Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/JvuO5YaPjLFf0HZP4H-1yUabiMY.roa
File: JvuO5YaPjLFf0HZP4H-1yUabiMY.roa (raw, json)
Hash identifier: +Bx+7z+E11mxbukF+AWlKTGcSTRDPcpqMiJ/UPsOhzE=
Subject key identifier: 26:FB:8E:E5:86:8F:8C:B1:5F:D0:76:4F:E0:7F:B5:C9:46:9B:88:C6
Certificate issuer: /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial: 01941F8C29351B228FC657FE955350C47B45
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/JvuO5YaPjLFf0HZP4H-1yUabiMY.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21473
IP address blocks: 45.148.216.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:29:35:1b:22:8f:c6:57:fe:95:53:50:c4:7b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26fb8ee5868f8cb15fd0764fe07fb5c9469b88c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:f1:57:e1:e1:c6:4a:73:91:65:a9:08:62:
1f:eb:48:9a:81:b4:81:7f:7c:d5:ba:cc:84:ab:44:
80:f3:ac:90:ad:6b:58:1e:af:13:0b:49:aa:c8:99:
e2:19:95:80:91:66:bb:05:c2:e2:87:09:79:1a:e7:
c1:e8:8e:65:83:81:a2:3a:5a:52:4e:7a:d5:37:a9:
e9:31:48:f3:4f:59:93:3f:96:fa:b3:57:ec:6c:cf:
50:9b:02:d0:8f:36:d6:04:5e:48:6a:c5:bc:ce:53:
da:ec:78:b4:1a:be:3a:21:23:d9:b2:9f:5b:47:25:
ed:98:a4:b2:a7:bf:97:c1:5c:c8:7a:fd:9c:41:2c:
d6:b4:75:0c:50:f4:1b:b7:39:26:43:93:a0:02:2b:
45:36:7d:c8:08:28:04:5c:94:e2:f9:93:a7:ea:8d:
e8:b4:5b:99:9c:b5:6b:b8:10:72:ab:95:0f:a9:98:
1f:f9:5f:d3:7c:8b:32:9d:b0:d2:25:55:b0:fa:e0:
43:c1:b3:ab:cc:a2:c5:65:7d:1e:c9:37:b1:4c:6b:
92:51:4c:18:ba:a0:9a:47:fe:fd:ee:0a:b0:33:1b:
9e:fb:81:7e:e8:78:0d:70:aa:da:f3:2a:31:5e:3a:
07:96:81:22:22:18:8b:2f:88:45:ad:6c:7d:63:8e:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FB:8E:E5:86:8F:8C:B1:5F:D0:76:4F:E0:7F:B5:C9:46:9B:88:C6
X509v3 Authority Key Identifier:
keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/JvuO5YaPjLFf0HZP4H-1yUabiMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.216.0/23
Signature Algorithm: sha256WithRSAEncryption
74:53:64:a3:e5:76:52:d1:59:ed:e0:b2:7a:35:9c:cd:01:b4:
18:5b:e9:a3:30:d4:a7:3c:29:94:29:c5:e1:d3:3f:73:cf:74:
88:53:ab:53:96:88:e2:92:26:f3:78:c2:f7:ca:3a:8c:f5:eb:
88:eb:76:ce:b2:0d:c0:f8:76:a3:d0:3a:35:07:06:ed:8b:77:
4a:58:1a:58:e3:cf:51:f5:2d:11:ac:85:d9:2a:b7:63:d0:3c:
c5:93:84:7a:05:5c:d2:a2:9f:a1:8c:0c:12:e8:7b:4c:bb:9b:
eb:06:09:8f:5d:87:77:4a:5c:f6:ff:0d:1a:8f:8c:19:8c:e7:
f4:f4:2b:45:65:6a:43:b3:e3:08:f3:17:28:17:64:0e:c3:83:
b9:76:14:d4:66:1b:2b:d9:91:e6:a8:6a:8a:b6:d3:12:a7:85:
b2:b1:82:3c:bc:a2:12:47:6f:ab:a1:08:d6:76:7e:c8:76:2b:
7b:b6:15:2c:3b:1c:c8:3f:49:78:b9:3c:3d:ca:52:80:75:ba:
48:6b:d5:1f:43:54:a7:a9:10:2c:8d:02:36:c3:fb:37:86:67:
67:49:28:69:cc:43:c3:de:5c:2e:ff:7c:6b:2f:c0:fc:9b:cd:
24:6c:e2:3f:38:b8:21:3c:2f:7c:af:93:20:55:78:e4:0a:c5:
b4:5b:7e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:27:06 2025 by rpki-client