Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa
File: 6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa (raw, json)
Hash identifier: g919cnEgUex9Vq6Cq0vNxzfmvBW8lAFZJ89+7u0kuuo=
Subject key identifier: E8:99:B6:7A:88:FD:65:21:CD:FA:83:94:6F:DA:50:94:86:52:C9:E3
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01941F8C51C25D0EC6B7D24474F72A5C59D8
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.84.112.0/23 maxlen: 24
45.84.114.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:51:c2:5d:0e:c6:b7:d2:44:74:f7:2a:5c:59:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e899b67a88fd6521cdfa83946fda50948652c9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:21:c6:b6:8f:a9:95:2a:26:ca:63:c1:29:bc:
8e:40:4a:fa:8c:34:3f:ac:80:34:9d:cb:0b:e2:de:
b9:f9:3b:ed:fb:17:66:1f:96:95:0b:05:66:bd:33:
a3:2e:11:e4:38:67:c2:1f:93:ee:fb:02:2b:e2:de:
bb:60:16:1d:2f:2e:fc:24:e6:99:40:67:5f:42:c7:
5d:db:30:15:70:8a:f6:ee:f1:ce:df:a5:64:a3:b6:
87:ed:e3:1d:38:a9:43:df:ba:38:5f:4c:95:83:3f:
a6:c5:3c:48:5f:7b:f6:1a:fc:78:be:f4:79:0e:30:
f1:12:88:c7:ca:9e:c6:16:48:13:39:04:8a:c4:11:
80:4a:87:22:78:d8:93:9d:0c:53:9c:96:b1:e5:aa:
ee:60:51:4e:19:bb:28:c7:3c:85:54:27:b9:32:0b:
d4:8f:3f:2f:01:06:81:93:b2:26:79:f3:a2:ea:9b:
78:81:e5:df:88:a1:2c:ef:a7:37:ce:ad:08:6b:29:
86:50:8f:69:1e:c1:4c:6f:2b:00:e9:02:09:4b:ef:
6d:a7:1a:d1:65:08:fa:df:f8:ed:c2:f2:31:32:cf:
aa:b0:6c:82:19:45:7a:40:dc:8d:76:00:d4:14:29:
8c:b8:e0:f0:07:f1:18:90:dd:7c:a6:9b:2c:af:bd:
86:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:99:B6:7A:88:FD:65:21:CD:FA:83:94:6F:DA:50:94:86:52:C9:E3
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/6Jm2eoj9ZSHN-oOUb9pQlIZSyeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.112.0/22
Signature Algorithm: sha256WithRSAEncryption
25:96:a1:e5:b3:dc:51:7d:b1:87:80:88:23:8f:83:dd:0f:bb:
eb:a9:a3:4d:97:f0:1a:93:68:d7:c6:7c:25:43:fb:a8:dc:b0:
7c:52:d4:6c:3d:52:55:48:0c:25:78:1e:45:c6:44:f8:29:17:
bd:3e:d6:9a:59:04:24:4c:84:ec:3b:b2:f9:81:af:5a:c6:03:
7b:cd:a8:58:0d:51:be:ac:8e:2e:13:7d:99:75:74:be:c0:1e:
36:c9:ec:96:e4:29:7a:28:fc:e8:93:6c:36:8b:db:22:71:eb:
cb:42:eb:8f:6e:b2:e8:53:c5:bf:8c:85:b5:ed:33:99:ba:4e:
8d:91:d4:c5:ce:4d:e8:6b:28:ac:00:c5:42:0d:9f:5f:21:41:
dc:b7:33:f7:81:0e:8c:24:6f:23:d0:bf:c3:59:b5:10:35:54:
18:d2:79:00:77:04:cc:88:cd:f5:cf:38:9c:2a:74:82:c8:77:
f7:ec:92:fd:5e:e1:93:c7:cc:bb:cf:8e:a4:dd:69:e2:c9:8e:
6d:8d:e6:3d:df:84:76:06:09:55:61:af:e4:eb:a9:ac:a4:ae:
55:fc:6f:a5:a5:95:5c:61:b4:55:34:fe:c9:9b:36:de:66:f4:
e6:22:fa:c9:3f:67:05:75:36:59:c3:78:9e:b4:27:8c:0f:0a:
bf:98:73:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:02:28 2025 by rpki-client