Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/72d2dd-5d7a-4b67-895c-ef73916464cf/1/JDgdcMncAAEJi_tT_7ydpRmI30g.roa
File: JDgdcMncAAEJi_tT_7ydpRmI30g.roa (raw, json)
Hash identifier: osMtLYayn3E2PV4oGrkkffsMNq+2j6zg0MARCICtwEo=
Subject key identifier: 24:38:1D:70:C9:DC:00:01:09:8B:FB:53:FF:BC:9D:A5:19:88:DF:48
Certificate issuer: /CN=758288016f9f8ea2ebbfc9122c75caa1b42b5c91
Certificate serial: 0182F830C7E22812C78B2883BA6E0989839F
Authority key identifier: 75:82:88:01:6F:9F:8E:A2:EB:BF:C9:12:2C:75:CA:A1:B4:2B:5C:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYKIAW-fjqLrv8kSLHXKobQrXJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/72d2dd-5d7a-4b67-895c-ef73916464cf/1/JDgdcMncAAEJi_tT_7ydpRmI30g.roa
Signing time: Thu 01 Sep 2022 08:35:22 +0000
ROA not before: Thu 01 Sep 2022 08:35:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204145
IP address blocks: 45.157.199.0/24 maxlen: 24
45.157.196.0/24 maxlen: 24
45.157.197.0/24 maxlen: 24
45.157.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:30:c7:e2:28:12:c7:8b:28:83:ba:6e:09:89:83:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=758288016f9f8ea2ebbfc9122c75caa1b42b5c91
Validity
Not Before: Sep 1 08:35:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24381d70c9dc0001098bfb53ffbc9da51988df48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:2f:93:41:ee:e9:24:93:6e:ab:ed:d1:a6:
dd:d8:f2:50:0e:88:7f:53:51:7e:12:9f:88:06:ea:
bf:16:4b:27:65:79:57:1c:68:d2:6e:fc:2c:ca:16:
57:3a:e8:70:e0:7c:65:88:96:7a:ba:8b:72:69:ed:
f4:98:6b:b4:dd:e5:06:87:ad:84:d6:2f:e9:c4:bc:
7a:c6:dc:d7:d7:db:35:41:5d:18:d0:51:78:b3:a9:
a2:59:a1:af:4b:3e:c2:70:68:78:03:21:f3:ca:a8:
7f:3a:42:e2:65:9c:3c:60:18:79:16:0e:b4:1e:c9:
4a:59:0e:fd:88:d8:cf:1c:86:50:9a:c5:a5:8b:28:
4f:3a:46:15:f5:93:ce:f8:a1:3b:50:d7:59:d8:41:
1f:b7:31:5f:5a:c1:67:2e:37:89:79:c5:dc:51:bf:
84:f4:3a:2b:b3:17:ae:e9:d5:24:eb:0b:95:36:59:
88:1c:2f:d7:3d:fa:44:53:e6:c2:a5:70:53:7c:92:
3b:61:6f:d9:a6:a5:e9:2b:56:45:52:24:c2:eb:ca:
0d:10:3a:fa:aa:30:cc:eb:a5:a0:e0:9f:25:75:cc:
c8:52:6b:e6:89:80:86:44:86:d7:89:01:45:e4:cb:
52:b3:3a:6b:fa:e5:63:af:1d:1d:ec:00:59:8a:a5:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:1D:70:C9:DC:00:01:09:8B:FB:53:FF:BC:9D:A5:19:88:DF:48
X509v3 Authority Key Identifier:
keyid:75:82:88:01:6F:9F:8E:A2:EB:BF:C9:12:2C:75:CA:A1:B4:2B:5C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYKIAW-fjqLrv8kSLHXKobQrXJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/72d2dd-5d7a-4b67-895c-ef73916464cf/1/JDgdcMncAAEJi_tT_7ydpRmI30g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/72d2dd-5d7a-4b67-895c-ef73916464cf/1/dYKIAW-fjqLrv8kSLHXKobQrXJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.196.0/22
Signature Algorithm: sha256WithRSAEncryption
23:c1:5b:1c:ca:78:fb:5b:b7:bb:42:6d:9b:99:b3:71:4c:65:
fd:39:51:2b:32:73:59:23:49:24:76:89:1a:87:fa:fb:80:85:
7b:f9:5c:45:8c:4a:13:36:b9:45:4c:19:0f:9c:71:90:16:55:
82:b6:0a:3a:7a:be:d4:d7:8b:b5:ef:cd:c0:e4:45:99:97:07:
e6:b7:61:21:47:d7:0c:ae:5c:db:f5:0e:a8:51:cf:65:63:94:
92:0d:b1:e5:a1:db:85:cb:42:6d:59:61:4a:22:c3:f9:9b:10:
5f:ae:be:b4:50:f7:29:d4:4c:6b:a7:5d:82:54:ae:a4:db:ee:
67:c1:e4:0b:ad:dd:2b:4d:ec:dc:0f:38:33:7b:7a:7b:46:d3:
b1:7b:13:6f:7d:fe:72:11:ef:82:0c:63:99:49:bf:b4:de:dc:
ed:79:3f:93:da:33:0f:6e:14:de:27:15:0e:25:98:f5:ca:9e:
be:6c:ca:ba:df:66:75:27:7a:f1:31:42:5b:61:9a:c9:5e:7d:
6d:6b:6e:a3:e9:a3:70:e3:00:fc:a3:a6:a7:ef:06:8d:4a:10:
e6:d9:fa:ce:e1:ca:66:c4:c6:97:2c:58:56:84:c3:1c:fa:8f:
2f:d1:28:15:9b:62:36:6b:f9:ac:9b:8c:64:03:97:50:e8:f2:
2d:a1:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:13 2025 by rpki-client