Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/joaFEW-NdPhZyszfRS8lbScgqm0.roa
File: joaFEW-NdPhZyszfRS8lbScgqm0.roa (raw, json)
Hash identifier: 0utj+sPXgGZYWSm41u/aEZLOVRC1lSd5e6cU8LiAr60=
Subject key identifier: 8E:86:85:11:6F:8D:74:F8:59:CA:CC:DF:45:2F:25:6D:27:20:AA:6D
Certificate issuer: /CN=48c741c9df5b2e48993b9183b79ff346b4319381
Certificate serial: 019427B5EFD60CF2689857D3B5EF9C7A7C0E
Authority key identifier: 48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/joaFEW-NdPhZyszfRS8lbScgqm0.roa
Signing time: Thu 02 Jan 2025 15:50:22 +0000
ROA not before: Thu 02 Jan 2025 15:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207164
IP address blocks: 45.15.224.0/22 maxlen: 24
185.164.80.0/22 maxlen: 24
2a0e:5180::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ef:d6:0c:f2:68:98:57:d3:b5:ef:9c:7a:7c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c741c9df5b2e48993b9183b79ff346b4319381
Validity
Not Before: Jan 2 15:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e8685116f8d74f859caccdf452f256d2720aa6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:23:ce:48:42:46:c0:dd:64:9b:e0:93:fb:32:
ad:3d:8a:6c:83:b1:8a:2e:9f:dd:4c:77:b5:bc:e3:
fa:72:c1:68:c4:5e:91:bf:e9:c9:e5:5b:4a:e8:4a:
71:89:1c:5c:8c:39:11:25:cb:43:fd:6e:7f:33:d3:
6a:02:43:60:e2:98:08:03:a2:a9:00:61:68:8d:85:
9b:b9:56:50:8d:d5:93:21:31:c3:0e:bf:c0:ce:08:
a2:ad:a3:4e:e0:b8:af:0d:ca:cd:59:8c:5a:63:9b:
be:d0:e1:52:26:fc:0d:09:b2:4d:f8:d7:ff:1a:12:
38:01:08:88:5e:b1:2d:f8:d3:70:b6:3e:fe:9a:7d:
ad:9c:97:b7:f4:cf:34:9e:13:74:68:d0:ea:62:06:
fe:cf:5c:64:97:f1:89:aa:1f:c5:27:11:2a:df:9b:
06:83:3c:56:94:23:14:42:90:46:ab:7f:12:67:d3:
ed:a5:11:d0:40:04:ba:e0:f3:2c:db:5a:75:88:41:
fb:b0:0d:f8:85:c5:37:23:e2:fa:82:c4:c6:8c:77:
95:ef:19:21:9e:d5:6c:d7:50:7c:46:68:71:01:ca:
42:a6:cc:47:cb:22:17:bf:81:bb:98:98:78:e2:c1:
17:fc:a8:bb:de:c4:34:1a:1b:4a:c7:20:f9:3e:65:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:86:85:11:6F:8D:74:F8:59:CA:CC:DF:45:2F:25:6D:27:20:AA:6D
X509v3 Authority Key Identifier:
keyid:48:C7:41:C9:DF:5B:2E:48:99:3B:91:83:B7:9F:F3:46:B4:31:93:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SMdByd9bLkiZO5GDt5_zRrQxk4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/joaFEW-NdPhZyszfRS8lbScgqm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/458282-5405-4b17-997d-7cd59619c0d6/1/SMdByd9bLkiZO5GDt5_zRrQxk4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.224.0/22
185.164.80.0/22
IPv6:
2a0e:5180::/29
Signature Algorithm: sha256WithRSAEncryption
b4:94:74:28:16:89:69:3a:ad:af:72:d3:8d:e5:00:fb:2d:43:
fe:ce:d1:95:65:ee:13:c3:70:8a:20:11:9e:33:47:26:af:da:
4c:8b:59:e9:6f:0e:8c:b6:51:3f:06:7f:17:cc:ed:c6:5f:23:
aa:57:c1:21:50:13:2f:b5:ec:b3:4c:d7:1a:0b:ba:97:21:b0:
4c:d3:af:af:c9:e5:f3:71:f8:dc:0c:00:f6:f6:52:6d:4d:fc:
10:ce:86:ee:b2:da:83:45:1d:8d:17:5e:74:2b:9c:c1:ba:f8:
c3:4f:49:cc:96:80:85:8e:59:ab:12:ca:05:38:bd:1f:b2:0d:
18:b9:36:a7:f6:23:17:5f:63:7f:04:82:b8:2f:04:c0:e2:6d:
d8:1e:41:2c:c4:72:7e:b3:29:a6:a6:8f:6c:25:be:26:94:30:
a8:31:d3:57:0b:47:60:6e:c9:7d:3e:61:b1:01:5c:b6:ba:05:
94:f5:da:51:3d:4f:a4:4e:5c:12:01:1f:c6:1f:ab:2e:20:ac:
2f:2b:cb:bc:ff:66:26:e8:84:c1:fc:87:ed:be:fe:4b:ba:9b:
55:74:89:02:7b:a9:dd:0a:8a:ae:e5:5f:1e:6c:86:ed:bc:99:
8c:4b:56:b6:22:a4:9b:f9:f7:63:11:dc:c1:72:97:c8:90:ff:
58:ca:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:45:31 2025 by rpki-client