Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/jUdxrPXosyThU3_1E3jWclFr5-o.roa
File: jUdxrPXosyThU3_1E3jWclFr5-o.roa (raw, json)
Hash identifier: +7jrxguELGKH/1HZ500ovl1kTtUDco36YXCma6tvg24=
Subject key identifier: 8D:47:71:AC:F5:E8:B3:24:E1:53:7F:F5:13:78:D6:72:51:6B:E7:EA
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 019470AF0881A3769238DFED6AEB346E566B
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/jUdxrPXosyThU3_1E3jWclFr5-o.roa
Signing time: Thu 16 Jan 2025 19:55:06 +0000
ROA not before: Thu 16 Jan 2025 19:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47263
IP address blocks: 45.150.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:af:08:81:a3:76:92:38:df:ed:6a:eb:34:6e:56:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 16 19:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d4771acf5e8b324e1537ff51378d672516be7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:ee:b9:a5:d2:d1:ef:8b:0b:50:dc:13:3c:
9f:00:eb:e2:4e:f0:81:b5:e8:39:2c:fa:92:74:e6:
4f:6f:bc:11:b5:a3:47:c8:16:3b:32:83:c0:0b:4b:
78:8e:39:e3:d4:6a:80:bf:17:02:c0:00:9f:20:4e:
9e:40:1a:82:46:ce:80:9f:07:9f:f3:ee:4c:2d:54:
dc:15:de:e3:5f:56:d3:b6:19:d4:52:7b:1a:4a:93:
18:61:0c:7a:b4:0c:d8:73:ca:53:69:57:4a:06:d3:
b2:ff:4f:79:76:fd:25:87:65:49:c2:52:f9:02:74:
64:13:00:5c:3f:ef:3d:ce:de:48:94:8e:bd:68:24:
de:34:74:ce:7d:dd:94:66:b9:f9:85:41:d6:c2:d3:
ab:a2:c5:1f:d6:8b:b4:01:35:a1:30:95:3c:12:ed:
05:94:dc:8a:41:37:3f:b7:e0:09:c6:11:59:18:cc:
fb:25:29:ec:6b:84:be:b6:60:49:45:95:f8:fc:48:
5b:d1:3a:00:50:5a:3e:c8:b0:5a:f8:74:69:fb:85:
31:08:5c:e2:01:0d:e4:4a:93:f1:a8:69:e8:0e:52:
74:42:51:c5:93:82:48:05:6c:bc:e1:f1:e7:33:5b:
ea:78:cf:e4:63:b5:56:11:ad:41:37:22:33:0a:50:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:47:71:AC:F5:E8:B3:24:E1:53:7F:F5:13:78:D6:72:51:6B:E7:EA
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/jUdxrPXosyThU3_1E3jWclFr5-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:00:ae:2b:4c:26:e7:98:1c:63:21:d5:d4:06:0d:4c:16:50:
77:e8:0a:06:e6:16:b8:c1:8f:f8:6a:d9:c3:63:f5:28:0e:da:
e6:8a:03:aa:0f:83:d3:ad:04:62:ce:38:59:27:4a:32:35:fd:
9b:af:21:68:1e:b3:31:0d:0d:85:de:0e:43:4f:6a:21:4e:78:
ce:e6:07:72:3f:ae:1a:ad:22:c4:55:e2:8f:c5:62:93:71:7c:
22:dc:4f:8f:c6:a4:34:fa:f5:76:53:b7:8a:0f:e8:3c:97:56:
15:41:18:f2:de:f1:a9:70:67:48:da:82:d2:5a:bd:96:d7:e0:
cb:3c:9f:ae:20:fe:8d:b0:85:6f:56:72:9e:34:3a:25:a7:40:
53:aa:44:64:a9:7d:40:22:4d:1b:f1:26:fd:8b:ed:86:ef:c2:
cc:ab:e2:e3:76:97:e5:c7:d0:f1:5d:dd:8f:eb:8b:05:49:15:
bb:3a:7e:77:f6:6d:76:41:e9:b6:35:20:7f:b9:82:88:d7:d8:
1f:77:5f:5c:bc:ab:41:4f:c7:c2:af:28:a0:5c:9d:79:a6:70:
54:53:ad:40:e2:7b:01:30:b8:51:04:a8:b8:5b:7f:79:f2:a9:
de:d2:5e:01:12:34:a3:0e:7d:da:ef:53:0e:99:b4:e7:d6:9a:
24:24:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net