Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/jjK7rjbxB0ZhoXvdcwRde0YKZas.roa
File: jjK7rjbxB0ZhoXvdcwRde0YKZas.roa (raw, json)
Hash identifier: sfaP7K3xaEubg4xnjx2mzGm75yUaFtrZ+WSWM6YcC1I=
Subject key identifier: 8E:32:BB:AE:36:F1:07:46:61:A1:7B:DD:73:04:5D:7B:46:0A:65:AB
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 019491CEA64604EEF6F0112D8906AEB7405A
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/jjK7rjbxB0ZhoXvdcwRde0YKZas.roa
Signing time: Thu 23 Jan 2025 06:17:06 +0000
ROA not before: Thu 23 Jan 2025 06:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212137
IP address blocks: 45.150.56.0/24 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:91:ce:a6:46:04:ee:f6:f0:11:2d:89:06:ae:b7:40:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Jan 23 06:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e32bbae36f1074661a17bdd73045d7b460a65ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:35:76:56:d3:76:06:77:ee:a9:ee:21:71:
be:4b:c1:ef:1f:ff:91:6e:00:07:63:3b:0b:26:51:
fb:bd:e4:27:38:5a:35:3d:a0:5f:7c:a3:dc:98:8c:
32:85:12:4c:a4:7e:22:b6:b6:d9:91:9e:3b:09:f6:
82:48:99:72:51:14:7f:f6:58:a2:59:94:0c:5b:96:
ac:80:be:69:60:ad:cc:4e:b4:48:a9:61:96:4f:42:
71:fa:29:9a:6e:44:dd:d0:cc:b2:17:23:87:e6:20:
ba:bb:0a:e3:87:b8:74:18:52:ad:33:42:5a:dc:7c:
d7:22:cd:f3:c3:51:4c:82:37:04:d7:f1:b6:6f:47:
63:66:08:85:4f:02:00:0e:12:1a:eb:01:09:e4:c2:
24:ac:46:66:6e:ab:29:9f:94:c5:29:49:b1:8f:f9:
f4:2e:60:d9:a0:0f:c0:9f:1b:e0:0f:f4:34:42:4d:
4d:f2:b6:50:46:69:3d:70:4c:12:ae:ec:6a:c6:03:
d8:b2:1e:1c:77:73:0d:98:78:11:18:50:35:1d:f8:
59:b9:24:89:73:53:a6:7b:fb:32:a9:73:0a:45:4f:
08:71:12:e8:69:4a:1a:84:a0:9f:6a:7f:7d:ec:a2:
38:94:ec:eb:e1:8e:c1:5a:52:f2:68:41:60:30:a7:
1a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:32:BB:AE:36:F1:07:46:61:A1:7B:DD:73:04:5D:7B:46:0A:65:AB
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/jjK7rjbxB0ZhoXvdcwRde0YKZas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4b:dd:b8:bf:02:67:28:5a:5e:8c:c5:03:21:85:da:99:bd:
d3:94:89:6d:7b:7e:25:e8:36:52:0b:1d:c8:4b:9a:e8:f5:af:
4c:c1:c1:df:73:ed:43:f6:f2:9d:22:f1:4a:0d:34:ed:eb:a9:
c0:23:c4:81:23:88:55:5a:66:cd:95:e2:af:36:3c:b1:6a:73:
33:75:da:16:23:eb:d3:31:7e:cf:bb:68:28:d1:68:1e:17:67:
5f:1d:2d:44:3f:32:3f:b2:46:35:98:2d:94:cb:04:5d:d5:29:
ca:1f:f0:d8:a4:43:7a:cf:5e:a5:a2:8f:6a:d6:f3:66:4f:f1:
80:fe:de:89:77:cb:55:cf:32:26:33:1c:31:69:c7:5c:f9:3b:
f7:97:3a:50:74:c4:26:31:e8:bf:39:68:d4:1c:f5:53:12:5d:
99:1a:83:b2:eb:3e:c6:9e:38:7f:62:41:4c:4d:94:82:46:b1:
cd:72:c0:8a:9d:95:ea:59:3a:33:8f:5a:36:75:95:e1:87:9f:
57:9b:08:8c:44:e5:8a:c0:2f:a7:04:a6:3e:cc:fd:b7:b4:25:
39:f7:60:1b:ab:d1:66:58:5c:4d:39:57:bb:a2:2b:6a:cb:9a:
79:bd:b7:94:1f:ff:61:8c:a0:38:63:40:2a:d7:62:bb:16:e5:
85:37:83:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:02 2025 by rpki-client