Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/JYVK5YIo9oFduSfdge32BhR1llk.roa
File: JYVK5YIo9oFduSfdge32BhR1llk.roa (raw, json)
Hash identifier: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=
Subject key identifier: 25:85:4A:E5:82:28:F6:81:5D:B9:27:DD:81:ED:F6:06:14:75:96:59
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 019422FBD6460537F725E944D36226653EE4
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/JYVK5YIo9oFduSfdge32BhR1llk.roa
Signing time: Wed 01 Jan 2025 17:48:37 +0000
ROA not before: Wed 01 Jan 2025 17:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44084
IP address blocks: 45.67.124.0/22 maxlen: 24
217.115.16.0/20 maxlen: 24
2a09:6240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d6:46:05:37:f7:25:e9:44:d3:62:26:65:3e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25854ae58228f6815db927dd81edf60614759659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:35:b9:b0:fe:83:49:58:a1:20:48:ba:db:0e:
29:3d:dd:e8:b4:45:ee:d4:de:b1:88:1e:25:dd:9b:
7e:21:91:87:3f:e0:cd:be:4c:1e:f0:12:36:ec:33:
c8:a1:3c:d2:06:1b:c3:50:e0:50:15:b7:17:8e:22:
38:ec:80:37:8a:ee:7d:94:b5:a4:ef:ec:7b:9a:95:
5b:92:b7:a5:ea:8d:3e:05:17:bb:34:91:da:48:9a:
a3:80:8e:f6:db:79:b6:a5:7d:b6:ba:84:ed:69:24:
ac:b6:05:70:60:6f:39:44:11:0a:38:cc:69:55:97:
d0:ce:d7:65:2e:02:e7:74:d7:cd:3d:f8:6b:b5:53:
d2:16:66:e9:be:ea:38:98:12:f5:c2:58:16:7f:ec:
92:87:26:31:21:75:38:94:7e:3a:06:33:ee:af:73:
8d:e0:a8:11:e8:2a:b3:9e:3b:d6:15:83:87:07:76:
98:f5:ee:47:75:05:e5:ef:f2:09:8d:05:27:0e:93:
d7:84:74:b5:47:de:d9:6b:39:7e:fa:39:d8:c4:ae:
d9:31:60:e8:58:40:f0:85:47:12:86:5e:6d:75:54:
a4:35:79:59:0d:c7:3e:08:b1:f7:d6:65:8a:2c:6b:
e0:79:07:d8:9c:4c:81:a9:b8:fc:47:8c:16:96:4d:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:85:4A:E5:82:28:F6:81:5D:B9:27:DD:81:ED:F6:06:14:75:96:59
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/JYVK5YIo9oFduSfdge32BhR1llk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.124.0/22
217.115.16.0/20
IPv6:
2a09:6240::/29
Signature Algorithm: sha256WithRSAEncryption
1d:52:63:26:05:a6:03:7d:4a:47:60:16:99:31:9e:da:22:e3:
bc:b3:5c:b1:d0:34:d3:17:7c:9e:dd:94:84:8a:56:75:22:4c:
e5:ce:2a:25:c6:2a:b7:01:8a:d7:10:c2:b0:00:d5:41:a4:a3:
f8:99:48:da:4a:87:23:cb:60:c9:75:a6:ac:75:a4:e6:44:57:
9b:5a:38:ea:e5:8a:4d:53:12:d0:22:62:4c:32:7f:59:22:cd:
dd:6b:ec:82:d8:da:b2:25:49:1f:56:41:c1:76:c6:b1:a2:da:
ba:8c:e4:55:29:2c:9d:6b:6f:28:f7:49:17:04:03:a7:a6:97:
2f:1d:32:a8:e7:8d:de:1e:68:ca:bc:5c:11:6f:fb:eb:4c:9f:
f8:b0:e7:e5:e0:08:81:a6:27:78:ab:41:2a:8b:2b:0c:73:a5:
73:1c:a9:14:30:82:b4:37:da:f8:2e:56:c4:cf:a4:b7:48:53:
75:61:27:24:2b:a5:2c:e9:47:f2:36:02:25:67:73:4a:4d:f9:
59:c6:86:9b:29:73:ea:71:30:62:e5:39:31:3e:5a:28:97:63:
ec:93:4f:fb:ca:1a:3d:cd:85:3d:02:df:df:16:f5:1a:2c:51:
1d:72:7b:92:93:a1:a1:2b:7c:2c:94:6b:48:c3:d4:ac:15:eb:
33:cc:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:49 2025 by rpki-client on console.sobornost.net