Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa
File: JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa (raw, json)
Hash identifier: TBZiChrAp6rj4kAjmButXnHCPDHWsopt5A7i33tulpw=
Subject key identifier: 25:51:00:C0:52:0B:59:87:42:9C:B2:DA:09:0E:51:02:C2:BD:04:14
Certificate issuer: /CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Certificate serial: 019421B1707891C0AD76DAEFFC09010E7F6E
Authority key identifier: 79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa
Signing time: Wed 01 Jan 2025 11:47:44 +0000
ROA not before: Wed 01 Jan 2025 11:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208742
IP address blocks: 45.84.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:70:78:91:c0:ad:76:da:ef:fc:09:01:0e:7f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79c8bf6850a7a7e2af34cc16236dd083094e0cee
Validity
Not Before: Jan 1 11:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=255100c0520b5987429cb2da090e5102c2bd0414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:61:9d:e4:9d:e7:5d:55:a3:cd:46:26:7d:
ce:29:90:c6:fd:03:9a:30:d6:37:49:7f:bb:1e:e8:
42:5c:0c:7b:a7:3e:33:82:b5:18:fd:54:dd:3c:33:
c3:3f:28:33:de:3c:0d:b8:7f:11:13:ca:7b:e8:bc:
a8:90:e4:90:aa:4d:ca:17:00:39:90:77:76:19:d6:
b4:30:51:bd:ea:98:4e:9b:6b:d7:dd:7d:7d:0f:a9:
07:b8:ea:8d:a5:73:93:8e:b8:44:38:88:fd:fe:4c:
4a:bd:8b:9c:6a:28:0e:6e:c8:08:5d:23:0f:2a:91:
b7:29:20:5c:2b:42:04:99:31:19:06:2e:6b:8e:f6:
19:26:8f:b0:50:4f:5c:6f:82:53:1d:ac:ae:b8:da:
38:32:89:c3:df:0d:51:f5:80:7f:8d:ef:fd:20:0f:
ca:64:8a:67:8f:46:8f:5a:b7:59:58:a8:0c:e0:3a:
6f:6b:f5:d6:c5:91:60:32:5a:4b:d3:ba:1d:9b:53:
81:e0:e6:37:0b:06:7b:44:6b:cd:a9:3b:a9:24:37:
59:4d:19:17:55:94:b0:32:4f:24:40:29:57:7a:6b:
a0:63:76:d7:0d:76:ae:9f:e8:ed:37:8c:f7:67:4a:
25:9a:18:13:10:c0:8e:4e:2a:63:1c:fc:90:eb:e3:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:51:00:C0:52:0B:59:87:42:9C:B2:DA:09:0E:51:02:C2:BD:04:14
X509v3 Authority Key Identifier:
keyid:79:C8:BF:68:50:A7:A7:E2:AF:34:CC:16:23:6D:D0:83:09:4E:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eci_aFCnp-KvNMwWI23QgwlODO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/JVEAwFILWYdCnLLaCQ5RAsK9BBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/74fe2c-87d1-468d-a121-d1095be7c48f/1/eci_aFCnp-KvNMwWI23QgwlODO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.248.0/22
Signature Algorithm: sha256WithRSAEncryption
02:5d:30:e7:57:23:c5:c1:5c:79:b9:e7:4f:fb:99:f1:87:17:
4d:a5:d4:9e:9a:b2:0e:cd:56:f3:15:dd:d1:48:4d:bb:05:90:
74:f1:f1:7a:f4:1f:32:6b:28:28:14:e8:b3:83:99:d4:90:d5:
9c:cc:a3:39:59:93:f5:9f:b9:b2:29:98:8b:28:e4:c1:86:9c:
fd:1c:b7:43:9a:0b:2d:ea:5d:a9:5b:8c:7c:3c:a2:88:6b:f2:
22:6e:cc:bf:9c:23:1a:cd:8c:ba:d1:03:6a:bc:3c:75:cc:74:
fd:85:03:5a:c4:2f:28:dd:54:4e:62:9a:ea:9e:a7:f3:11:30:
52:29:a1:80:2f:b8:dd:96:81:21:5a:55:99:a8:77:12:35:6b:
30:cf:73:c9:04:5d:39:2a:01:cf:0d:df:42:4a:fa:4d:16:f3:
61:bd:5d:6f:c8:b2:c9:60:3d:3b:a1:3c:00:75:92:76:96:0d:
4e:fc:17:2a:31:7f:04:28:7c:2f:5f:ad:b6:20:c4:5c:27:38:
e8:06:fd:a4:b5:e8:93:79:fa:9b:13:40:c3:50:b8:1b:d8:7e:
7c:97:af:13:68:ff:91:26:11:f2:52:68:c0:ae:ec:cf:a5:5d:
d6:d1:b5:94:af:12:94:6d:ba:4b:15:00:16:c3:49:70:a7:47:
2a:e7:61:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsXB4kcCtdtrv/AkBDn9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YzhiZjY4NTBhN2E3ZTJhZjM0Y2MxNjIzNmRkMDgzMDk0
ZTBjZWUwHhcNMjUwMTAxMTE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTUxMDBjMDUyMGI1OTg3NDI5Y2IyZGEwOTBlNTEwMmMyYmQwNDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDhhneSd511Vo81GJn3OKZDG/QOa
MNY3SX+7HuhCXAx7pz4zgrUY/VTdPDPDPygz3jwNuH8RE8p76LyokOSQqk3KFwA5
kHd2Gda0MFG96phOm2vX3X19D6kHuOqNpXOTjrhEOIj9/kxKvYucaigObsgIXSMP
KpG3KSBcK0IEmTEZBi5rjvYZJo+wUE9cb4JTHayuuNo4MonD3w1R9YB/je/9IA/K
ZIpnj0aPWrdZWKgM4Dpva/XWxZFgMlpL07odm1OB4OY3CwZ7RGvNqTupJDdZTRkX
VZSwMk8kQClXemugY3bXDXaun+jtN4z3Z0olmhgTEMCOTipjHPyQ6+NnOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCVRAMBSC1mHQpyy2gkOUQLCvQQUMB8GA1UdIwQY
MBaAFHnIv2hQp6firzTMFiNt0IMJTgzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83NGZlMmMtODdkMS00NjhkLWExMjEt
ZDEwOTViZTdjNDhmLzEvSlZFQXdGSUxXWWRDbkxMYUNRNVJBc0s5QkJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS83NGZlMmMtODdkMS00NjhkLWExMjEtZDEwOTViZTdjNDhm
LzEvZWNpX2FGQ25wLUt2Tk13V0kyM1Fnd2xPRE80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVT4MA0G
CSqGSIb3DQEBCwUAA4IBAQACXTDnVyPFwVx5uedP+5nxhxdNpdSemrIOzVbzFd3R
SE27BZB08fF69B8yaygoFOizg5nUkNWczKM5WZP1n7myKZiLKOTBhpz9HLdDmgst
6l2pW4x8PKKIa/Iibsy/nCMazYy60QNqvDx1zHT9hQNaxC8o3VROYprqnqfzETBS
KaGAL7jdloEhWlWZqHcSNWswz3PJBF05KgHPDd9CSvpNFvNhvV1vyLLJYD07oTwA
dZJ2lg1O/BcqMX8EKHwvX622IMRcJzjoBv2kteiTefqbE0DDULgb2H58l68TaP+R
JhHyUmjAruzPpV3W0bWUrxKUbbpLFQAWw0lwp0cq52Fc
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:14:21 2025 by rpki-client