Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/j_uLZa9Jojx_WFQ0saNqPvjxzpc.roa
File: j_uLZa9Jojx_WFQ0saNqPvjxzpc.roa (raw, json)
Hash identifier: L5YX9QySYG7Gjr8Zd05ICO6wuuKPHnJWJB3CVedFV/0=
Subject key identifier: 8F:FB:8B:65:AF:49:A2:3C:7F:58:54:34:B1:A3:6A:3E:F8:F1:CE:97
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A602EEDF29B3DBE8CB919C959362C
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/j_uLZa9Jojx_WFQ0saNqPvjxzpc.roa
Signing time: Wed 01 Jan 2025 19:49:21 +0000
ROA not before: Wed 01 Jan 2025 19:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6905
IP address blocks: 145.30.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:60:2e:ed:f2:9b:3d:be:8c:b9:19:c9:59:36:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ffb8b65af49a23c7f585434b1a36a3ef8f1ce97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:75:08:96:9a:42:d8:8c:41:5c:d8:aa:51:
b9:45:67:6a:b0:4e:55:d1:b4:4a:05:ac:e3:81:ad:
7b:8f:a9:64:d2:a9:59:1e:65:ca:1a:1e:91:b5:0a:
87:3b:45:e0:10:ec:02:01:18:00:4c:9a:8c:ea:65:
20:46:99:ac:91:6f:3b:0e:75:48:9d:f5:3f:ba:cd:
0d:87:cf:ec:79:7b:98:1f:5e:f9:17:6a:a5:b5:c4:
37:7b:71:cf:56:1e:67:13:f8:e6:1b:29:66:51:ae:
c7:ca:44:ef:1f:c4:66:28:54:49:98:2b:a0:9c:69:
3f:4b:11:34:83:f9:bb:62:69:2a:04:c8:e6:c9:f2:
fc:90:5d:6b:7d:f1:3a:52:8b:a4:18:47:fd:83:9f:
02:81:6e:56:01:76:5c:0a:2a:47:e2:29:8a:e4:ff:
96:65:1e:09:65:70:68:03:0d:e4:92:f2:b3:60:5f:
a6:15:e7:a6:93:ed:90:7e:ca:fd:69:36:68:9c:fd:
f1:3e:b4:e7:fd:71:70:c6:56:fc:6c:1e:a3:dc:4d:
9c:7f:68:05:b4:23:3a:48:2d:83:81:59:58:97:24:
1a:4b:dd:06:09:a2:fa:fc:0b:96:b3:aa:f2:c3:09:
88:72:7a:6d:8b:43:1e:2c:23:c8:57:53:8c:55:28:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FB:8B:65:AF:49:A2:3C:7F:58:54:34:B1:A3:6A:3E:F8:F1:CE:97
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/j_uLZa9Jojx_WFQ0saNqPvjxzpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.30.124.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e1:2e:23:61:33:33:10:b0:a0:47:77:39:08:01:85:33:dc:
9f:3e:15:47:ae:13:69:28:e9:44:92:23:d9:6b:f4:7e:a8:ec:
17:31:e5:e3:36:ef:37:98:90:c5:36:5f:bf:31:73:9f:9e:fa:
40:27:83:39:7e:ec:be:b2:96:53:1e:6c:68:47:39:c7:56:b9:
ea:df:20:1f:b1:c3:dd:a0:14:97:02:1c:fa:bb:fb:64:9c:91:
79:e5:01:81:77:9f:01:f2:4a:da:e5:81:31:59:c0:44:93:c9:
5d:1d:fc:c8:f9:ff:b1:5d:f4:9e:00:b2:07:02:c9:db:4c:1a:
eb:10:1a:99:5a:99:38:4f:b3:e3:6f:fd:bb:ca:5b:b4:45:60:
b9:9e:c4:4f:5e:24:94:71:1c:95:2d:ee:cb:1f:ec:a7:cc:b3:
fa:79:c8:e3:d9:b0:ae:2e:76:2f:8c:5d:d8:d7:b1:b9:2e:a9:
36:8f:0d:33:e2:3c:c9:97:04:15:ee:94:ad:41:e7:f5:1b:8c:
cf:77:66:cc:35:f4:84:71:2c:d2:82:2f:fc:31:32:f9:ab:26:
ca:9f:89:cb:e4:36:f4:39:53:a4:a1:cf:bb:e5:47:69:11:00:
52:0c:84:ea:69:24:cc:d2:07:9c:5b:d2:7d:46:0b:37:8c:39:
be:19:52:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:47 2025 by rpki-client