Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/jlMZAk_WFL7COhfQKfhQppzVHwU.roa
File: jlMZAk_WFL7COhfQKfhQppzVHwU.roa (raw, json)
Hash identifier: JSCPqLO1Fq0AifLBEaYgXDVfkndlejHBT0mNjwDUNmo=
Subject key identifier: 8E:53:19:02:4F:D6:14:BE:C2:3A:17:D0:29:F8:50:A6:9C:D5:1F:05
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 018AD41DA53C19B862879F8FE14FCE4E9EB5
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/jlMZAk_WFL7COhfQKfhQppzVHwU.roa
Signing time: Wed 27 Sep 2023 00:50:27 +0000
ROA not before: Wed 27 Sep 2023 00:50:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46261
IP address blocks: 45.139.3.0/24 maxlen: 24
45.130.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d4:1d:a5:3c:19:b8:62:87:9f:8f:e1:4f:ce:4e:9e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Sep 27 00:50:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e5319024fd614bec23a17d029f850a69cd51f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:b7:6e:cd:fe:bd:fd:5a:0e:d9:bc:a0:04:
da:d4:08:15:06:d6:1d:a5:04:d2:65:55:70:37:e8:
f6:a2:20:d9:13:29:58:59:34:7c:75:f2:2c:6e:0c:
ba:4e:fd:88:f1:29:a5:b3:9e:29:a8:1a:34:27:92:
73:ca:26:22:53:da:53:a9:00:5a:5e:5b:0e:63:2a:
41:91:85:69:91:4b:3b:18:5f:ea:42:29:e9:72:42:
a4:4c:de:22:bf:28:5e:42:86:78:1f:6d:78:fe:fe:
86:48:da:28:9e:ee:96:ff:9d:e1:d0:cb:af:7e:36:
07:d0:09:1a:a6:8f:61:6c:80:7a:ab:f0:9b:81:42:
18:73:13:d3:6e:3e:d6:3e:7d:2b:62:13:0e:b1:89:
ad:4f:0a:d3:e5:a0:4c:ae:21:36:8d:34:5d:f7:87:
80:b9:05:90:7c:91:a1:78:34:ed:e2:4d:a1:c1:5a:
03:9a:26:8f:39:40:41:80:7b:ec:a5:b0:0c:3c:da:
d2:32:ec:07:d8:67:a0:15:a8:67:7e:48:5a:1f:e3:
83:b0:5b:44:20:83:c9:a0:a0:67:6f:4f:49:9f:2a:
6a:a7:d5:30:2e:41:7e:64:c3:4b:27:91:51:dc:1e:
e6:17:9a:38:5f:ec:03:ac:e8:a7:1a:0f:4d:d2:59:
14:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:19:02:4F:D6:14:BE:C2:3A:17:D0:29:F8:50:A6:9C:D5:1F:05
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/jlMZAk_WFL7COhfQKfhQppzVHwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.64.0/24
45.139.3.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0d:34:b2:d7:2f:47:31:3a:94:b2:cd:4e:2d:03:0d:c7:82:
2d:19:e0:30:f1:24:e6:e1:d8:8b:c4:2d:86:b4:50:d0:11:88:
1d:3e:55:b4:16:ca:61:c1:55:2b:6f:2e:a3:b5:10:6a:ff:56:
7e:2b:a2:dd:fb:cd:0e:d2:b6:e7:01:45:46:df:23:56:47:99:
12:36:e6:5d:d7:55:ad:c8:2d:93:81:64:25:73:d2:d9:0e:98:
4a:6a:bc:95:c5:52:df:0a:63:cf:d4:f1:fe:25:29:36:b6:3e:
e4:0b:70:fa:8f:1b:c9:1c:c9:ca:ae:32:8a:ba:77:14:f3:4c:
cf:17:b0:e1:04:db:bc:a1:8c:89:2f:f8:70:1f:e3:8a:4f:35:
7d:39:bc:ae:2a:df:6b:52:59:0a:f7:6d:a1:66:19:e6:25:e1:
3a:96:93:ec:0f:ad:4a:d8:6d:65:bc:d4:02:32:cf:a6:9b:8c:
dd:a7:48:9d:a0:0e:1b:a7:fb:fe:3a:9f:63:b5:26:86:ce:15:
28:0b:61:d7:70:cc:cc:80:7e:2e:59:14:69:e8:a2:11:f9:00:
77:a7:86:5c:89:73:a0:3a:ff:c2:65:73:09:d7:7d:70:6f:5d:
4d:2f:1a:4c:a5:64:9e:95:88:77:0c:f9:d4:b5:c8:e4:76:58:
95:81:3b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:42 2025 by rpki-client