Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/jicJbxUMGJcF1p7VZOn-lVBMJUc.roa
File: jicJbxUMGJcF1p7VZOn-lVBMJUc.roa (raw, json)
Hash identifier: /fOUtKSNy2Vo7kiccVYckEC7zMhJ/nkbfqGfIBfKR9I=
Subject key identifier: 8E:27:09:6F:15:0C:18:97:05:D6:9E:D5:64:E9:FE:95:50:4C:25:47
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 08F7647D
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/jicJbxUMGJcF1p7VZOn-lVBMJUc.roa
Signing time: Sun 03 Jul 2022 12:20:25 +0000
ROA not before: Sun 03 Jul 2022 12:20:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.136.7.0/24 maxlen: 24
5.180.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150430845 (0x8f7647d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jul 3 12:20:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e27096f150c189705d69ed564e9fe95504c2547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:9d:03:71:08:1e:f4:17:42:ab:e2:aa:f1:
2f:a4:11:c2:a3:9f:43:f8:97:36:72:a7:b5:4b:2f:
d7:26:6e:dd:a4:39:84:43:c0:79:79:ff:7e:a2:4d:
a8:44:03:b5:9e:a8:35:7e:10:91:89:32:71:5b:63:
b4:26:96:dc:a0:26:09:ba:44:0e:dd:a0:47:25:8c:
41:5c:a0:cc:2d:37:d5:2e:b4:b8:52:4d:00:45:af:
42:0c:65:e9:26:86:bd:58:b3:e4:aa:0f:f9:69:83:
37:9e:2e:74:90:5c:1c:3c:51:43:7c:e9:66:e5:22:
5a:36:c3:05:9c:7b:5d:f2:f3:d2:68:56:01:64:a7:
7f:48:bb:e0:ef:00:6f:a8:05:7a:3a:ff:75:92:d0:
3d:66:f5:49:01:e3:c4:6b:66:9b:a6:ef:58:8e:1d:
7c:6a:13:58:50:0c:c3:1e:00:67:31:66:55:f3:30:
8d:98:f8:a3:0e:4a:a2:88:6c:43:d2:72:14:a3:40:
51:e7:f3:65:86:d6:40:89:87:b0:8d:a6:e5:6e:c1:
e1:67:f8:f1:51:83:1c:83:4d:2c:98:13:02:35:0b:
ce:87:a3:c0:32:4e:61:ff:6b:33:f1:42:d9:e8:f0:
9e:9f:26:4a:77:e7:63:d0:a1:6d:ab:c6:81:b6:48:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:27:09:6F:15:0C:18:97:05:D6:9E:D5:64:E9:FE:95:50:4C:25:47
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/jicJbxUMGJcF1p7VZOn-lVBMJUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:c7:2c:02:89:2f:dc:fe:bb:b1:f6:6e:0d:97:b6:5a:e0:1a:
b0:3d:8c:ca:65:bc:52:03:08:d6:b4:79:38:33:5f:d8:bd:32:
e5:61:40:d5:c6:43:88:6e:f9:a3:7a:75:75:49:b3:d6:fd:f5:
76:9e:74:96:33:3d:71:e4:b0:b7:dc:7a:65:52:f6:2b:a2:b2:
eb:f3:a0:56:32:2e:c9:80:9e:72:f7:f9:65:5b:ab:f7:26:6f:
23:23:37:51:61:ea:d9:49:55:2e:78:b1:70:c3:bd:d7:8c:a6:
f0:74:94:17:e9:49:f8:00:46:5b:04:11:64:84:47:eb:73:43:
e6:e4:f6:53:83:81:9c:11:42:81:8e:be:20:fb:0b:11:38:1c:
31:ef:77:9d:97:29:5e:df:4b:8c:48:7a:4c:ad:e6:7f:7d:27:
1a:d3:d6:bb:61:93:c5:9e:6b:45:44:95:7f:8d:ae:1b:84:5e:
8b:fe:1e:ab:3f:0f:38:51:65:8f:65:88:be:b7:6c:f6:ae:40:
8d:d0:2b:3b:c7:c1:46:61:04:ce:81:ee:67:d0:17:8b:eb:24:
e1:dd:6f:46:97:0b:c2:3c:4f:33:46:58:62:a4:5c:c1:97:d9:
0b:a9:ea:2b:42:f2:15:23:5b:40:bd:55:6b:e6:e5:54:6e:20:
d4:84:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:47 2025 by rpki-client