Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa
File: Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa (raw, json)
Hash identifier: 35l8sKB3wVTvVWmpyHsbhQyl9RJrjRSgJU8YSXiR6gw=
Subject key identifier: 26:BD:B6:7B:2D:4D:D8:DC:00:53:09:39:FC:C9:E8:C6:63:EE:31:76
Certificate issuer: /CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Certificate serial: 019425222C74239D8229283C8179F62B5C17
Authority key identifier: 74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa
Signing time: Thu 02 Jan 2025 03:49:44 +0000
ROA not before: Thu 02 Jan 2025 03:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212190
IP address blocks: 45.90.239.0/24 maxlen: 24
213.232.217.0/24 maxlen: 24
2a14:7940::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2c:74:23:9d:82:29:28:3c:81:79:f6:2b:5c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d9c073b4f70697e2175c1a955f6ca8c3a6246b
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26bdb67b2d4dd8dc00530939fcc9e8c663ee3176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:c9:52:96:c2:2c:91:8c:fe:13:77:43:5d:
d1:e3:06:46:93:fe:fa:0c:4f:bc:2a:b0:57:d4:8c:
7f:ad:d1:db:4b:bf:7e:f2:3b:16:83:d7:35:71:ba:
97:4c:7b:35:83:72:99:b4:39:a5:d5:f5:0a:7f:b3:
3e:25:b1:bd:c8:4a:23:5e:7e:f0:51:19:2b:1c:1c:
c9:1e:bf:b0:66:72:e5:22:a1:ff:0d:af:6b:f4:fa:
b2:33:f3:4a:97:48:ca:75:43:6c:09:d5:ca:09:ed:
b2:e9:63:29:1b:01:c3:60:84:62:b5:19:ab:48:3e:
e6:d0:5e:33:41:82:ee:0d:65:9e:21:78:a1:57:9d:
92:25:94:6d:8f:9b:3a:99:eb:5a:ee:9a:dd:a6:51:
5e:04:a9:e5:a5:9f:8f:f0:4a:88:9d:f2:66:31:85:
91:5e:f2:79:6c:7d:8a:a0:a8:9d:ba:0b:60:26:f6:
0e:93:b0:ae:7b:8e:2e:b4:de:94:92:9a:ed:39:40:
e6:8f:49:7c:62:06:3d:3f:a2:35:39:02:a3:06:2b:
f6:45:30:7c:15:05:71:b4:af:67:15:75:53:ea:4e:
c7:98:b9:35:42:34:a0:ad:70:5f:61:c1:8d:ea:47:
41:b1:7c:1c:3c:e1:75:60:65:0b:a7:81:3f:9b:e1:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BD:B6:7B:2D:4D:D8:DC:00:53:09:39:FC:C9:E8:C6:63:EE:31:76
X509v3 Authority Key Identifier:
keyid:74:D9:C0:73:B4:F7:06:97:E2:17:5C:1A:95:5F:6C:A8:C3:A6:24:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNnAc7T3BpfiF1walV9sqMOmJGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/Jr22ey1N2NwAUwk5_MnoxmPuMXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9cd1d7-34e7-47c1-8484-c191410dc889/1/dNnAc7T3BpfiF1walV9sqMOmJGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.239.0/24
213.232.217.0/24
IPv6:
2a14:7940::/31
Signature Algorithm: sha256WithRSAEncryption
46:a7:e9:88:f4:c3:89:17:3b:21:4f:f3:46:91:57:2b:b4:d9:
41:eb:ea:24:f5:e0:a5:2f:a5:ce:1e:7f:dc:cf:13:17:bf:ff:
de:fa:5c:07:d7:9e:b2:0a:dd:12:b5:10:04:af:c7:0a:e0:55:
34:79:d4:83:f3:89:cb:e5:0b:f1:73:c9:74:40:c5:30:e6:e8:
68:2d:73:d2:15:cc:db:9e:76:e8:49:4e:c6:aa:c4:06:4c:16:
5c:89:04:5f:be:71:8b:ef:a5:a4:e3:7b:d6:d1:ff:01:b6:2f:
e2:67:a9:5c:cc:53:63:3d:64:94:aa:40:0f:ca:aa:4c:d4:da:
74:02:ec:6d:d0:1d:32:69:31:27:2e:40:77:cf:8f:43:90:e4:
2b:ff:62:fe:44:ab:4a:b0:77:a1:6f:ab:0f:4a:83:55:19:90:
5e:30:fb:74:c7:3b:36:56:f6:3a:cc:87:a8:df:68:ec:14:25:
15:01:83:39:74:4f:30:6f:57:50:c4:cb:44:18:05:74:b8:a0:
f5:83:09:b4:e3:5b:ee:44:95:ca:2e:39:2e:05:e5:f4:39:08:
03:12:65:48:b0:7b:75:77:ce:e2:04:f2:b1:ff:23:ff:4e:ca:
e7:13:2d:59:9b:d5:72:10:ca:2e:f8:52:97:e2:27:ba:c0:42:
a9:70:a2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:54 2025 by rpki-client