Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/ijexLFPl21o2vMXo9e-kEIXhdCg.roa
File: ijexLFPl21o2vMXo9e-kEIXhdCg.roa (raw, json)
Hash identifier: sQcylWQsa7nnud1Hjg+dtGByn5NdYPWzS4PFcenMTRU=
Subject key identifier: 8A:37:B1:2C:53:E5:DB:5A:36:BC:C5:E8:F5:EF:A4:10:85:E1:74:28
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: CA5AA5
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/ijexLFPl21o2vMXo9e-kEIXhdCg.roa
Signing time: Mon 11 Apr 2022 13:11:27 +0000
ROA not before: Mon 11 Apr 2022 13:11:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2.59.183.0/24 maxlen: 24
2.59.182.0/24 maxlen: 24
45.156.144.0/24 maxlen: 24
45.156.145.0/24 maxlen: 24
2.59.181.0/24 maxlen: 24
2.59.180.0/24 maxlen: 24
45.156.146.0/24 maxlen: 24
45.156.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13261477 (0xca5aa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Apr 11 13:11:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a37b12c53e5db5a36bcc5e8f5efa41085e17428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:27:de:90:d4:d5:e6:e4:83:7f:15:07:45:
ce:f9:fa:ef:d4:82:c2:36:f6:2a:a3:43:52:4c:60:
cc:7a:7d:f0:0d:10:a4:c8:f9:ca:92:05:45:47:c9:
42:8f:de:0c:be:70:52:3c:7b:43:8e:5f:ba:14:00:
70:0f:be:48:51:d1:bb:ca:49:50:99:2c:54:9d:20:
17:d5:c6:d1:e2:54:c7:4c:95:b6:1e:0f:77:23:65:
11:0c:3f:8c:b2:c3:56:a1:54:56:26:21:c5:97:6f:
8c:3d:a7:72:dc:ef:12:6b:c7:8d:39:53:e4:3b:c6:
22:77:09:e8:7d:8d:63:2a:40:1b:94:d8:78:96:ed:
7f:c4:d1:b1:5a:23:ad:71:57:92:fa:e8:a5:85:f4:
f5:ed:b8:f5:8b:29:19:2c:8f:32:19:02:c6:16:54:
e8:17:1f:d3:d7:4b:7d:e0:a3:a3:b0:6d:0d:91:b9:
74:3d:15:10:25:bc:d1:9d:f7:92:ff:59:2b:66:19:
51:db:c4:ff:83:a3:21:d3:4e:ac:9f:89:6f:f7:df:
86:62:32:93:bc:f4:ec:ef:7a:89:bf:d7:6f:55:e4:
f9:e2:2c:f4:e5:0d:0e:0f:eb:40:c3:34:00:f8:c7:
0f:dc:a7:02:59:6e:4a:69:30:e3:d8:74:af:5c:ab:
c4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:37:B1:2C:53:E5:DB:5A:36:BC:C5:E8:F5:EF:A4:10:85:E1:74:28
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/ijexLFPl21o2vMXo9e-kEIXhdCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/22
45.156.144.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:15:9b:35:71:4e:70:76:27:ef:7d:5a:ba:ff:03:f6:cd:a9:
c9:7a:0c:cc:dc:3d:2b:7d:e0:02:6c:26:e5:42:a7:d5:0b:e1:
07:2f:31:cb:3e:2c:1f:bb:87:c6:d6:17:b1:75:35:03:7a:5d:
dc:1e:1e:65:75:aa:bb:91:d3:be:fa:d1:41:ff:05:d5:ff:1a:
53:6b:7a:b5:36:61:4c:aa:13:00:3f:81:3d:57:2f:4c:6c:c0:
eb:3b:ca:85:39:5c:3d:47:48:04:41:07:a7:fe:1d:a3:04:bb:
85:5b:26:2b:ae:96:60:68:dd:23:e7:15:7c:15:63:1c:8b:7b:
fd:ac:07:4f:b0:42:41:91:c6:3c:aa:72:81:28:2e:6b:39:f9:
41:38:ad:2f:d5:6b:9c:28:49:22:38:88:2a:b7:d3:df:32:48:
63:9a:ac:32:9e:ce:61:da:12:f2:79:7d:c2:83:b7:d2:28:2f:
12:e6:ee:9c:df:be:6b:9a:d5:0f:ca:33:65:d8:5d:70:5c:fa:
ee:02:60:54:e7:fb:7b:3b:bd:b7:dd:27:fd:ea:a0:f2:8a:97:
4c:5f:41:de:8d:f1:b3:c4:98:b5:12:01:49:49:68:f1:54:b4:
be:da:18:16:c3:8d:b2:3f:7b:93:3c:55:12:47:e8:91:34:e2:
68:fd:4a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:58:19 2025 by rpki-client