Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/WRR5LY8_1pJUgURwLaVmIo-E2-o.roa
File: WRR5LY8_1pJUgURwLaVmIo-E2-o.roa (raw, json)
Hash identifier: +qrg2tL2ng6DI1UCOg4tOsQWLYbjmu9xrdicU5ox5vQ=
Subject key identifier: 59:14:79:2D:8F:3F:D6:92:54:81:44:70:2D:A5:66:22:8F:84:DB:EA
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 0194274718807A21F1F98351BBF2CF1BA460
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/WRR5LY8_1pJUgURwLaVmIo-E2-o.roa
Signing time: Thu 02 Jan 2025 13:49:18 +0000
ROA not before: Thu 02 Jan 2025 13:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41281
IP address blocks: 45.154.252.0/24 maxlen: 24
45.154.254.0/24 maxlen: 24
45.154.255.0/24 maxlen: 24
193.189.100.0/24 maxlen: 24
193.189.101.0/24 maxlen: 24
2001:67c:130c::/48 maxlen: 48
2a0f:df00::/48 maxlen: 48
2a0f:df00:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:18:80:7a:21:f1:f9:83:51:bb:f2:cf:1b:a4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Jan 2 13:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5914792d8f3fd692548144702da566228f84dbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:be:a6:8d:c6:d0:9f:2b:0f:32:1d:08:7c:
c8:ab:29:cf:c1:22:33:60:b5:49:20:0d:4d:48:b1:
7a:66:e5:f4:48:11:65:33:24:a0:e6:11:59:93:79:
6c:12:71:77:fa:97:3e:e8:da:61:24:d8:66:80:1a:
79:eb:7d:19:91:d1:f7:94:72:68:e6:20:26:3a:4e:
d0:54:8d:fd:ee:2c:94:0a:79:66:0e:35:54:fd:c4:
2d:78:10:ad:96:a0:a7:7e:33:50:d6:81:22:77:c5:
ec:b3:3d:25:ad:39:d7:63:09:78:f6:06:b1:ab:04:
df:c9:9e:2c:e4:4d:f9:e9:2d:6e:60:aa:a8:81:b8:
35:d0:fd:c8:f9:85:db:70:47:14:ae:74:df:cc:de:
7c:aa:49:50:45:e8:c2:e8:f7:e0:ec:bd:e0:e4:2d:
23:08:29:5f:d9:7c:a4:ce:6c:64:40:6e:4d:7f:54:
81:c3:a0:b0:b6:ce:8b:35:26:65:49:c8:d0:bc:ca:
a4:47:9d:72:9b:82:24:18:01:2e:6d:f9:57:ea:f0:
f5:f5:b5:b3:3e:cf:7e:6c:77:96:7d:05:03:86:14:
94:4e:a8:30:d4:2d:9d:4f:6f:83:ba:00:63:66:63:
d5:6b:16:9e:5a:aa:0f:ba:9c:56:4f:28:cd:dd:99:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:14:79:2D:8F:3F:D6:92:54:81:44:70:2D:A5:66:22:8F:84:DB:EA
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/WRR5LY8_1pJUgURwLaVmIo-E2-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.252.0/24
45.154.254.0/23
193.189.100.0/23
IPv6:
2001:67c:130c::/48
2a0f:df00::/48
2a0f:df00:dead::/48
Signature Algorithm: sha256WithRSAEncryption
de:7e:13:81:ad:18:de:ae:ad:b5:f6:e0:83:f6:3a:a2:e3:57:
1e:a3:0e:6f:5c:de:32:cf:33:cf:ac:57:c2:92:31:ea:8d:75:
12:ee:62:3f:fa:fe:db:e1:30:e9:14:33:e6:f2:6f:08:ef:18:
93:c1:a5:6c:6d:6c:db:7c:23:ff:0c:f1:b6:ab:79:be:53:b9:
d8:df:d0:82:c8:b1:75:6b:87:2f:5c:11:5d:29:50:e8:18:70:
c2:86:81:ab:07:c3:57:50:d8:12:7f:60:4d:95:cc:44:6e:8d:
b7:d7:a1:7d:73:a4:0e:d3:f0:c9:63:b9:b8:bd:1b:11:9d:0a:
62:7c:93:8b:ef:2d:f2:36:41:22:0d:a7:2e:b1:46:bc:6f:ea:
a1:ff:b1:ed:5b:aa:07:d9:cb:9f:38:de:33:dd:d8:ac:cd:8d:
8c:ca:6b:bb:07:39:48:35:08:a3:4d:40:ee:82:6d:4b:52:f1:
ed:ef:67:3a:b7:61:fb:9e:82:c9:e2:1a:3e:89:53:fc:f4:f9:
ad:93:ab:c0:6a:1f:0c:bf:92:ba:e4:4c:3b:a5:d7:35:3f:fe:
78:08:d8:60:42:fd:a7:b8:6c:06:bc:f6:43:4b:42:c3:bf:cd:
13:f6:dd:1c:c2:1a:9f:ce:42:b7:45:64:a7:2d:a8:d2:96:b4:
2f:fd:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:13:33 2025 by rpki-client