Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/JeT3PicL3j6wpeXRT3s8FrJpy3w.roa
File: JeT3PicL3j6wpeXRT3s8FrJpy3w.roa (raw, json)
Hash identifier: tjXOPJYxlFtc8BfVkznJC0Nu37PcV0Dt33rxJApZ9kY=
Subject key identifier: 25:E4:F7:3E:27:0B:DE:3E:B0:A5:E5:D1:4F:7B:3C:16:B2:69:CB:7C
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 019421446A64A1CEA30418D618C0B3D9B833
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/JeT3PicL3j6wpeXRT3s8FrJpy3w.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49870
IP address blocks: 45.80.36.0/23 maxlen: 23
45.95.144.0/23 maxlen: 23
45.95.145.0/24 maxlen: 24
45.95.146.0/24 maxlen: 24
45.95.147.0/24 maxlen: 24
2a0e:3980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6a:64:a1:ce:a3:04:18:d6:18:c0:b3:d9:b8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25e4f73e270bde3eb0a5e5d14f7b3c16b269cb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:94:5f:cb:92:7b:2b:3d:30:f3:69:9d:cb:
18:ed:7d:8e:49:0f:ba:5b:02:23:cc:eb:fe:50:13:
63:6b:97:75:13:ef:9e:44:62:51:b7:5b:3d:32:7f:
df:92:84:de:4c:18:87:a1:51:11:b3:1b:60:d2:84:
fa:29:96:a2:2b:fc:13:6a:6c:ab:3f:0c:8a:d7:9a:
31:89:8a:d8:7e:40:3c:f4:63:71:aa:eb:25:55:87:
2d:f6:53:4f:83:2f:02:a4:c5:89:dd:66:bc:ce:9c:
95:59:cb:36:2b:5d:0f:b9:fb:8c:0f:db:c5:25:a6:
c9:09:cd:dc:21:c1:f2:a9:38:3c:86:19:51:1e:fd:
85:56:83:ca:8d:1c:ee:91:e6:70:0f:2f:43:ec:c2:
ff:fe:c2:1d:33:b5:7b:9d:1d:19:2d:9e:57:ca:e6:
14:a5:aa:cc:42:e4:f8:5b:1c:9b:9e:d5:be:c0:85:
02:99:df:08:2f:1e:bc:70:dd:3e:a2:59:96:43:d8:
a0:10:f9:17:36:a3:d9:24:86:3f:4b:47:64:9c:5d:
ef:eb:ef:f4:04:41:76:41:d6:68:95:f1:2f:08:9d:
cc:1a:7d:12:ee:2e:a9:71:08:8e:29:10:b0:b8:92:
0d:bf:c7:21:22:c3:a0:d9:df:ab:7f:0f:5d:bb:30:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E4:F7:3E:27:0B:DE:3E:B0:A5:E5:D1:4F:7B:3C:16:B2:69:CB:7C
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/JeT3PicL3j6wpeXRT3s8FrJpy3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.36.0/23
45.95.144.0/22
IPv6:
2a0e:3980::/29
Signature Algorithm: sha256WithRSAEncryption
89:72:96:1c:0b:c3:af:4d:52:87:75:70:68:0c:d4:76:1e:07:
8c:de:a6:58:03:af:6c:94:6b:0a:cb:7d:31:ac:a9:59:54:76:
b3:75:11:6d:74:87:59:fa:22:a5:97:17:2d:77:3d:d7:9f:99:
80:ca:d0:f2:49:01:5f:81:9c:89:d9:9a:a7:e6:88:9d:d6:31:
1f:66:47:f5:b2:a8:be:f0:3a:28:f5:29:29:bb:ce:19:68:c4:
8f:f9:d8:a4:b5:bf:07:0f:8f:fd:2f:98:d0:ba:bc:02:fb:9d:
7b:3d:d2:39:39:d0:30:80:cd:c1:e3:c9:3c:b6:c3:96:46:9d:
4a:f4:ed:8e:ef:ac:c5:b0:13:74:c9:df:84:cc:a1:f2:98:97:
3e:08:52:47:a0:ac:e4:be:d7:7d:b0:d2:f9:22:d0:a2:5a:07:
5d:b5:d9:08:89:a0:c4:14:9a:60:3c:3b:f6:37:39:0e:2c:15:
5f:6c:76:2f:11:c3:e1:0b:2c:b4:bd:f0:f9:f6:be:97:8a:55:
e1:e6:cf:48:ef:5a:75:42:8e:e2:ca:fb:d1:a3:0c:17:44:6e:
d6:28:62:c7:a5:99:95:c3:27:20:71:4f:22:61:41:db:f7:65:
bd:42:b3:79:94:a9:75:88:e9:dd:90:99:5c:cf:30:8a:1f:f2:
bf:16:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:53 2025 by rpki-client