Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/j8EWdEhqfoQNGsawyZX24TbYgpY.roa
File: j8EWdEhqfoQNGsawyZX24TbYgpY.roa (raw, json)
Hash identifier: 5sBb4dOy+EMZ0PigJTfLMgewHZyumk4i351R9qvi5Wk=
Subject key identifier: 8F:C1:16:74:48:6A:7E:84:0D:1A:C6:B0:C9:95:F6:E1:36:D8:82:96
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 019422200AAA0B9A1D4497C33A00291BAF64
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/j8EWdEhqfoQNGsawyZX24TbYgpY.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398395
IP address blocks: 45.145.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0a:aa:0b:9a:1d:44:97:c3:3a:00:29:1b:af:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fc11674486a7e840d1ac6b0c995f6e136d88296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:1d:51:99:07:26:b0:3d:1c:04:d1:b6:1a:
3d:4d:26:04:e6:2e:b9:f1:ad:dc:bc:98:fd:43:fb:
00:c0:b9:88:3c:2f:ef:cc:dd:6c:6d:94:0f:3b:2f:
89:dd:2e:69:72:af:5a:a0:8e:a2:e6:02:f4:4d:50:
c3:1b:68:9c:b8:a4:ce:19:23:93:e2:3d:93:d9:2f:
6c:38:fb:db:65:53:d8:1c:69:e0:da:c2:e6:e0:d3:
fb:1b:b6:64:25:c9:06:f7:8f:79:d3:f9:cf:8f:a1:
d5:1c:60:85:d4:9a:9c:e7:7a:3f:d5:b2:5f:1e:53:
6e:b1:c0:a6:34:82:b7:dd:cd:8e:eb:3c:84:08:b8:
e4:e2:fe:07:60:c7:d0:dc:a8:6c:aa:2f:a0:91:22:
09:27:21:6a:03:48:dc:87:5f:c7:64:57:4a:b4:09:
ac:23:79:d8:6b:ff:12:88:a8:fe:c0:7e:ce:a4:06:
80:b1:cd:a3:7e:2f:94:7e:a0:21:a5:da:46:6c:de:
18:c8:f6:6e:cb:6c:29:ce:1d:9b:80:8c:8d:39:8a:
76:e9:d8:e8:88:e9:e5:d7:88:17:8a:87:d8:59:6a:
d0:07:b8:ba:bc:11:a7:46:a8:18:bb:1f:bc:f4:fe:
f2:71:f0:9e:b7:0f:1d:d0:07:2c:0c:e8:b5:34:2f:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C1:16:74:48:6A:7E:84:0D:1A:C6:B0:C9:95:F6:E1:36:D8:82:96
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/j8EWdEhqfoQNGsawyZX24TbYgpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.17.0/24
Signature Algorithm: sha256WithRSAEncryption
05:69:cb:6a:83:cd:78:6e:26:44:d3:12:24:39:c8:e0:40:69:
64:3e:ef:d5:47:81:4c:1f:c3:c9:d2:a6:b5:57:9d:ca:d6:57:
75:06:5d:7f:fe:0f:ab:a1:a1:a7:7d:1d:76:1a:50:a0:4f:a7:
fc:5c:ba:d8:09:f3:b8:50:97:31:5d:08:c9:49:f0:03:99:19:
7a:ad:b7:37:40:b7:6a:bc:d4:b2:74:b8:ed:e4:b3:e7:f1:15:
09:fe:21:0c:74:53:2d:74:e5:17:a9:0d:44:4d:0f:b7:1e:a9:
2a:ef:31:53:fa:9a:ca:c3:fc:fc:99:cd:9a:a6:c1:6f:d8:7f:
76:dc:dc:5d:e2:bb:b0:09:85:af:e8:c8:78:70:80:a9:b0:9a:
14:39:06:93:7b:02:b7:86:54:bb:3c:cb:5e:44:24:56:78:e1:
f0:a4:6d:2c:98:43:50:16:57:0a:2c:73:21:29:35:20:88:b4:
f5:93:6d:c4:79:45:ee:37:40:ea:eb:27:d9:1b:56:22:71:65:
a3:7d:a8:fc:a1:1a:5c:53:d5:de:92:99:77:7c:ed:70:a7:8b:
85:fc:b7:60:93:cb:a2:7b:27:6d:56:ba:52:4f:d6:88:2f:2c:
d3:11:bc:8d:cb:5c:df:73:f6:7b:f1:58:1a:31:97:0f:24:cc:
c9:37:5e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:59 2025 by rpki-client