Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa
File: jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa (raw, json)
Hash identifier: SEfA+iWkgEeN5RJiBiU8Z6qVRU+/NBl881HzOl2we+M=
Subject key identifier: 8D:C8:06:DA:4F:83:32:F8:2A:D0:0B:2E:16:68:C1:C6:6D:3E:3B:E4
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 019425FCBBB65CE3DCB1A72CA62A167A5A1C
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa
Signing time: Thu 02 Jan 2025 07:48:27 +0000
ROA not before: Thu 02 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42280
IP address blocks: 45.87.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:bb:b6:5c:e3:dc:b1:a7:2c:a6:2a:16:7a:5a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Jan 2 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dc806da4f8332f82ad00b2e1668c1c66d3e3be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:cb:42:4c:83:39:34:71:6c:68:38:8a:56:
33:b2:68:17:2d:a8:76:6c:9d:60:8e:14:18:17:56:
5b:e0:bb:d5:3b:87:41:f1:a3:3c:59:83:b3:34:c8:
6c:a8:b0:05:8f:29:37:30:7a:8a:63:36:c2:48:c8:
dc:46:5e:eb:df:24:32:a3:1d:72:79:b9:eb:ea:1c:
78:8f:64:d2:ce:a5:30:25:02:a5:c0:87:35:49:39:
64:21:dc:8d:fb:20:5d:cc:e1:ad:56:5d:6a:a3:1d:
35:df:f4:4e:41:8c:79:30:51:3d:9b:f0:e7:ed:47:
93:5b:9a:c0:60:a4:49:44:6f:c4:04:45:a1:91:85:
36:7b:82:c6:e4:b2:c5:4a:be:f9:d2:96:6a:d3:1d:
b1:1d:94:ab:e5:a5:50:30:74:2a:db:42:f3:e3:e3:
58:aa:a7:4a:fa:51:68:d7:93:6f:a3:50:c6:09:e6:
b6:89:66:8d:cf:63:9e:73:1f:59:c4:58:05:12:23:
67:94:cd:cf:ad:8a:aa:fd:fe:d1:09:31:90:b2:50:
f9:e8:c3:6d:ff:f4:9a:48:ef:73:1b:47:c5:52:89:
06:36:56:d0:41:87:9a:49:05:9f:2d:30:b1:3e:e3:
9e:db:d2:8e:7c:43:d0:28:3c:82:51:e9:0e:c8:c9:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C8:06:DA:4F:83:32:F8:2A:D0:0B:2E:16:68:C1:C6:6D:3E:3B:E4
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/jcgG2k-DMvgq0AsuFmjBxm0-O-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.122.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:78:72:f8:6b:48:66:ef:eb:be:4d:93:db:f2:b6:b7:73:48:
eb:c1:61:7f:31:3b:d2:57:28:d2:8d:52:5f:2a:2f:9a:f3:67:
aa:a1:68:d6:68:ff:da:4f:49:84:63:80:8f:e7:6c:3a:2b:52:
94:13:a4:89:40:bb:93:17:66:78:d4:51:d2:3a:b1:be:ea:a2:
16:fc:34:ea:87:fb:77:62:5b:d0:0e:c6:c9:f5:30:2f:d3:96:
0a:51:fe:50:74:27:1a:0a:24:ce:28:bc:d4:55:23:d5:31:1f:
c6:ba:b0:4e:b1:10:5c:c5:17:5e:d1:85:83:14:75:f8:a9:3c:
07:4a:ac:05:f2:3a:cb:3c:b1:f9:8d:69:eb:4e:e8:df:63:53:
fa:5c:9e:df:a1:2a:1d:a0:65:df:10:d2:33:6b:61:11:a6:f2:
cd:97:4e:db:3e:0f:19:2e:69:b3:71:5d:9d:3e:1b:44:01:a2:
5d:36:fb:41:86:fc:2b:53:b2:bb:b0:b9:60:aa:1d:9c:a7:a6:
2b:92:66:61:b9:22:a9:52:d4:c3:d7:3f:0c:b2:af:37:f0:55:
bd:69:d9:7d:a8:19:ea:29:0c:9f:20:70:95:dc:e2:0c:05:86:
42:0d:27:d2:c8:18:20:47:a9:c8:7d:c5:e7:83:11:70:10:ec:
06:a3:ab:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:18:12 2025 by rpki-client