Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/707e75-1ecf-4d31-b752-d5e079ec928c/1/JGaUQOubm2gjZiMjnES5qQIs8EY.roa
File: JGaUQOubm2gjZiMjnES5qQIs8EY.roa (raw, json)
Hash identifier: GWh16KwWNe0XhB7Yqt6+SH84ZMYTWH/8tniSOrfgkrs=
Subject key identifier: 24:66:94:40:EB:9B:9B:68:23:66:23:23:9C:44:B9:A9:02:2C:F0:46
Certificate issuer: /CN=be9319b196531a79f832dddd5873129e38c3e4ee
Certificate serial: 01856EB91DF30152367FCB83BC4572A404E9
Authority key identifier: BE:93:19:B1:96:53:1A:79:F8:32:DD:DD:58:73:12:9E:38:C3:E4:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpMZsZZTGnn4Mt3dWHMSnjjD5O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/707e75-1ecf-4d31-b752-d5e079ec928c/1/JGaUQOubm2gjZiMjnES5qQIs8EY.roa
Signing time: Sun 01 Jan 2023 19:05:03 +0000
ROA not before: Sun 01 Jan 2023 19:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57752
IP address blocks: 45.89.152.0/22 maxlen: 22
45.91.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:1d:f3:01:52:36:7f:cb:83:bc:45:72:a4:04:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9319b196531a79f832dddd5873129e38c3e4ee
Validity
Not Before: Jan 1 19:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24669440eb9b9b68236623239c44b9a9022cf046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:31:ec:bb:e6:61:8b:ef:93:e4:d4:e7:fd:fb:
b2:33:79:4c:5d:f3:3f:4c:78:c7:75:2d:20:d6:40:
c5:5f:79:7b:e6:c0:16:67:fc:65:7b:34:d1:1c:d5:
1e:c9:be:77:c0:6b:49:de:2e:1f:2a:70:94:6e:df:
35:a9:1e:15:10:2c:9a:f9:fd:15:1d:1c:d6:2c:a0:
8a:78:10:26:5d:05:8e:7f:3a:41:14:4f:eb:45:bf:
ba:08:a0:31:7a:46:98:b3:ca:b4:68:f5:8b:4b:4b:
58:89:46:d4:f4:e4:94:c5:c9:e6:98:c0:59:94:a6:
b2:68:e3:c0:af:b3:f2:88:fb:1b:f0:84:36:04:ae:
96:c6:41:ad:3a:c4:5f:2a:60:8c:fa:18:32:ec:70:
57:34:d1:e3:bf:39:53:64:6d:4f:f8:a2:7e:fc:09:
86:b5:ff:7a:34:64:42:7b:15:e2:fb:74:fa:39:60:
e8:91:66:a2:93:18:55:35:22:3e:14:ef:45:0d:cf:
cf:36:13:43:70:07:3c:b8:d6:c2:a3:a9:72:fb:bf:
0b:6f:f6:51:0a:46:ba:68:18:7e:25:64:d6:a5:b9:
04:8b:7f:1b:10:96:ea:b4:42:f0:c2:54:d4:ed:6a:
f1:bc:02:00:1e:01:43:e7:8a:46:73:37:9f:fa:da:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:66:94:40:EB:9B:9B:68:23:66:23:23:9C:44:B9:A9:02:2C:F0:46
X509v3 Authority Key Identifier:
keyid:BE:93:19:B1:96:53:1A:79:F8:32:DD:DD:58:73:12:9E:38:C3:E4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpMZsZZTGnn4Mt3dWHMSnjjD5O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/707e75-1ecf-4d31-b752-d5e079ec928c/1/JGaUQOubm2gjZiMjnES5qQIs8EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/707e75-1ecf-4d31-b752-d5e079ec928c/1/vpMZsZZTGnn4Mt3dWHMSnjjD5O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.152.0/22
45.91.144.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:16:5b:b3:04:8a:ce:5d:00:ac:43:39:04:fa:49:0f:fa:3b:
d1:28:fc:f0:70:f5:f1:4f:cd:69:3d:ad:a0:d9:1c:ac:a7:4a:
10:75:b4:e0:35:92:b0:36:88:a8:39:37:6f:64:15:fb:9a:c2:
70:8d:c1:6b:66:18:47:d1:fb:26:ee:41:13:c0:d3:ed:55:50:
2a:bc:cb:d0:0d:12:9b:b9:b7:6c:e4:00:a1:45:f2:f7:0a:89:
e1:cb:06:4c:d7:08:37:61:0d:2b:44:fd:86:81:e9:60:23:e4:
e8:f5:f0:a6:0d:7d:49:a3:af:2f:e6:19:7e:9e:62:91:80:0f:
2b:43:d1:88:0f:97:af:fc:a2:b9:27:b9:86:0a:f9:83:7f:c4:
4f:55:1b:96:a1:22:18:42:0d:51:1a:83:ec:46:1f:83:dd:f0:
63:98:ca:e2:da:e1:a9:6b:54:59:46:85:05:57:72:9d:cf:81:
6a:f7:f0:c1:da:e2:c7:f4:22:93:b4:be:cb:91:16:ac:ad:fb:
8e:82:d3:a3:95:ad:48:42:4b:2d:72:89:b0:3f:2b:66:18:be:
ec:43:10:3e:b8:ad:0d:60:82:00:81:91:7a:48:a6:f0:15:84:
65:b5:c3:a8:5f:65:1e:ba:fa:57:e7:7c:50:fa:a9:b4:0d:b3:
f7:6f:b5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:04 2025 by rpki-client