Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/Jpt0oAleYUo7wwZuD3LDDTD5S0Y.roa
File: Jpt0oAleYUo7wwZuD3LDDTD5S0Y.roa (raw, json)
Hash identifier: 1nFLx+KzkXKfW85uLJH8Wgt/LIpdlgx2BP3IQHOSL1E=
Subject key identifier: 26:9B:74:A0:09:5E:61:4A:3B:C3:06:6E:0F:72:C3:0D:30:F9:4B:46
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 01961EFBAAFA7DEF11AAE7BF598E5764A81C
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/Jpt0oAleYUo7wwZuD3LDDTD5S0Y.roa
Signing time: Thu 10 Apr 2025 09:15:31 +0000
ROA not before: Thu 10 Apr 2025 09:15:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 45.139.76.0/24 maxlen: 24
45.139.77.0/24 maxlen: 24
45.139.78.0/24 maxlen: 24
45.139.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:fb:aa:fa:7d:ef:11:aa:e7:bf:59:8e:57:64:a8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Apr 10 09:15:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=269b74a0095e614a3bc3066e0f72c30d30f94b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:2a:bb:e9:b5:10:ce:18:a9:e9:37:34:08:
26:af:b4:4b:9c:6a:33:95:55:f7:d3:41:08:98:5a:
f6:0a:76:84:95:4c:b7:99:5c:c1:a6:9b:d7:cd:67:
5c:d6:23:42:71:1b:0c:d7:1e:77:a4:37:e0:c1:ee:
67:f6:59:21:13:0b:46:f0:d3:5a:9b:d4:66:49:17:
8b:6e:83:c1:35:3b:82:e4:f5:57:35:0c:41:01:a0:
6d:c4:07:95:ac:5f:3d:af:de:cb:93:aa:f1:66:2d:
74:3f:70:53:13:e2:f8:55:c1:30:71:06:54:76:76:
fb:e1:67:e9:e3:a6:bd:24:86:08:3c:07:5a:e6:11:
d9:5a:f9:b6:bb:10:6e:55:93:56:c1:56:8b:c1:92:
d1:da:56:f6:b2:1a:fd:71:65:9e:b6:60:68:80:b1:
63:b5:49:e7:6e:91:ea:c2:fe:51:8c:d2:7f:4e:60:
89:97:de:9c:c7:32:e5:25:ec:77:b8:a1:77:85:f8:
3f:06:75:ba:52:1a:77:ad:3c:d6:96:e5:c4:2f:b2:
79:1b:d8:68:7f:46:fc:49:f2:4e:f1:af:4f:2a:8f:
69:8a:da:96:35:55:e7:47:0c:be:e4:13:be:fd:d1:
db:b8:44:bd:b4:17:62:e0:c0:7d:fd:7c:17:23:d2:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9B:74:A0:09:5E:61:4A:3B:C3:06:6E:0F:72:C3:0D:30:F9:4B:46
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/Jpt0oAleYUo7wwZuD3LDDTD5S0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.76.0/22
Signature Algorithm: sha256WithRSAEncryption
64:55:19:8e:73:c9:a3:1e:57:44:71:72:05:71:59:5e:bb:76:
0f:a2:a0:a0:13:c9:4b:3f:4c:10:28:82:79:17:e2:1d:5f:8f:
1c:54:9f:64:48:23:0e:4d:86:68:be:72:12:ca:9e:aa:d6:26:
11:e5:ff:ef:08:77:75:ac:14:29:89:de:30:40:34:ef:9f:66:
01:13:2c:97:9e:9b:4d:eb:c0:d6:d0:df:19:94:ca:9d:8d:e1:
89:d4:69:70:c8:e9:13:81:4f:5a:77:b8:c8:ed:c0:8e:f5:af:
c2:05:0a:8c:e2:05:db:d1:cd:05:06:5d:a8:ab:3c:c5:2f:a8:
66:7a:ec:1e:ad:c7:62:1b:66:02:bc:bb:fc:c6:9f:88:c5:51:
f6:97:a4:e8:21:e5:2c:a5:90:f8:86:e5:69:5f:fa:3b:03:0b:
6c:27:2f:6d:9b:43:90:e8:b1:be:97:61:69:1f:80:f9:c0:52:
8b:46:62:a5:b8:3b:35:4b:66:8f:7b:54:b0:5a:3f:1d:86:d7:
cc:e5:1c:65:2e:d5:52:87:0d:1e:55:b8:37:18:a7:59:84:3b:
3c:97:33:9c:91:55:37:94:da:46:95:fe:c5:30:b2:29:68:65:
75:2e:ea:d8:26:6a:65:5e:49:93:e9:d4:5f:89:3c:e6:86:e7:
4c:b7:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net