Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/0882e2-5208-484d-bc96-779fe6a6c22a/1/Jkw27QOS9USe80qVvlLjDp_RqfE.roa
File: Jkw27QOS9USe80qVvlLjDp_RqfE.roa (raw, json)
Hash identifier: Lqt4Xi4L9XSn/w4RsySRpvML3WwC74HowOwlGfD4v0M=
Subject key identifier: 26:4C:36:ED:03:92:F5:44:9E:F3:4A:95:BE:52:E3:0E:9F:D1:A9:F1
Certificate issuer: /CN=257039ae9a49ed74c776a935ce91809afb5f6a63
Certificate serial: 08DE0164
Authority key identifier: 25:70:39:AE:9A:49:ED:74:C7:76:A9:35:CE:91:80:9A:FB:5F:6A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXA5rppJ7XTHdqk1zpGAmvtfamM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/0882e2-5208-484d-bc96-779fe6a6c22a/1/Jkw27QOS9USe80qVvlLjDp_RqfE.roa
Signing time: Wed 09 Feb 2022 09:48:38 +0000
ROA not before: Wed 09 Feb 2022 09:48:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208928
IP address blocks: 45.15.1.0/24 maxlen: 24
45.15.0.0/22 maxlen: 22
45.15.0.0/24 maxlen: 24
45.15.0.0/23 maxlen: 23
45.15.3.0/24 maxlen: 24
45.15.2.0/23 maxlen: 23
45.15.2.0/24 maxlen: 24
45.147.128.0/23 maxlen: 23
45.147.128.0/24 maxlen: 24
45.147.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148767076 (0x8de0164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257039ae9a49ed74c776a935ce91809afb5f6a63
Validity
Not Before: Feb 9 09:48:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=264c36ed0392f5449ef34a95be52e30e9fd1a9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:ba:3a:92:00:c8:aa:aa:a5:3d:bc:89:3f:
29:30:35:31:20:38:a8:d5:4b:bb:79:fe:45:0a:2d:
0d:27:c3:86:7f:7f:82:d5:85:0e:62:41:8a:8c:ed:
ca:15:d6:d2:e1:2c:f5:fe:f4:e3:16:51:46:18:8a:
bb:84:3c:c6:4e:05:6e:45:68:0d:4a:e5:5e:d1:b9:
c8:38:8e:f3:83:07:9d:95:fe:bc:56:34:65:50:1a:
2b:82:cd:03:93:b8:30:99:63:bb:a9:5d:39:38:ec:
aa:e0:bd:95:0a:3d:09:a2:a4:ae:d3:18:4f:43:0c:
50:22:e1:41:ca:2c:51:d9:05:9d:1c:e7:2f:62:a5:
93:41:26:0c:50:fb:02:f1:b2:e3:c4:35:61:d2:40:
75:88:29:d2:76:7e:27:c1:d2:75:b1:61:12:95:d9:
54:46:c2:08:60:e2:1a:62:d4:4b:58:8f:e0:7b:c8:
fa:7b:95:d8:94:6b:c2:2e:5b:8c:f3:e8:73:15:eb:
fb:6b:93:59:3a:8a:68:b7:d9:b2:44:ad:26:8d:6c:
0d:73:35:7c:2a:a2:c4:87:3d:f9:5f:93:8c:a2:dd:
6a:2b:10:8a:23:52:ab:2c:57:87:49:13:cd:d7:5c:
ff:10:a7:a2:00:cc:4f:cd:e6:29:eb:de:e8:a2:ae:
d5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4C:36:ED:03:92:F5:44:9E:F3:4A:95:BE:52:E3:0E:9F:D1:A9:F1
X509v3 Authority Key Identifier:
keyid:25:70:39:AE:9A:49:ED:74:C7:76:A9:35:CE:91:80:9A:FB:5F:6A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXA5rppJ7XTHdqk1zpGAmvtfamM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/0882e2-5208-484d-bc96-779fe6a6c22a/1/Jkw27QOS9USe80qVvlLjDp_RqfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/0882e2-5208-484d-bc96-779fe6a6c22a/1/JXA5rppJ7XTHdqk1zpGAmvtfamM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.0.0/22
45.147.128.0/23
Signature Algorithm: sha256WithRSAEncryption
27:32:5d:ac:ab:2a:5b:4c:c5:9e:33:11:d8:68:5a:ec:25:fd:
c3:2e:73:0e:82:46:61:45:c5:e0:5e:c0:d1:27:22:33:b1:2a:
ae:e1:06:0e:92:59:04:c9:99:d5:3d:a3:4e:22:06:67:70:bb:
79:25:26:90:45:61:36:c0:56:ec:49:93:e0:60:9c:aa:2b:07:
85:76:2a:b9:fb:63:f8:9f:07:85:a4:df:3d:e8:3a:ec:51:6b:
41:aa:e0:8d:bb:3f:d5:53:88:c2:bd:41:86:5a:62:90:c5:b4:
64:aa:93:b2:89:b0:b5:5e:af:6a:72:6f:16:07:7b:0c:d6:2b:
80:66:46:af:1c:3d:e1:d8:4a:d8:23:dd:39:f7:96:41:ef:a9:
7d:b9:ee:19:dc:08:40:4f:5b:ea:1e:29:fb:59:cc:b8:68:2d:
23:95:a3:52:ee:30:fd:3d:17:a3:58:6f:ab:17:41:7b:eb:c2:
53:65:17:11:0c:a8:36:ab:d1:0d:77:03:e6:3d:6a:b6:3d:b4:
56:32:fb:cb:b1:a7:d3:50:7e:24:66:35:6c:48:78:44:5b:24:
ef:44:d8:32:b2:d5:c3:5c:a6:45:a8:4b:50:c0:51:f9:27:0d:
30:e5:24:1a:2d:68:ce:9b:86:c4:dc:7b:f3:a3:6d:34:19:e1:
a6:e3:cd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:41 2024 by rpki-client on console-fra.rpki-client.org