Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/ruJJQ56Vhu1olZiih1SCGIZreKo.roa
File: ruJJQ56Vhu1olZiih1SCGIZreKo.roa (raw, json)
Hash identifier: IJHmJIP1ayDC0tbuVGoo3w6OOoLmUwDSxcxdW/4Pcy8=
Subject key identifier: AE:E2:49:43:9E:95:86:ED:68:95:98:A2:87:54:82:18:86:6B:78:AA
Certificate issuer: /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial: 0194266BE7C57F4C3F580A21373396EFB225
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/ruJJQ56Vhu1olZiih1SCGIZreKo.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48518
IP address blocks: 45.129.108.0/22 maxlen: 24
176.74.32.0/21 maxlen: 24
194.177.8.0/22 maxlen: 24
2a00:eb80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e7:c5:7f:4c:3f:58:0a:21:37:33:96:ef:b2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aee249439e9586ed689598a287548218866b78aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:9a:f7:50:41:c2:ce:9e:e8:13:62:de:d1:
27:42:ff:39:d3:ee:2b:7c:34:a9:bb:2e:2d:34:5e:
4d:da:b8:6a:fb:7c:cc:9b:49:28:4f:41:90:32:b7:
92:54:b7:4c:dc:46:b2:35:bf:49:89:20:31:50:c6:
a1:3a:13:ee:bc:6e:bf:b2:86:38:39:cb:d2:c6:7e:
cd:99:13:8a:7c:45:be:7f:69:5a:38:a2:e9:06:4e:
a6:52:34:d3:4e:3f:ca:d8:90:77:e5:f6:82:5f:9e:
79:14:0c:e2:52:1a:e9:13:6a:76:f2:78:4c:75:80:
8f:0e:ea:c2:64:31:93:45:d2:a1:9f:0b:d1:14:36:
e6:d3:69:8e:df:ec:4d:df:95:e6:a0:0d:4f:f7:0b:
73:c2:00:41:55:7a:f7:a3:ca:1c:74:27:a8:eb:b2:
3b:2c:2a:34:4e:c3:66:c9:6f:4b:1a:79:2b:0f:f8:
dd:47:73:ec:12:58:7e:4a:6d:a5:72:db:4d:e5:3a:
8a:a6:16:6f:03:3d:3e:1d:e2:62:f1:88:0c:b2:ee:
b7:a6:73:3c:a8:ad:31:7a:94:82:29:58:e7:4e:98:
64:91:a4:02:c0:13:61:03:b2:f5:ec:d8:8a:11:3f:
cb:5f:c8:9a:e1:12:a7:1e:d1:e1:4f:74:96:1e:77:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E2:49:43:9E:95:86:ED:68:95:98:A2:87:54:82:18:86:6B:78:AA
X509v3 Authority Key Identifier:
keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/ruJJQ56Vhu1olZiih1SCGIZreKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.108.0/22
176.74.32.0/21
194.177.8.0/22
IPv6:
2a00:eb80::/32
Signature Algorithm: sha256WithRSAEncryption
31:4d:ab:3f:51:7f:1f:e4:d3:81:c4:45:d2:81:62:50:2e:d1:
9b:78:24:61:e4:11:f0:0e:de:8b:3e:fb:8d:04:83:be:f3:77:
a0:b0:5d:2a:5d:6f:80:0a:c2:ab:30:8b:93:af:7f:0e:6b:1d:
8e:a9:2d:04:0d:cb:19:f5:ff:06:69:21:99:71:6a:ac:13:c2:
e5:2a:e8:00:fe:dc:ed:11:3a:f4:62:74:c3:1f:3a:5f:72:6d:
bc:fe:d7:04:5a:4a:b5:29:60:63:21:6b:33:84:2c:2a:44:35:
79:01:82:b0:41:94:5b:08:64:44:29:46:ca:fe:2d:5c:7e:80:
90:26:76:0e:5c:0e:7c:85:2b:78:5b:b8:ec:f0:aa:80:3d:22:
ab:f2:2f:13:ce:05:e7:83:2f:62:33:6f:ac:5b:ba:09:59:9d:
bb:c4:6d:45:6f:05:79:55:9e:c8:35:4f:43:2d:1d:fa:81:23:
86:7c:5b:43:f1:05:b4:8f:9b:63:e6:e9:f4:36:2a:c5:5b:e9:
7f:ea:4e:74:88:23:49:5e:39:7b:2e:8c:80:0a:ac:95:41:9b:
54:84:fa:31:0c:25:90:bf:a2:44:02:09:e8:27:9d:b7:c1:87:
dc:7f:5e:1b:1b:a6:0d:e6:ee:62:18:cd:d2:19:9b:f8:b0:83:
1f:8a:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:34 2025 by rpki-client