Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jxtWC-MxxRBDH0fOLaqxQpXMfpU.roa
File: jxtWC-MxxRBDH0fOLaqxQpXMfpU.roa (raw, json)
Hash identifier: yLVxLaVeViqT+GxPyAUzE4NMCkZdwS5B6+KqlsPLKFo=
Subject key identifier: 8F:1B:56:0B:E3:31:C5:10:43:1F:47:CE:2D:AA:B1:42:95:CC:7E:95
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282491BC17B17220417739914A028AB2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jxtWC-MxxRBDH0fOLaqxQpXMfpU.roa
Signing time: Thu 02 Jan 2025 17:51:12 +0000
ROA not before: Thu 02 Jan 2025 17:51:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60404
IP address blocks: 45.81.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:91:bc:17:b1:72:20:41:77:39:91:4a:02:8a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f1b560be331c510431f47ce2daab14295cc7e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:93:ed:74:0e:85:37:db:2b:10:9f:c8:fe:9f:
df:64:c5:1d:be:3e:b4:72:00:b8:9d:d0:97:c7:42:
1e:e8:7b:a7:b5:63:5b:40:2d:31:0b:20:70:d3:1c:
76:91:85:5a:8d:ed:a5:40:f4:ee:56:ed:76:f7:61:
37:ba:47:65:ac:d1:67:4a:b1:83:95:e5:8c:33:ea:
89:ac:26:f2:54:e5:f2:25:b6:12:1d:d6:1e:86:ba:
09:fa:8e:ec:0c:2b:17:5e:4c:09:09:07:ef:38:63:
cb:82:ad:9e:e1:de:25:92:18:24:b2:72:c6:30:a7:
be:90:58:6b:f8:cc:c0:70:38:08:03:ef:42:2b:bf:
bb:ec:ec:29:a3:a8:02:6c:9f:8c:cd:9a:11:0e:76:
0b:64:d5:68:34:00:0d:2e:ad:14:46:34:2f:0a:93:
28:69:ad:e4:0c:bb:7e:ac:c5:d0:7a:1a:41:c7:9e:
de:f6:a5:8c:1c:9b:5d:0f:df:52:4d:b9:03:71:c1:
2e:a9:79:23:37:c0:18:51:44:f7:d2:1f:d0:6c:5d:
64:fb:60:5a:09:e9:20:2d:2a:d4:fb:53:b6:69:50:
a1:0a:bb:64:6f:c2:8e:ef:52:e8:48:63:ea:6a:5a:
8c:fc:de:43:a1:17:d3:34:80:15:26:75:f2:f4:30:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1B:56:0B:E3:31:C5:10:43:1F:47:CE:2D:AA:B1:42:95:CC:7E:95
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jxtWC-MxxRBDH0fOLaqxQpXMfpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.39.0/24
Signature Algorithm: sha256WithRSAEncryption
85:84:4a:8c:bb:b0:8d:00:94:1f:f9:13:51:7b:a1:a0:5f:b1:
84:00:56:3c:4a:13:d3:41:6f:d1:b8:d9:1d:bc:ef:ca:f4:56:
2b:e7:5d:82:e6:a9:bc:48:eb:4c:58:6e:fd:d4:9e:d0:73:43:
49:1b:5a:4e:27:64:f4:b2:d2:b8:06:6b:7d:28:f1:3d:4f:c1:
82:b8:e3:f3:27:12:28:8e:18:1e:b6:8d:4f:6b:86:9e:21:ce:
35:02:26:d2:fb:fd:69:4c:40:84:12:c0:db:a0:91:a5:71:96:
68:59:40:fa:df:6e:92:71:b2:8d:6b:f8:52:77:69:5b:63:f1:
e4:14:ad:e0:4f:08:a1:97:e8:9a:0c:e0:3a:11:ba:e4:8b:25:
ab:67:7b:c5:bd:b2:ec:71:51:70:b1:57:6f:9c:a0:7e:cf:c8:
c5:1a:d5:a1:5b:60:44:5a:9f:de:49:48:c8:36:49:f6:2d:35:
30:d9:0c:bd:61:ec:7f:15:da:a7:35:3f:46:ec:c8:d3:6b:be:
b7:b1:fa:0c:17:4b:1d:a1:d1:10:50:7f:f7:68:dc:92:96:48:
a9:df:f9:51:16:ab:31:a0:85:e3:fe:bf:94:2e:ad:2f:4a:7e:
38:5f:b0:00:f1:ac:35:1e:e0:fc:54:87:b0:be:58:48:79:a9:
77:06:98:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:54:02 2025 by rpki-client