Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa
File: jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa (raw, json)
Hash identifier: 2Itp3B8O+5dmTKgGLY+BCEZM9Sy2Ho8d4oe+RtL2s4Y=
Subject key identifier: 8D:77:C3:6B:E5:10:F0:C3:68:8D:B8:6F:2F:58:DC:03:16:7E:D8:B0
Certificate issuer: /CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Certificate serial: 019427B62249B8C691813D8CF4B988E99F46
Authority key identifier: 69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa
Signing time: Thu 02 Jan 2025 15:50:35 +0000
ROA not before: Thu 02 Jan 2025 15:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34979
IP address blocks: 185.242.45.0/24 maxlen: 24
185.242.46.0/24 maxlen: 24
185.242.47.0/24 maxlen: 24
2a0c:bc80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:22:49:b8:c6:91:81:3d:8c:f4:b9:88:e9:9f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69622a1aadf79e711d1e7e4319f732c0b2da801e
Validity
Not Before: Jan 2 15:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d77c36be510f0c3688db86f2f58dc03167ed8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e6:ab:74:9b:ea:b5:e2:b4:d7:8e:9d:48:2a:
15:1c:d9:c2:26:26:e2:1c:61:4b:fd:45:2b:b4:ea:
16:eb:fd:72:f5:ec:ba:b7:44:0b:86:b2:05:58:f6:
c9:12:81:5b:38:ef:bc:0a:ab:dc:9c:55:f2:09:a5:
54:50:6c:e4:a5:ad:7d:41:69:c9:23:34:db:f0:eb:
3b:c6:f2:b4:0e:bf:0f:3d:df:66:d3:4a:ae:4a:a9:
59:12:3a:d8:63:70:fb:5c:e4:f3:f6:f7:60:f1:32:
fa:d3:3d:84:5e:89:65:e9:f0:f6:b9:9b:e7:f1:13:
4d:5a:fa:d0:e3:b7:07:07:b9:7d:11:8c:ba:67:96:
c2:b3:43:a9:87:b3:74:ef:d2:26:7f:47:3a:7a:d6:
b9:ce:a7:25:a8:12:0d:49:5e:66:5e:6f:cf:28:be:
83:70:97:09:52:f9:14:5a:c8:5f:4a:a8:aa:fe:a7:
95:47:9a:54:61:bd:4f:f2:0a:cb:4d:12:cd:87:71:
a2:5d:e7:e0:a4:8a:3f:f4:57:34:78:cb:0e:d4:50:
80:30:13:69:d7:fa:97:6e:1e:50:a8:3c:d4:ba:2c:
e5:92:83:2a:6c:0e:9d:92:de:1b:ee:5b:66:34:3f:
20:0b:1e:75:96:cc:dd:8b:08:d3:b2:37:36:16:bf:
76:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:77:C3:6B:E5:10:F0:C3:68:8D:B8:6F:2F:58:DC:03:16:7E:D8:B0
X509v3 Authority Key Identifier:
keyid:69:62:2A:1A:AD:F7:9E:71:1D:1E:7E:43:19:F7:32:C0:B2:DA:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWIqGq33nnEdHn5DGfcywLLagB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/jXfDa-UQ8MNojbhvL1jcAxZ-2LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/717615-d202-48f2-bb93-cc20f4172ced/1/aWIqGq33nnEdHn5DGfcywLLagB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.45.0-185.242.47.255
IPv6:
2a0c:bc80::/29
Signature Algorithm: sha256WithRSAEncryption
4d:bf:b9:c4:18:68:4e:8c:b1:03:a6:b0:4b:64:37:a3:05:37:
88:75:a6:83:ad:05:a5:cb:84:63:12:69:05:17:bf:03:56:98:
8a:12:d5:24:1f:9a:ea:be:ba:8a:0c:32:39:a0:4b:c3:de:45:
f7:ba:de:41:fc:b8:b8:9c:ce:d2:b5:f2:22:92:b5:43:b3:e3:
9a:2a:51:4a:b3:2a:e8:16:0a:92:23:79:f0:d2:d2:52:b5:0a:
80:a2:1c:1b:a2:6f:50:2d:5a:3d:00:42:a5:f0:f9:52:55:51:
a7:7f:f5:0f:a8:42:ef:55:7a:20:82:e7:f8:de:e6:d7:07:63:
be:91:f1:5e:d3:d1:02:f5:ca:02:99:eb:b2:b8:68:b2:9b:09:
fe:4d:de:dd:81:c2:db:bf:fa:79:29:e3:14:ad:dc:94:2b:94:
3d:37:7e:0a:54:3a:01:3b:bd:95:06:06:56:84:c4:dd:d7:93:
23:9e:6c:15:96:52:d2:69:5d:cc:fb:e9:df:d6:69:84:64:28:
c1:92:dc:4f:68:61:23:d5:cf:25:d1:8e:eb:38:b5:2c:07:56:
70:13:0c:a3:f6:97:c0:1e:40:46:b4:bd:63:50:2c:94:89:b7:
2c:80:5a:df:d9:20:83:7f:92:fa:0d:3d:88:fc:01:27:2c:cb:
f3:9a:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:30 2025 by rpki-client