Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JooGv75DfBcUhcQdt4XdpqTkh8U.roa
File: JooGv75DfBcUhcQdt4XdpqTkh8U.roa (raw, json)
Hash identifier: KDrZdp6zmk7g9gitgLmzd0IpxU3iepjxK0fBh41Y/OQ=
Subject key identifier: 26:8A:06:BF:BE:43:7C:17:14:85:C4:1D:B7:85:DD:A6:A4:E4:87:C5
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018572CC9F02FCB764020DE3DE96E289170B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JooGv75DfBcUhcQdt4XdpqTkh8U.roa
Signing time: Mon 02 Jan 2023 14:04:50 +0000
ROA not before: Mon 02 Jan 2023 14:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211557
IP address blocks: 45.141.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:9f:02:fc:b7:64:02:0d:e3:de:96:e2:89:17:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 14:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=268a06bfbe437c171485c41db785dda6a4e487c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a6:f1:ad:30:92:17:c0:bc:d4:56:11:4e:cc:
66:3c:6d:17:02:81:1e:f8:4c:98:e2:f6:57:95:91:
5a:06:9c:df:69:3c:54:45:f6:38:2e:34:2a:9b:26:
1d:eb:b2:87:c4:cf:14:6c:fc:77:2c:d0:be:12:00:
c6:22:fa:ae:53:db:c7:9e:8f:b7:4f:16:97:f1:2c:
0a:e8:0c:66:68:ff:29:bd:c3:5d:94:3f:d5:54:34:
e4:03:7e:c8:67:34:09:8d:d8:eb:c9:78:fc:a9:a7:
9b:25:4c:82:39:f4:31:0a:42:3b:5a:59:b6:d6:fe:
a1:42:f9:ae:2a:62:41:0b:ab:04:d9:f3:39:f6:29:
85:f8:89:9c:b5:6d:3b:1b:a2:31:29:a5:1e:6e:39:
07:54:d8:6d:ac:3a:86:b6:b9:a2:34:f1:e4:e5:0a:
55:bf:ca:ea:bd:1b:b4:d6:ff:ab:12:da:19:74:f4:
04:36:ad:b8:0f:ac:d9:8a:fa:f5:1e:59:e8:4b:58:
53:d3:0f:65:55:76:a7:cb:a6:3b:f5:e7:90:8f:19:
5e:39:42:7d:0e:cf:57:1c:fe:b0:bc:7c:a5:5d:4b:
d3:c4:35:0f:3b:f6:63:79:b4:43:13:d1:6e:d8:4c:
29:d1:76:21:d6:9d:78:f6:d8:20:47:91:e6:eb:eb:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:06:BF:BE:43:7C:17:14:85:C4:1D:B7:85:DD:A6:A4:E4:87:C5
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/JooGv75DfBcUhcQdt4XdpqTkh8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.149.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:33:77:d4:c2:99:4c:68:a7:e1:28:eb:db:92:ee:90:38:32:
af:3a:4f:a7:33:ea:6a:6f:93:0a:b1:42:4f:c0:32:47:6f:36:
5f:86:ca:fa:31:c6:1f:1a:77:27:77:80:f5:44:34:6a:9d:81:
d9:27:fb:0a:2a:ed:71:70:ca:1e:bf:9b:05:a1:79:cb:93:b7:
68:38:68:3d:46:66:ce:d1:96:db:64:38:e7:b7:97:a4:14:7d:
a0:96:b0:f0:b5:98:df:a4:7b:d9:ed:4c:65:57:2e:39:20:02:
3c:ce:fb:10:2d:80:68:29:2a:9e:6d:f0:1c:c5:df:0f:5b:84:
16:50:37:29:81:f5:f1:bc:cc:81:8a:05:eb:cc:45:a3:66:a2:
6a:eb:95:bd:b2:2c:01:8f:46:13:e5:92:3b:b0:8c:61:0a:aa:
04:13:24:de:be:ad:3d:26:dd:0a:ad:f6:7b:f0:47:74:37:4a:
99:2d:d0:4e:df:a3:49:b7:f7:fe:ed:d6:b8:38:96:d9:17:5b:
4f:05:b8:b8:22:c2:e4:3c:7e:c1:ae:fa:4f:ca:76:9c:a7:b8:
bb:41:fe:7a:17:ee:26:ea:d4:a6:87:60:2d:ab:7c:5d:0f:96:
fb:dc:d8:94:48:4e:af:1a:ee:45:4b:25:cd:05:77:90:e7:65:
30:09:f9:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyzJ8C/LdkAg3j3pbiiRcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjMwMTAyMTQwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjhhMDZiZmJlNDM3YzE3MTQ4NWM0MWRiNzg1ZGRhNmE0ZTQ4N2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66bxrTCSF8C81FYRTsxmPG0XAoEe
+EyY4vZXlZFaBpzfaTxURfY4LjQqmyYd67KHxM8UbPx3LNC+EgDGIvquU9vHno+3
TxaX8SwK6AxmaP8pvcNdlD/VVDTkA37IZzQJjdjryXj8qaebJUyCOfQxCkI7Wlm2
1v6hQvmuKmJBC6sE2fM59imF+ImctW07G6IxKaUebjkHVNhtrDqGtrmiNPHk5QpV
v8rqvRu01v+rEtoZdPQENq24D6zZivr1HlnoS1hT0w9lVXany6Y79eeQjxleOUJ9
Ds9XHP6wvHylXUvTxDUPO/ZjebRDE9Fu2Ewp0XYh1p149tggR5Hm6+s0uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCaKBr++Q3wXFIXEHbeF3aak5IfFMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvSm9vR3Y3NURmQmNVaGNRZHQ0WGRwcVRraDhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY2VMA0G
CSqGSIb3DQEBCwUAA4IBAQAvM3fUwplMaKfhKOvbku6QODKvOk+nM+pqb5MKsUJP
wDJHbzZfhsr6McYfGncnd4D1RDRqnYHZJ/sKKu1xcMoev5sFoXnLk7doOGg9RmbO
0ZbbZDjnt5ekFH2glrDwtZjfpHvZ7UxlVy45IAI8zvsQLYBoKSqebfAcxd8PW4QW
UDcpgfXxvMyBigXrzEWjZqJq65W9siwBj0YT5ZI7sIxhCqoEEyTevq09Jt0KrfZ7
8Ed0N0qZLdBO36NJt/f+7da4OJbZF1tPBbi4IsLkPH7BrvpPynacp7i7Qf56F+4m
6tSmh2Atq3xdD5b73NiUSE6vGu5FSyXNBXeQ52UwCfkH
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:53 2025 by rpki-client