Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/jNJogHc9h5lodSxhpjDRYEENUOM.roa
File: jNJogHc9h5lodSxhpjDRYEENUOM.roa (raw, json)
Hash identifier: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=
Subject key identifier: 8C:D2:68:80:77:3D:87:99:68:75:2C:61:A6:30:D1:60:41:0D:50:E3
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 0194266C0ACF911ECFA56E12CCB3466EE202
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/jNJogHc9h5lodSxhpjDRYEENUOM.roa
Signing time: Thu 02 Jan 2025 09:50:02 +0000
ROA not before: Thu 02 Jan 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 45.83.132.0/22 maxlen: 24
45.83.152.0/22 maxlen: 24
45.139.44.0/22 maxlen: 24
45.139.56.0/22 maxlen: 24
45.139.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0a:cf:91:1e:cf:a5:6e:12:cc:b3:46:6e:e2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cd26880773d879968752c61a630d160410d50e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:be:9f:da:df:94:6b:86:31:49:83:e0:4a:
84:b8:8e:83:bf:56:85:15:4a:fb:12:48:b9:08:4d:
76:a8:35:d8:b7:cb:4e:50:b2:44:45:a2:32:72:fd:
77:ec:7d:44:17:20:71:ce:0a:42:78:29:5a:18:f0:
9e:2d:7e:e3:13:f6:af:50:56:4d:30:78:fc:e5:ec:
e9:e7:1d:79:7c:4a:04:19:51:2d:90:a7:d9:2b:2d:
17:e9:95:ee:c2:71:da:23:d2:55:24:3c:31:f6:91:
0f:49:ca:47:e0:2e:db:fc:f9:24:f5:bd:42:df:2d:
01:13:60:8f:25:4c:7b:39:74:e2:66:92:e1:be:0d:
e3:38:a6:93:7c:b7:c1:42:da:2a:9c:cc:e0:fe:8e:
c2:c5:73:23:94:ee:9d:23:54:84:7b:dd:05:d2:63:
5f:f5:59:3a:3f:69:bc:04:e2:b1:19:53:61:60:7e:
03:8b:f9:cc:13:8a:a5:88:27:31:01:9f:27:db:e5:
8a:57:45:66:9f:7e:42:5c:72:a3:aa:12:14:01:8f:
35:75:65:2d:3f:ff:29:25:75:c3:68:36:d6:46:b7:
18:0c:57:a0:d2:f8:dc:f6:23:ab:60:93:7e:2d:d1:
cd:b3:e2:1c:b5:34:24:68:4c:35:d6:4e:42:91:a4:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D2:68:80:77:3D:87:99:68:75:2C:61:A6:30:D1:60:41:0D:50:E3
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/jNJogHc9h5lodSxhpjDRYEENUOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.132.0/22
45.83.152.0/22
45.139.44.0/22
45.139.56.0/22
45.139.64.0/22
Signature Algorithm: sha256WithRSAEncryption
13:41:96:5a:fb:7d:91:6e:38:8b:7e:1d:cd:09:d5:34:a9:eb:
1e:80:c4:98:af:8c:4a:fc:64:3f:34:4b:de:66:b8:d7:0a:60:
29:0a:e6:88:07:a1:fc:14:7c:70:66:e0:9b:28:24:e1:9f:32:
f5:1a:ea:9d:21:fd:34:8a:29:b8:b1:15:72:45:d9:7d:91:63:
83:e7:e2:11:ec:6a:a3:08:81:20:ec:bb:2c:8e:d2:6c:1a:28:
c9:78:da:54:39:74:73:a1:b1:6b:e0:26:6c:93:ec:79:2c:fe:
3c:78:c5:4f:7f:27:7d:bb:05:98:70:11:a7:d0:4a:b6:ee:b1:
f5:d6:d1:42:7c:54:0b:e8:57:d3:d0:cb:f2:9f:e9:c2:31:30:
30:6a:9e:0f:93:b6:dd:69:de:fe:4b:26:11:72:51:9d:e1:d3:
29:36:c9:33:ba:49:d8:19:c0:80:d9:25:16:07:12:ed:1e:b5:
4e:07:1b:c7:d4:97:7c:4a:0d:aa:c6:53:2e:c4:63:e3:e7:72:
e8:b5:1a:21:56:a4:45:c1:5b:0c:11:b5:10:96:93:1c:29:7c:
d1:02:6a:f8:19:05:97:b1:16:92:7b:89:ad:88:f6:41:37:10:
b3:28:0b:65:8d:9f:7b:56:15:08:43:bf:c4:ce:5b:a1:e8:05:
26:31:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:50:03 2025 by rpki-client