Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/JCJJJHwY0sdSlQmnuRstuw39rnI.roa
File: JCJJJHwY0sdSlQmnuRstuw39rnI.roa (raw, json)
Hash identifier: eiReUZsK2smHz2fIe/6GlxXPX2QFn4YylBAc/Wu2TYw=
Subject key identifier: 24:22:49:24:7C:18:D2:C7:52:95:09:A7:B9:1B:2D:BB:0D:FD:AE:72
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 018424BE22F1C535355B42D663DE7C4C18A7
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/JCJJJHwY0sdSlQmnuRstuw39rnI.roa
Signing time: Sat 29 Oct 2022 17:15:51 +0000
ROA not before: Sat 29 Oct 2022 17:15:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203511
IP address blocks: 45.95.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:24:be:22:f1:c5:35:35:5b:42:d6:63:de:7c:4c:18:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Oct 29 17:15:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=242249247c18d2c7529509a7b91b2dbb0dfdae72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:1b:86:7b:e5:7f:a0:c7:bc:f3:10:59:89:
54:a0:f7:cd:0e:30:75:1b:d7:a3:0c:0f:cd:e1:6e:
5e:0e:02:78:64:f1:07:68:36:9a:ab:59:75:8a:14:
0d:f8:e8:ae:e7:69:dc:bd:21:40:cb:1e:c1:57:3b:
b3:6e:82:b0:0b:ed:24:e9:3a:40:49:fe:51:ed:02:
98:ef:81:67:d0:28:30:22:1d:f2:0a:95:81:be:05:
30:02:6d:7a:67:76:b6:8d:0e:09:8f:80:18:83:bc:
de:1e:ce:44:13:87:e6:2f:c2:17:86:6e:33:6d:39:
e1:a6:15:d9:ca:5d:03:ac:c3:d5:75:f4:f8:45:ab:
86:25:0b:36:f2:94:8d:7a:57:dc:f4:33:b6:8e:d0:
2d:d1:38:d0:22:a3:4f:15:33:2d:fd:13:87:a4:aa:
e7:bc:e8:53:66:2b:f3:df:39:16:27:d8:62:e7:69:
b2:b0:e2:58:2d:a6:4d:7b:09:a7:a8:32:20:cc:ae:
4d:02:11:92:a2:b9:89:c0:0c:9a:10:2d:7d:53:55:
f3:57:1c:9c:96:83:2e:81:1d:c8:1b:ee:9c:85:68:
45:7c:b9:3c:2e:da:66:0b:77:45:fc:14:3d:6d:62:
c3:2e:dc:1d:5d:06:d0:32:da:43:93:10:0a:9e:0c:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:22:49:24:7C:18:D2:C7:52:95:09:A7:B9:1B:2D:BB:0D:FD:AE:72
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/JCJJJHwY0sdSlQmnuRstuw39rnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.214.0/24
Signature Algorithm: sha256WithRSAEncryption
64:80:f2:56:78:e9:f9:9e:7a:01:2f:53:84:ff:85:35:43:88:
93:96:5d:72:31:df:69:bc:f0:bb:ed:53:ab:9c:48:1b:39:81:
49:7e:13:43:d7:4a:57:25:df:4d:26:63:e5:e0:d1:b6:29:db:
f1:be:92:53:73:a4:ca:d3:4c:77:60:e0:de:36:36:8c:f5:38:
c8:fe:b3:7b:ca:e8:13:56:a4:d4:d4:20:a2:3b:b2:b5:90:be:
63:29:e7:2a:88:9f:3b:d0:ef:a2:39:5d:c3:5e:df:27:da:46:
be:d5:15:76:63:85:10:39:f7:bd:a6:a7:64:4b:87:48:c9:ad:
f3:3f:53:02:4b:fd:91:72:4f:4d:6d:6b:bf:de:8c:e4:e0:52:
31:4a:ea:6f:45:48:2f:86:06:4e:54:5d:89:9a:57:08:dc:84:
3a:1a:a6:0d:cf:70:53:55:d9:e5:63:8a:58:ad:7a:be:1f:5c:
a2:3b:9a:61:4a:1e:6f:5e:08:2b:87:b2:09:10:fa:97:97:1b:
f6:64:0d:4b:94:3c:90:38:1c:04:24:78:98:cc:43:93:da:8d:
c9:c0:86:b9:87:a9:ac:77:dc:4f:eb:c7:e6:d4:52:40:04:ad:
16:74:ad:98:df:5b:a4:f8:7b:42:d6:5f:14:e1:76:8d:6e:f6:
2a:f3:32:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:29 2025 by rpki-client