Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/JLeO4IjAlJilB79e8pL5Zu3-Vec.roa
File: JLeO4IjAlJilB79e8pL5Zu3-Vec.roa (raw, json)
Hash identifier: Q9/066gHog+txc/n/7L8/eJJBKiOD6GcrBjwkbblTAY=
Subject key identifier: 24:B7:8E:E0:88:C0:94:98:A5:07:BF:5E:F2:92:F9:66:ED:FE:55:E7
Certificate issuer: /CN=235163d39db88816cddc597a5db5eae707d3de39
Certificate serial: 0187244779957689B364F48E4495E27AE265
Authority key identifier: 23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/JLeO4IjAlJilB79e8pL5Zu3-Vec.roa
Signing time: Mon 27 Mar 2023 18:14:36 +0000
ROA not before: Mon 27 Mar 2023 18:14:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203819
IP address blocks: 45.150.123.0/24 maxlen: 24
2a0f:be01::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:24:47:79:95:76:89:b3:64:f4:8e:44:95:e2:7a:e2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235163d39db88816cddc597a5db5eae707d3de39
Validity
Not Before: Mar 27 18:14:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24b78ee088c09498a507bf5ef292f966edfe55e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:c2:a9:3b:33:94:cc:aa:b2:5b:06:8b:27:
f1:f3:25:7f:f0:8f:e0:1d:ae:5a:d0:91:78:4c:b2:
b9:42:44:1a:89:19:9a:b2:ee:e6:d5:35:fa:2e:69:
7c:9b:21:92:4e:dd:4c:19:6a:ad:df:c8:bb:ce:02:
fe:3f:fb:c3:c6:89:3e:9b:32:b1:1a:85:56:f9:fe:
52:04:8e:c5:bd:a0:7b:20:00:ba:7e:07:ee:f9:a6:
ab:92:d1:c8:c5:35:6b:43:dc:07:a8:3d:c4:0b:ea:
14:96:c0:8e:41:fb:66:3f:3f:52:6c:e3:82:d7:47:
28:c0:91:bf:ab:4b:6c:1b:70:b0:8c:c7:0a:6b:39:
77:55:ac:45:7f:27:5a:e2:1e:41:c1:e8:f8:e2:6d:
82:52:1a:bd:84:6f:56:9f:39:8a:ec:42:0f:6c:32:
56:2e:d9:b8:57:18:dc:13:8f:75:02:59:4e:b7:b4:
57:1e:22:e0:0a:f5:5d:67:6a:45:a6:56:82:a5:40:
5c:ba:f1:74:29:46:ef:20:67:ea:3e:72:df:66:d8:
fb:44:db:ee:0b:0d:b2:f7:9f:ae:ea:fd:58:62:d7:
77:f2:77:33:f5:37:e6:d3:d5:4e:03:c1:6c:0d:5a:
b1:2f:ab:37:ac:da:6d:f1:48:9c:14:57:7e:ea:d4:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:8E:E0:88:C0:94:98:A5:07:BF:5E:F2:92:F9:66:ED:FE:55:E7
X509v3 Authority Key Identifier:
keyid:23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/JLeO4IjAlJilB79e8pL5Zu3-Vec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.123.0/24
IPv6:
2a0f:be01::/40
Signature Algorithm: sha256WithRSAEncryption
3b:c1:99:a0:20:d5:32:53:0b:05:8d:fd:76:79:3c:ab:3e:c2:
83:78:c0:34:89:f7:13:1f:8a:c4:3b:d8:bf:7e:34:08:90:03:
70:69:6f:cd:4e:15:3a:56:27:1a:da:68:57:47:e8:66:8d:d5:
19:32:e4:a4:29:8e:01:4a:6a:41:fc:ca:fb:08:8f:04:54:5f:
72:83:fe:5e:95:c7:88:eb:d8:0d:39:9b:02:e9:08:cb:1f:ee:
31:3a:9f:34:7f:c1:77:0a:ea:42:80:25:bf:f4:1f:0e:4d:a9:
86:8d:6b:34:00:d9:1a:b3:61:6c:4d:15:20:5b:c3:db:95:a6:
a5:ac:61:ff:48:1d:ca:a6:bd:d5:d6:99:4a:ef:d7:6a:71:e2:
f8:f9:01:c0:f5:bf:2b:7a:98:99:f7:57:2f:5e:bd:2d:69:db:
e8:b1:ff:d7:aa:15:d0:7c:e3:0f:a5:c2:47:40:7b:67:60:4c:
fe:5c:4f:79:97:f5:f8:c0:8c:36:0b:32:a8:1a:19:ab:46:f4:
4e:2b:bd:43:22:bc:a9:5a:a8:21:a9:b6:09:04:69:c0:db:4c:
23:0a:ff:08:f4:d7:3a:8c:8c:97:9a:ee:d4:8e:95:2d:51:a4:
f2:87:ef:5b:8e:f0:7e:24:eb:21:63:8a:28:82:32:01:87:bf:
23:3d:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:50:10 2025 by rpki-client