Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa
File: ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa (raw, json)
Hash identifier: QTsSWZKA6bZq44kgpQ1aopr0h9GiEKlR3CEv28RO574=
Subject key identifier: 8D:AF:B6:B2:CA:E5:4C:9A:76:A5:2B:62:87:61:BD:41:BD:10:CB:97
Certificate issuer: /CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Certificate serial: 0194206866F523D5D73175BBD6F14E41EB74
Authority key identifier: D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39389
IP address blocks: 45.131.88.0/23 maxlen: 23
45.131.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:66:f5:23:d5:d7:31:75:bb:d6:f1:4e:41:eb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d251392cd7e6e40a45c1b8a4479880eef960f330
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dafb6b2cae54c9a76a52b628761bd41bd10cb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:78:2a:cf:11:c5:67:b1:2e:45:ff:92:de:94:
ba:31:46:29:5b:b4:7a:52:28:4d:fd:c7:69:1c:f9:
5a:7a:57:60:f8:18:c3:89:f6:c5:fa:6d:7f:9f:c6:
5e:85:c9:47:26:95:80:b7:b0:d1:2c:56:d3:ec:f7:
9a:aa:6d:92:52:64:7e:88:e1:03:b0:ce:04:c7:00:
52:a8:cd:de:20:61:7b:1a:18:14:f2:bf:d8:00:cb:
8b:92:bd:e3:9c:a8:5c:a1:2a:e6:74:80:c4:0e:08:
dc:44:f1:c0:b8:19:f6:31:94:a7:d4:0b:f9:42:8f:
54:c9:8f:19:7e:6b:3a:2d:f0:c5:4a:49:4c:f4:05:
4f:c4:e4:a9:dc:e3:6d:fd:0f:35:6e:d6:ce:1b:ac:
a2:e1:4e:8f:5b:9f:33:9c:93:85:18:7c:f5:43:97:
b2:ed:19:a3:8e:ad:10:1d:8b:95:d7:58:fd:45:5b:
de:62:e7:48:7e:63:ac:1c:ed:3f:ca:ce:2a:4e:f6:
4b:3e:48:c7:3c:1b:bc:c4:80:78:2c:40:cd:1f:aa:
52:24:94:97:a0:2a:d7:91:11:b9:90:72:40:8e:72:
32:96:09:ba:cd:43:a7:9c:ea:89:2b:53:2d:6d:02:
a8:9d:af:95:4f:8c:f0:d8:c0:ac:7d:dd:d2:62:ff:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AF:B6:B2:CA:E5:4C:9A:76:A5:2B:62:87:61:BD:41:BD:10:CB:97
X509v3 Authority Key Identifier:
keyid:D2:51:39:2C:D7:E6:E4:0A:45:C1:B8:A4:47:98:80:EE:F9:60:F3:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lE5LNfm5ApFwbikR5iA7vlg8zA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/ja-2ssrlTJp2pStih2G9Qb0Qy5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/234dbb-9fe4-4bb8-a974-df1d5205c5d0/1/0lE5LNfm5ApFwbikR5iA7vlg8zA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.88.0-45.131.90.255
Signature Algorithm: sha256WithRSAEncryption
6f:b4:1b:b3:4e:9d:07:eb:b8:64:17:84:c4:70:07:18:79:22:
30:73:18:30:b4:d2:a8:e4:fe:e0:65:77:95:71:8d:b5:f5:08:
21:85:f8:bb:f8:eb:e9:a3:1f:3e:22:cc:d7:bc:fb:24:87:9c:
92:8f:3a:c1:b2:6c:02:a1:84:c7:35:d3:df:b6:45:df:80:ce:
5e:6c:81:95:9d:93:3e:2f:3b:c7:ab:32:89:7e:ab:08:11:b9:
56:75:2f:7f:d8:bd:31:ef:f5:5b:11:d7:22:97:be:9a:d7:88:
a9:34:13:fd:8d:c4:98:60:98:ac:e2:c0:24:18:78:cf:bf:1a:
8a:dd:49:89:0f:ab:8a:b8:44:ed:18:70:df:dd:47:f0:96:06:
c0:47:dd:c3:52:ad:8b:72:82:bc:c3:96:46:a4:58:ff:8c:e5:
b8:80:8f:fe:e1:d1:fb:db:83:31:18:77:de:5b:8a:82:7d:c9:
69:8b:a0:d0:92:d9:ba:38:3e:a0:8f:98:d3:ea:d6:08:44:6a:
12:05:eb:1a:92:b9:f6:35:d9:ba:ff:83:fc:2e:e6:2e:24:1c:
a7:59:3d:6e:ec:73:3e:ed:8c:8c:2a:2d:4b:f0:ef:4a:00:bf:
48:2f:18:ce:f0:b5:10:c0:0f:45:0f:71:6b:e1:5d:84:ed:03:
57:72:e6:08
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQgaGb1I9XXMXW71vFOQet0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNTEzOTJjZDdlNmU0MGE0NWMxYjhhNDQ3OTg4MGVlZjk2
MGYzMzAwHhcNMjUwMTAxMDU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGFmYjZiMmNhZTU0YzlhNzZhNTJiNjI4NzYxYmQ0MWJkMTBjYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHgqzxHFZ7EuRf+S3pS6MUYpW7R6
UihN/cdpHPlaeldg+BjDifbF+m1/n8ZehclHJpWAt7DRLFbT7Peaqm2SUmR+iOED
sM4ExwBSqM3eIGF7GhgU8r/YAMuLkr3jnKhcoSrmdIDEDgjcRPHAuBn2MZSn1Av5
Qo9UyY8Zfms6LfDFSklM9AVPxOSp3ONt/Q81btbOG6yi4U6PW58znJOFGHz1Q5ey
7Rmjjq0QHYuV11j9RVveYudIfmOsHO0/ys4qTvZLPkjHPBu8xIB4LEDNH6pSJJSX
oCrXkRG5kHJAjnIylgm6zUOnnOqJK1MtbQKona+VT4zw2MCsfd3SYv+fJQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFI2vtrLK5UyadqUrYodhvUG9EMuXMB8GA1UdIwQY
MBaAFNJROSzX5uQKRcG4pEeYgO75YPMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQt
ZGYxZDUyMDVjNWQwLzEvamEtMnNzcmxUSnAycFN0aWgyRzlRYjBReTVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yMzRkYmItOWZlNC00YmI4LWE5NzQtZGYxZDUyMDVjNWQw
LzEvMGxFNUxOZm01QXBGd2Jpa1I1aUE3dmxnOHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMtg1gD
BAAtg1owDQYJKoZIhvcNAQELBQADggEBAG+0G7NOnQfruGQXhMRwBxh5IjBzGDC0
0qjk/uBld5VxjbX1CCGF+Lv46+mjHz4izNe8+ySHnJKPOsGybAKhhMc109+2Rd+A
zl5sgZWdkz4vO8erMol+qwgRuVZ1L3/YvTHv9VsR1yKXvprXiKk0E/2NxJhgmKzi
wCQYeM+/GordSYkPq4q4RO0YcN/dR/CWBsBH3cNSrYtygrzDlkakWP+M5biAj/7h
0fvbgzEYd95bioJ9yWmLoNCS2bo4PqCPmNPq1ghEahIF6xqSufY12br/g/wu5i4k
HKdZPW7scz7tjIwqLUvw70oAv0gvGM7wtRDAD0UPcWvhXYTtA1dy5gg=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net