Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/jGiYw1XIdHod1KtfYzqxKQoRecs.roa
File: jGiYw1XIdHod1KtfYzqxKQoRecs.roa (raw, json)
Hash identifier: df2VOqwSHC0My/aR8/1QqDzAjhVwqnc7sn9U4eqFZF0=
Subject key identifier: 8C:68:98:C3:55:C8:74:7A:1D:D4:AB:5F:63:3A:B1:29:0A:11:79:CB
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194266B0782CEE4C386382FF0C063672295
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/jGiYw1XIdHod1KtfYzqxKQoRecs.roa
Signing time: Thu 02 Jan 2025 09:48:56 +0000
ROA not before: Thu 02 Jan 2025 09:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 45.86.156.0/24 maxlen: 24
85.117.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:07:82:ce:e4:c3:86:38:2f:f0:c0:63:67:22:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 2 09:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c6898c355c8747a1dd4ab5f633ab1290a1179cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:1b:9c:35:a3:5e:9b:bd:22:76:de:6c:ca:
49:fa:76:68:48:de:f7:08:60:e2:55:92:2a:db:43:
2e:c0:a0:6b:a0:e1:5e:b4:bf:f7:93:ce:dc:48:77:
b2:2d:61:f7:15:59:d0:2f:4c:dd:d9:40:ca:37:cc:
f8:5f:97:b9:c0:4c:2e:38:52:cd:52:24:19:36:5c:
14:e7:c0:7a:a0:1a:97:64:3a:44:8f:f7:b1:4d:3d:
f0:34:17:3e:02:ec:ab:ff:c6:ba:f7:07:34:f6:06:
ad:6e:fc:cf:f3:d3:7c:1e:27:66:09:36:fe:55:94:
77:bc:d5:d7:22:c6:8f:e5:58:c7:ef:5a:d4:50:a4:
a0:f8:ca:f7:3d:5a:81:44:2a:d0:e7:7a:4a:76:e9:
d5:a4:ad:9e:2a:ac:2d:83:c0:f8:d3:d1:7a:ba:3e:
bd:f2:d3:3b:f1:27:c6:67:c3:a2:68:0b:33:44:8f:
b6:98:41:08:d5:e1:39:9e:47:e3:ee:ce:81:24:dc:
36:9e:dd:79:6d:94:d6:4a:85:c3:48:32:36:3f:64:
dd:b7:25:34:dc:22:dc:3f:b3:06:80:aa:21:97:3c:
2d:e8:38:b4:21:fb:bc:6f:95:c4:fc:4f:6e:71:77:
95:39:2b:d1:66:82:11:ec:64:af:e8:01:d5:d0:5f:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:68:98:C3:55:C8:74:7A:1D:D4:AB:5F:63:3A:B1:29:0A:11:79:CB
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/jGiYw1XIdHod1KtfYzqxKQoRecs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.156.0/24
85.117.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ba:ee:3b:2f:e5:50:19:9f:4c:41:de:f6:b7:d2:5f:3e:90:
cb:8a:fe:a1:ee:fd:7a:67:ea:9d:f7:90:3f:2f:4e:9a:a5:79:
28:37:17:49:e1:8d:7c:71:dd:c9:5f:a3:c9:c2:62:6d:83:a8:
49:57:bf:e5:11:ae:a2:0d:05:8d:f5:dc:29:8e:94:62:02:ea:
ff:be:32:32:d2:e9:b4:43:21:23:86:fb:0c:56:6a:c2:6e:7f:
c9:40:74:12:a3:8f:91:86:68:bc:3d:e7:9f:68:f2:33:2f:a9:
56:2b:5c:d2:bf:e3:0c:77:34:45:11:99:78:f1:3d:8d:8b:18:
53:fb:54:43:14:a7:68:ab:36:c9:d6:50:88:c1:c7:28:77:63:
9c:fc:32:9a:ab:02:1a:4b:80:b7:23:ab:a8:5e:a4:6c:4b:fa:
59:ff:fe:ab:1a:1f:62:21:79:e4:c6:21:12:c9:16:a2:e4:d9:
e2:b5:f9:1d:37:62:6e:fc:cb:0b:37:47:df:da:ec:b7:9b:32:
ad:2d:5d:42:6a:73:1f:91:a7:87:fc:30:07:1c:fa:c8:6d:28:
c9:35:ef:52:2b:ad:f5:1f:3f:26:7c:c2:86:b2:a5:d8:ac:8b:
c9:a0:54:fa:fb:e9:a0:91:2e:48:e1:93:cf:15:9c:37:8a:07:
16:24:0e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:00:51 2025 by rpki-client