Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/JmL-62plaj3v5qj90OXSOZDCRFE.roa
File: JmL-62plaj3v5qj90OXSOZDCRFE.roa (raw, json)
Hash identifier: g62mlyQQTg814zHJremPNJVqi4zB0Q9l9zxUXqjwmQ8=
Subject key identifier: 26:62:FE:EB:6A:65:6A:3D:EF:E6:A8:FD:D0:E5:D2:39:90:C2:44:51
Certificate issuer: /CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Certificate serial: 0186FB93B73964A7DB4071BDC427854765C3
Authority key identifier: 4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/JmL-62plaj3v5qj90OXSOZDCRFE.roa
Signing time: Sun 19 Mar 2023 20:33:27 +0000
ROA not before: Sun 19 Mar 2023 20:33:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 45.142.112.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fb:93:b7:39:64:a7:db:40:71:bd:c4:27:85:47:65:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Validity
Not Before: Mar 19 20:33:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2662feeb6a656a3defe6a8fdd0e5d23990c24451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:6a:01:9a:27:b6:bf:20:d2:03:4a:2a:c8:
92:41:cc:c9:52:3b:07:eb:86:48:16:f3:12:ea:30:
71:91:87:ca:d9:97:64:fd:1e:0d:fe:96:70:dc:fb:
fa:6c:af:21:b6:17:f1:06:8b:07:3c:53:7b:1f:66:
a6:a2:9b:2d:8f:4e:81:a4:84:66:fd:e4:fa:2c:23:
df:2c:86:e2:10:b1:8e:c2:63:b6:b9:aa:9c:75:3e:
87:2d:9b:0d:b3:4c:72:a0:0c:60:0d:b9:56:6e:70:
68:e8:80:b3:7a:2f:37:c8:b4:5b:c4:14:cb:72:94:
5e:9a:55:60:95:ef:8a:a1:4e:c7:0d:a3:6e:0b:2b:
40:e0:53:d3:65:73:9b:70:a5:87:bd:95:e5:5a:04:
4d:b9:eb:b1:a3:9a:2e:30:7f:02:33:58:7b:6e:fb:
9e:41:bc:53:41:30:79:29:74:d1:e2:b6:0a:f6:21:
11:e7:13:7f:8b:82:a2:5e:7a:b2:4d:36:47:45:f1:
af:6a:1d:83:7d:82:90:99:77:b6:1b:e5:35:96:19:
3e:54:93:af:f4:07:ff:fb:af:fe:b2:04:62:dd:84:
46:26:f2:64:49:06:32:f3:7e:d9:3c:45:22:62:93:
1b:e0:0c:7f:3a:fc:cf:19:31:70:43:f1:21:84:6c:
91:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:62:FE:EB:6A:65:6A:3D:EF:E6:A8:FD:D0:E5:D2:39:90:C2:44:51
X509v3 Authority Key Identifier:
keyid:4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/JmL-62plaj3v5qj90OXSOZDCRFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/SnIJ-LftT6m_sniIDCn5jWqWtjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.112.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:d4:13:a5:b3:fa:78:6c:71:22:85:c9:f3:d8:6a:b3:3b:79:
a7:21:89:73:2b:ad:97:40:1b:f1:15:07:9a:54:10:15:cb:bc:
5c:ac:8c:ab:14:33:98:8d:32:7d:b9:33:53:59:02:eb:dd:3e:
b0:48:65:de:7a:b6:e0:8c:2b:0a:6b:6b:96:8e:20:77:a6:58:
a3:ba:21:5c:31:60:6d:88:97:b4:10:34:89:d8:84:9a:5a:74:
93:27:aa:0c:fb:ec:76:37:67:ac:be:23:db:72:c2:51:aa:9f:
03:02:59:23:f0:ad:73:68:7c:58:27:67:eb:e1:05:6f:d8:39:
24:cb:ad:90:a8:4e:83:75:50:75:bc:0b:e2:d3:f2:84:4e:8f:
e2:aa:27:57:3c:99:9e:4f:83:06:35:0d:85:bf:e5:ba:1b:1a:
f4:24:d1:06:0d:6b:d4:a1:f6:63:0a:e3:f8:c6:53:ca:aa:9d:
10:81:a9:58:72:1a:21:77:a1:06:c9:35:07:8c:5a:60:b7:aa:
8c:43:bb:3d:49:75:f0:e0:7e:7e:30:92:87:3b:46:3f:33:12:
17:bb:4d:c6:4e:d3:fc:18:fa:43:d7:80:b8:82:8d:c1:ca:60:
1d:b7:0f:a9:c4:95:4a:58:80:64:19:91:da:27:66:58:35:f3:
01:61:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:48 2024 by rpki-client on console-fra.rpki-client.org