Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/jBckqPQFaXVG0d-H_hcaAGH7CKM.roa
File: jBckqPQFaXVG0d-H_hcaAGH7CKM.roa (raw, json)
Hash identifier: +uEvgPae+lRjbvXvv3CmkwknC6+ftUjZQH4oSS8SHfc=
Subject key identifier: 8C:17:24:A8:F4:05:69:75:46:D1:DF:87:FE:17:1A:00:61:FB:08:A3
Certificate issuer: /CN=0e835b896da71d2daadff139d65b7298f8412417
Certificate serial: 019420684161F3088F43BF3EEE6F04745556
Authority key identifier: 0E:83:5B:89:6D:A7:1D:2D:AA:DF:F1:39:D6:5B:72:98:F8:41:24:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/jBckqPQFaXVG0d-H_hcaAGH7CKM.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208516
IP address blocks: 45.131.236.0/22 maxlen: 24
2a0e:63c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:41:61:f3:08:8f:43:bf:3e:ee:6f:04:74:55:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e835b896da71d2daadff139d65b7298f8412417
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c1724a8f405697546d1df87fe171a0061fb08a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:10:60:37:d2:03:1a:49:c9:5b:e4:c8:4c:
91:c0:ed:07:fc:00:79:9b:9d:02:ea:d5:37:e7:9a:
e4:17:54:d1:a1:33:75:10:de:2c:11:b0:60:06:6b:
55:04:e3:fc:9d:5f:2c:b3:e8:5a:3e:41:e8:49:96:
93:77:ed:0e:ea:cd:32:e2:2f:85:77:d1:87:ef:5b:
61:6c:33:2e:ae:3f:03:c4:2b:2d:85:52:42:57:7b:
b0:fc:b4:ff:89:bc:88:68:3a:40:2c:5e:3a:66:11:
ed:af:99:85:f4:0a:6b:8a:b0:40:aa:aa:f2:44:25:
50:c4:5f:e3:11:89:12:f3:4b:9d:e0:84:2f:e5:79:
41:ec:25:d2:0f:83:a5:0b:85:30:d7:0b:cd:91:a3:
66:03:a6:ec:31:2e:0a:80:db:48:79:32:45:25:02:
67:62:43:64:b3:45:d7:f9:13:b6:ff:63:7e:29:b6:
87:b5:03:45:32:44:63:a3:e2:31:dd:e0:b3:91:37:
10:51:85:a1:91:a2:56:3e:33:84:7f:d4:03:3d:6b:
03:91:7a:96:f1:fe:e5:c5:c3:11:c3:51:4e:b8:0c:
96:39:2d:c1:80:e4:62:4f:24:f2:c2:d1:a8:87:68:
5e:f5:8b:76:e7:17:0d:01:3f:fe:e5:bf:fc:85:28:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:24:A8:F4:05:69:75:46:D1:DF:87:FE:17:1A:00:61:FB:08:A3
X509v3 Authority Key Identifier:
keyid:0E:83:5B:89:6D:A7:1D:2D:AA:DF:F1:39:D6:5B:72:98:F8:41:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/jBckqPQFaXVG0d-H_hcaAGH7CKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.236.0/22
IPv6:
2a0e:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:2d:d5:25:ed:60:e9:9f:3e:6f:fc:af:b8:54:dc:f0:cf:66:
f9:45:3b:82:bc:2f:eb:da:f6:90:4a:7f:89:e4:7e:2a:d5:60:
08:ec:b9:04:77:b1:7a:c4:b9:9f:ba:83:e0:ef:00:d4:07:7d:
bf:8b:dc:bb:2f:be:ba:bc:d4:0a:94:36:4e:45:8a:14:57:eb:
f8:9f:7f:4e:93:85:e8:4d:98:67:64:d8:7f:17:94:89:9b:c5:
9a:d8:da:82:f0:6e:52:2e:e6:c8:3c:db:dc:83:28:a5:a4:61:
11:72:66:12:a7:37:7d:02:aa:97:d2:cf:bf:ba:dc:d6:b6:ac:
2d:be:70:5f:e9:59:af:d4:c0:fd:b2:b4:e7:90:ac:b9:d0:ac:
56:de:c9:72:5b:6a:44:ff:17:bd:01:47:c8:96:15:8d:d7:bd:
93:ac:88:ac:44:92:b6:6b:75:36:66:f3:ac:4b:17:4c:56:e6:
8b:e0:10:c3:9a:87:d9:9e:73:ad:04:39:3e:18:8b:42:2c:45:
99:db:f5:31:6f:49:12:a4:e1:a7:c3:89:38:56:c9:80:b3:1e:
28:fa:fa:3b:ef:12:8d:9d:72:a2:eb:6e:36:1b:41:46:12:53:
b4:5a:f6:3a:c2:78:68:11:0b:9d:47:ca:44:94:25:f2:5d:97:
31:d7:5f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:53 2025 by rpki-client