Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/iJ0N88iATNc7UiUGXoHztFV1r-M.roa
File: iJ0N88iATNc7UiUGXoHztFV1r-M.roa (raw, json)
Hash identifier: l8fJQFt0ipvnCwRF0O4nNX66/X32E1fs26DRKw04Vb0=
Subject key identifier: 88:9D:0D:F3:C8:80:4C:D7:3B:52:25:06:5E:81:F3:B4:55:75:AF:E3
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 01942521F412550424ECAFAD6C25759B6B9A
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/iJ0N88iATNc7UiUGXoHztFV1r-M.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208130
IP address blocks: 45.155.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f4:12:55:04:24:ec:af:ad:6c:25:75:9b:6b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=889d0df3c8804cd73b5225065e81f3b45575afe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a5:2a:75:73:14:4f:e3:24:2d:f3:a6:63:36:
98:ff:8f:c3:5f:91:8b:95:94:a4:e3:ca:46:61:f6:
23:ab:8f:99:13:84:86:ec:b8:ea:7e:a5:b7:03:ce:
d2:be:2a:9d:70:f9:7d:0a:34:67:cd:9d:1a:8a:f7:
f6:45:c2:8f:98:c0:75:96:35:43:e4:77:f5:5c:5a:
35:27:6c:6b:7e:51:5c:2e:79:f9:1c:a9:31:4d:18:
10:a4:73:31:23:dc:7b:f4:01:58:8c:1b:ee:06:ac:
21:da:e8:e6:ac:12:73:7e:a7:f3:e9:c5:fb:9d:f2:
97:ed:16:81:cb:44:5f:8b:4a:d8:b6:dd:ec:3d:d2:
5d:6d:60:52:28:6e:9e:f3:f5:cf:86:ee:4f:6e:91:
72:6b:2c:ef:cf:f0:6b:9a:dc:7f:03:1c:39:a2:b7:
0a:3b:dc:7f:1c:32:86:8b:b7:c6:fe:08:34:37:0c:
b6:0f:28:a5:10:d2:05:2e:af:84:0e:20:b1:58:bc:
6f:5c:8c:bb:7e:08:3a:ce:9f:fa:78:a6:42:07:19:
25:0f:24:ef:20:4c:df:77:af:9b:70:aa:99:c6:67:
6f:51:23:85:af:d9:3e:f6:d4:c2:63:57:1f:32:ae:
bf:a5:3b:c2:f4:f5:f9:dc:2b:19:e3:29:63:10:1f:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9D:0D:F3:C8:80:4C:D7:3B:52:25:06:5E:81:F3:B4:55:75:AF:E3
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/iJ0N88iATNc7UiUGXoHztFV1r-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.20.0/24
Signature Algorithm: sha256WithRSAEncryption
48:5b:9c:d7:d1:17:17:91:67:88:9f:a4:4d:8c:76:87:76:8a:
b2:f7:9a:68:0d:18:a8:fb:ba:56:d6:e0:53:77:cc:01:0b:df:
80:f1:28:33:ae:2f:db:47:a4:93:d7:69:58:5a:b0:f1:9d:e2:
8f:f6:90:19:ef:51:0c:c4:b2:84:f5:21:89:39:0c:c6:55:e9:
50:41:90:d8:eb:49:89:18:45:08:e1:be:a7:8d:65:0d:ad:cd:
2d:9c:4c:40:21:6c:c9:b0:f8:a2:2c:09:5c:10:e5:bf:60:a3:
bd:9c:da:16:d0:14:38:c9:bf:f2:ba:37:e4:e4:bf:ad:97:2a:
bd:4e:04:bc:88:61:22:09:1b:87:29:7b:cd:30:ff:f4:38:cb:
08:e4:82:6d:8b:1e:c2:59:59:87:68:7b:bc:79:e1:76:ec:1e:
f3:e4:e0:98:1f:2e:1d:e6:99:72:d7:be:47:61:49:37:6c:0b:
13:f6:aa:7f:9c:e1:23:db:ea:c1:7f:63:f8:7c:a7:e4:65:c5:
d0:8f:7d:10:f1:48:3c:ce:8a:bc:2f:20:a0:36:b5:2f:03:d2:
4b:c8:98:da:dd:80:81:d4:27:d4:e5:01:28:4b:e9:44:bf:00:
67:e1:99:59:af:f0:5f:a7:24:ea:9b:38:14:77:50:6c:b9:49:
fc:69:ac:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:25 2025 by rpki-client