Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/jLe-OTyfu-Kmy4I72ILq_UexeK4.roa
File: jLe-OTyfu-Kmy4I72ILq_UexeK4.roa (raw, json)
Hash identifier: uJpGjC1kYFH42qpXXzTBSi0bVGqFCCyzLcCVWfq1jUk=
Subject key identifier: 8C:B7:BE:39:3C:9F:BB:E2:A6:CB:82:3B:D8:82:EA:FD:47:B1:78:AE
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018DC10ABC43C1E60E66D2EF264675524AB0
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/jLe-OTyfu-Kmy4I72ILq_UexeK4.roa
Signing time: Mon 19 Feb 2024 11:05:22 +0000
ROA not before: Mon 19 Feb 2024 11:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 45.11.154.0/24 maxlen: 24
45.147.152.0/24 maxlen: 24
185.60.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:0a:bc:43:c1:e6:0e:66:d2:ef:26:46:75:52:4a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Feb 19 11:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cb7be393c9fbbe2a6cb823bd882eafd47b178ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:31:d1:b7:21:b8:65:71:a6:e6:15:2f:48:a7:
0e:ed:72:5f:4a:78:5f:73:f5:98:00:3f:d4:df:34:
19:54:54:d8:16:42:ed:c0:66:76:4e:e0:6a:1d:3f:
a4:f9:72:ae:bd:b7:e1:55:35:da:17:b6:f5:e7:64:
85:d5:d3:5b:99:bc:a6:6e:ab:c6:9d:c2:ed:b3:a4:
40:d9:2b:17:ac:a5:c0:40:a4:ac:4b:ef:2e:01:c9:
13:15:56:19:45:50:fa:b1:c5:66:11:f7:ff:37:ef:
ed:d5:b2:e1:fd:c8:ab:45:92:af:f9:da:98:b8:ba:
79:25:b9:c9:7a:38:f6:65:22:77:4f:68:af:2b:44:
b9:e6:c5:14:fc:cb:4f:2b:1e:20:3c:b3:9d:40:39:
bd:79:eb:cd:22:63:6b:79:69:38:16:a3:4e:37:45:
dc:a5:04:c9:4d:07:62:df:0e:70:ca:91:73:39:74:
b0:cd:c7:e0:5a:73:6d:c7:49:e6:ee:07:62:3a:df:
34:1d:14:a8:1a:b0:65:e8:c1:82:d9:45:b8:ea:79:
0d:35:61:da:04:fa:94:d1:85:4c:3f:f0:85:60:d9:
f4:06:64:d8:4c:e3:9f:eb:41:82:93:24:79:4b:68:
0a:ba:a4:5a:7e:b8:9f:5d:ce:60:d1:ba:8a:2a:b6:
b2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B7:BE:39:3C:9F:BB:E2:A6:CB:82:3B:D8:82:EA:FD:47:B1:78:AE
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/jLe-OTyfu-Kmy4I72ILq_UexeK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.154.0/24
45.147.152.0/24
185.60.144.0/22
Signature Algorithm: sha256WithRSAEncryption
41:97:fc:0b:38:a8:e0:be:f3:2c:c6:11:0a:0b:26:a8:f6:63:
88:85:10:a6:ee:52:f1:8d:2b:b7:b6:a1:cb:84:ef:28:81:54:
b1:09:3c:6c:45:83:82:96:10:ba:78:07:18:4d:b3:9b:fa:ed:
76:af:c3:b9:67:9e:81:40:49:e8:cb:39:74:a8:be:98:b5:9d:
44:84:d3:6b:c6:44:c1:fd:f9:20:f5:3e:9c:5e:88:cb:db:3f:
b3:0b:ed:e7:e3:80:52:2a:7c:6d:ff:49:c4:bb:46:e1:c1:6c:
2d:10:8e:8b:22:ca:bc:8f:a1:67:66:42:75:b9:48:60:5c:df:
2c:70:b2:c2:5b:33:f9:4a:f3:d6:7b:9f:33:51:aa:6f:19:1c:
8f:4b:9c:e8:cf:01:5c:7c:60:c6:0c:ab:51:e2:f1:e4:d7:36:
21:13:73:fe:a9:c2:07:44:41:e3:d4:3e:da:9c:24:76:cc:a1:
62:01:86:a4:1b:8f:0a:84:42:e4:fb:78:ab:43:0b:35:2d:40:
a2:50:49:aa:63:84:f7:2e:4e:7e:68:e0:51:c8:37:b4:42:84:
d6:c4:6d:45:7e:2c:cb:d0:68:8b:99:67:f5:de:54:1f:4d:91:
b7:1f:a7:1b:13:71:b7:57:96:2a:14:73:b9:65:5c:16:89:6d:
e8:36:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:16 2025 by rpki-client