Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5fe0b1-7862-4096-999b-eafca2a015cd/1/1sjJoTu8HVKkfhU_uo0mRWLECAA.roa
File: 1sjJoTu8HVKkfhU_uo0mRWLECAA.roa (raw, json)
Hash identifier: mKFbFXSIjiVE0wqvQOD53WJX09YkIW7crMKGuK1kfWQ=
Subject key identifier: D6:C8:C9:A1:3B:BC:1D:52:A4:7E:15:3F:BA:8D:26:45:62:C4:08:00
Certificate issuer: /CN=26db45b7c9108afeb4c24c75cfb179f82cfb3a82
Certificate serial: 04843709
Authority key identifier: 26:DB:45:B7:C9:10:8A:FE:B4:C2:4C:75:CF:B1:79:F8:2C:FB:3A:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JttFt8kQiv60wkx1z7F5-Cz7OoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5fe0b1-7862-4096-999b-eafca2a015cd/1/1sjJoTu8HVKkfhU_uo0mRWLECAA.roa
Signing time: Sat 01 Jan 2022 06:01:24 +0000
ROA not before: Sat 01 Jan 2022 06:01:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39371
IP address blocks: 45.129.60.0/22 maxlen: 24
2a0e:44c0::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75773705 (0x4843709)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26db45b7c9108afeb4c24c75cfb179f82cfb3a82
Validity
Not Before: Jan 1 06:01:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6c8c9a13bbc1d52a47e153fba8d264562c40800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:ec:67:ff:4d:49:6f:7a:18:5a:0f:37:97:
06:91:c1:8a:e6:c4:11:75:07:7e:24:e4:b8:61:f7:
db:34:9f:4e:d9:90:75:c2:69:88:9c:39:7e:4e:ef:
db:f9:c3:98:a7:3f:36:16:ac:99:3e:80:b6:5a:1b:
51:3c:eb:20:29:07:d2:25:4c:4b:36:c5:af:6b:c3:
2c:1d:bd:11:8e:52:a0:06:ae:95:3a:f8:39:3a:f6:
9b:b4:a7:e0:e4:d7:9c:52:1d:ab:7d:f3:4e:1b:21:
f0:d7:e2:13:0f:b5:b3:cf:25:eb:ba:a5:84:f8:a7:
32:20:03:4b:ba:88:6e:00:04:7d:ce:36:1e:31:a8:
fe:ef:9a:af:96:1e:82:5f:67:bb:39:63:4e:6a:2b:
2c:30:6b:92:ee:a3:f1:5d:75:38:f0:00:ff:c3:1c:
04:e7:c4:4c:0c:b9:71:0f:1a:16:20:33:4e:e6:6f:
14:d1:05:a3:d0:12:3e:a7:44:15:c7:f9:bb:27:4d:
45:97:f5:ff:0c:bf:63:f4:ee:c5:a9:32:ca:0d:10:
7b:bf:86:6d:ef:a3:11:c5:8d:9e:99:06:df:85:05:
b9:50:9d:fa:e5:ec:74:a9:17:2d:7d:47:a2:e3:af:
d3:b0:4d:20:59:b5:17:66:0c:13:65:7e:8e:81:3d:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C8:C9:A1:3B:BC:1D:52:A4:7E:15:3F:BA:8D:26:45:62:C4:08:00
X509v3 Authority Key Identifier:
keyid:26:DB:45:B7:C9:10:8A:FE:B4:C2:4C:75:CF:B1:79:F8:2C:FB:3A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JttFt8kQiv60wkx1z7F5-Cz7OoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5fe0b1-7862-4096-999b-eafca2a015cd/1/1sjJoTu8HVKkfhU_uo0mRWLECAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5fe0b1-7862-4096-999b-eafca2a015cd/1/JttFt8kQiv60wkx1z7F5-Cz7OoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.60.0/22
IPv6:
2a0e:44c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:15:91:fc:47:5a:7c:f0:c3:cc:c2:01:10:e6:e2:06:9a:64:
99:c3:b6:b5:4d:3f:bc:a7:4b:30:45:38:17:f9:1b:ac:f4:32:
ef:7c:f0:2f:da:39:7e:33:d5:d7:1f:f4:24:90:e3:2b:b4:b1:
0a:3d:a2:2c:15:f7:59:2c:23:63:9a:38:05:bd:9b:16:bf:54:
ca:0c:c7:45:03:fd:b3:01:f5:71:6c:ac:20:89:f1:dd:f1:8e:
b2:4a:b7:cd:4d:d8:29:53:a2:89:03:2c:b1:c6:c6:06:5a:4b:
93:62:c3:b5:2c:25:b9:cf:8a:20:72:8b:41:d8:cb:32:d1:bd:
45:fd:57:9a:4e:35:d7:ad:f7:44:1c:f1:cc:d9:1d:33:0f:55:
d0:a5:4e:a7:99:37:e0:2d:ac:72:e1:2e:cf:a3:dc:81:6c:49:
37:da:08:10:51:0c:29:80:1a:89:20:72:38:96:d3:36:5e:7d:
89:d9:95:a8:38:cb:21:d1:52:d7:a5:98:4c:86:99:1c:6e:1e:
bd:53:36:dc:cb:91:d2:37:55:60:15:05:29:1a:bc:6e:d4:35:
23:a3:d0:e9:3f:78:65:b2:a4:e9:0d:a3:59:84:2b:b1:69:1e:
3d:f7:0e:57:07:bc:62:be:54:fa:b1:69:76:b8:73:de:7b:a3:
61:cf:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:06:39 2025 by rpki-client