Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JPVw6ABj-dEbpXoxj6linYU31Wg.roa
File: JPVw6ABj-dEbpXoxj6linYU31Wg.roa (raw, json)
Hash identifier: WAScTczkyv+nKueVvUQebBHzy/aHcdugaODVOK+Zg9I=
Subject key identifier: 24:F5:70:E8:00:63:F9:D1:1B:A5:7A:31:8F:A9:62:9D:85:37:D5:68
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018572CC9B11D43695E4D40871913434D350
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JPVw6ABj-dEbpXoxj6linYU31Wg.roa
Signing time: Mon 02 Jan 2023 14:04:49 +0000
ROA not before: Mon 02 Jan 2023 14:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 45.147.45.0/24 maxlen: 24
5.180.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:9b:11:d4:36:95:e4:d4:08:71:91:34:34:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 14:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24f570e80063f9d11ba57a318fa9629d8537d568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:c6:58:fd:c7:1a:01:59:a9:c2:2c:28:de:
f2:78:f8:91:b3:0c:eb:cc:9f:ad:f1:22:24:fa:21:
2d:0b:54:e7:ad:4e:42:96:df:3d:8c:a2:fa:0b:89:
89:4d:f0:e3:92:96:a2:18:a3:22:a5:60:36:36:b4:
15:9a:a1:4d:1f:29:0b:f2:08:16:17:11:7d:58:dd:
e3:b6:af:e2:8e:43:cc:85:80:55:b0:4d:48:35:df:
94:8e:96:20:46:67:0b:66:fc:5f:05:d3:f4:70:21:
d6:f9:9f:a2:3c:37:50:46:53:83:ea:f3:c9:9a:b0:
14:f8:7d:16:a3:97:46:7f:a4:7b:a5:8c:ba:94:47:
26:27:70:98:f0:c5:bd:30:78:56:13:24:36:c3:71:
2f:58:55:f9:ef:4f:e7:df:6f:8a:9a:46:78:12:e8:
63:86:92:71:d0:33:47:38:b6:e2:84:7d:a8:12:d7:
fb:67:45:7e:c5:93:52:50:77:3e:48:36:65:21:1b:
26:ba:d1:43:b3:4c:94:5a:36:0f:36:be:3c:33:1f:
8c:eb:c8:36:aa:e2:c9:28:cd:54:24:85:c2:60:83:
9a:61:e1:5d:d5:b0:8d:d1:2c:de:ad:fc:a6:95:39:
fb:f0:0b:90:a5:93:c1:ae:89:59:a2:28:66:a9:b7:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F5:70:E8:00:63:F9:D1:1B:A5:7A:31:8F:A9:62:9D:85:37:D5:68
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JPVw6ABj-dEbpXoxj6linYU31Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.147.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:4e:63:4a:fe:e5:b8:5c:88:6e:83:b3:bb:ee:6e:53:a5:87:
3e:d4:a2:a4:0e:b8:e8:76:c4:55:1b:90:9c:1c:a0:c0:f4:be:
27:d4:bd:ca:1f:d3:8e:39:d4:ac:a8:4d:3b:a8:eb:ad:b6:5c:
a4:a0:e6:ad:e1:32:44:58:ed:d8:b6:c9:e6:65:af:8d:12:4c:
49:3a:46:12:88:b5:a0:3a:60:87:d7:f3:a6:58:30:3a:58:32:
67:a7:1d:57:c9:8e:fe:46:e4:66:ad:35:6c:c8:55:9c:b4:8e:
49:90:5f:23:46:17:ce:4b:17:06:41:63:51:ac:72:64:8f:bd:
9f:91:08:49:0a:73:86:c2:20:80:2c:32:cf:3d:9f:f7:45:68:
43:26:de:44:59:7e:ad:d6:b1:6f:96:fe:40:59:a1:52:82:c7:
89:41:e6:ef:20:0d:ff:9c:72:5b:c1:31:a3:04:60:17:ef:9f:
15:17:87:18:f0:a0:23:7e:4f:cd:c4:6e:88:b0:97:4e:ca:74:
0f:b9:43:3f:1d:a8:6c:53:11:fd:19:a6:2f:fd:ac:2d:2d:fe:
28:3f:e8:2e:c0:ad:3b:b5:41:0d:ea:e0:58:04:68:a5:8f:de:
e3:3d:4d:88:b6:6a:49:7f:3f:19:57:35:64:1b:2a:c6:95:ab:
f2:30:b6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:03 2025 by rpki-client