea:c8:82:f6:
be:2a:bf:17:01:83:13:58:9e:e3:14:8d:04:4e:f1:87:16:2b:
12:66:b9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:55 2025 by rpki-client