Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/wnFZO58-2aZ7P18Qw-jIjd1jeXs.roa
File: wnFZO58-2aZ7P18Qw-jIjd1jeXs.roa (raw, json)
Hash identifier: vx36cOt+aE+Tw3PFdY9b+UteGXfJmHCFf0+yXWJQTLM=
Subject key identifier: C2:71:59:3B:9F:3E:D9:A6:7B:3F:5F:10:C3:E8:C8:8D:DD:63:79:7B
Certificate issuer: /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial: 0194ACE304843E125CC67254C78CFE2E3B85
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/wnFZO58-2aZ7P18Qw-jIjd1jeXs.roa
Signing time: Tue 28 Jan 2025 12:29:06 +0000
ROA not before: Tue 28 Jan 2025 12:29:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15731
IP address blocks: 45.152.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:e3:04:84:3e:12:5c:c6:72:54:c7:8c:fe:2e:3b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Validity
Not Before: Jan 28 12:29:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c271593b9f3ed9a67b3f5f10c3e8c88ddd63797b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:9d:27:05:a1:68:6d:b4:75:ee:82:25:b3:
f5:df:93:97:da:89:62:41:96:76:33:71:00:b5:e1:
92:e2:6d:8a:d5:4c:b5:ca:b6:7a:b8:82:5e:0d:d4:
47:c8:d5:79:60:1d:b1:e0:73:7d:11:ff:3f:95:37:
30:e7:98:40:06:f3:fd:70:14:b0:89:c4:87:b0:f3:
2c:7f:55:bf:b4:8e:c2:d4:7c:a0:55:ad:dd:51:ad:
07:7d:51:3f:ba:82:51:7b:32:36:7b:f3:93:0d:82:
18:ef:be:0d:05:8b:58:15:d3:1c:8f:c6:0f:1b:99:
31:5e:17:e0:de:6a:eb:17:0c:44:f7:67:98:1a:1d:
6f:a3:6f:ae:84:71:d6:6a:07:af:e1:d2:22:87:72:
b2:1f:33:58:4c:0b:10:71:d9:a9:8a:f8:2b:f0:a1:
64:66:72:f4:7c:a8:02:24:b6:d8:1a:f5:fe:94:a3:
72:f4:5d:c6:88:58:85:98:9b:b1:bc:41:f1:eb:42:
76:58:1b:ad:7a:17:5a:b8:ba:a9:8e:58:42:b4:91:
d1:af:9e:68:b0:f9:a4:d8:f0:46:35:f3:ac:55:8e:
cf:a0:f4:d9:ea:97:08:1d:9c:41:0e:9b:96:27:64:
3c:73:d9:6c:51:89:8f:9c:44:e0:41:29:8f:a6:2a:
59:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:71:59:3B:9F:3E:D9:A6:7B:3F:5F:10:C3:E8:C8:8D:DD:63:79:7B
X509v3 Authority Key Identifier:
keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/wnFZO58-2aZ7P18Qw-jIjd1jeXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.20.0/23
Signature Algorithm: sha256WithRSAEncryption
21:4d:30:af:30:55:84:c7:8a:9f:ab:df:b1:a2:c4:ea:81:cb:
ab:6a:75:e6:b6:7a:45:8c:3f:d0:3f:29:4a:4f:82:46:9b:7c:
d4:d7:25:0b:ef:80:e9:4a:18:5c:36:bd:f0:ef:42:75:d2:38:
2a:52:24:33:d1:fe:86:05:b6:8a:1b:7e:e6:4e:a0:23:f5:d9:
a3:a0:44:d9:da:fc:be:08:d7:18:da:59:50:08:8e:60:05:50:
ed:bf:89:22:ae:4b:a5:4c:5e:f4:84:c9:b3:94:75:d7:01:40:
c8:77:00:3c:e2:eb:7e:dc:cc:55:52:25:48:5a:e4:a8:41:84:
27:34:ac:e2:fc:ac:4d:8f:0b:fb:1c:fc:97:3c:78:a1:ee:f7:
55:44:19:e6:a8:60:93:d7:2b:05:59:d7:52:d7:f5:83:35:ec:
2d:15:26:7d:3e:bb:2e:a1:9d:99:1c:95:91:46:16:e2:4b:2e:
1b:39:12:ec:38:c4:ac:23:bd:6e:5c:db:87:95:d0:b6:ea:20:
b1:eb:e0:f3:b5:8a:34:0e:93:f9:db:a1:6c:24:ec:95:52:8e:
8f:96:fb:fd:98:25:92:74:96:d7:42:c4:81:fb:96:bc:69:70:
5d:f2:58:87:a9:35:39:cb:aa:8b:3a:2c:e9:e6:b8:27:57:aa:
c0:1b:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:07 2025 by rpki-client