Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/woxyfr4YHK9ZGgB6eP_og7DkRmY.roa
File: woxyfr4YHK9ZGgB6eP_og7DkRmY.roa (raw, json)
Hash identifier: 8ItNkdXM0aYCSxvQ5MhcZhdiy0lnPAozqUHboW5SaAo=
Subject key identifier: C2:8C:72:7E:BE:18:1C:AF:59:1A:00:7A:78:FF:E8:83:B0:E4:46:66
Certificate issuer: /CN=ac0984501084a47220c5cccf5478b897c2822c7f
Certificate serial: 019427B3BB70D03A2AC9DBFFD86E7F324DCF
Authority key identifier: AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/woxyfr4YHK9ZGgB6eP_og7DkRmY.roa
Signing time: Thu 02 Jan 2025 15:47:57 +0000
ROA not before: Thu 02 Jan 2025 15:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31034
IP address blocks: 45.13.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:bb:70:d0:3a:2a:c9:db:ff:d8:6e:7f:32:4d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0984501084a47220c5cccf5478b897c2822c7f
Validity
Not Before: Jan 2 15:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c28c727ebe181caf591a007a78ffe883b0e44666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b8:62:8c:be:9b:bd:86:75:20:d1:19:6b:23:
58:7b:79:95:3f:ea:40:72:5a:b9:bd:50:63:fa:5f:
e6:d4:06:df:3d:fb:53:f9:ec:9b:b8:86:cc:2a:62:
6b:23:37:8c:11:80:3e:d3:47:a4:87:60:e5:4b:14:
08:7d:b4:68:0c:c9:ae:e0:f2:98:73:ba:47:b0:7a:
e3:00:59:4c:4b:1e:71:fc:42:60:ed:39:9c:4d:97:
9e:0b:d4:9b:fa:a0:d9:6d:ad:3b:33:1d:bb:13:02:
88:40:36:1f:ea:ed:4f:10:e0:89:13:79:6e:4e:63:
3d:76:d8:0d:f1:eb:0f:38:b1:8c:ea:b8:8c:5b:5d:
5a:10:24:58:b7:f5:8e:41:3a:34:8d:a5:fc:44:91:
c8:82:45:11:9b:71:fd:38:0b:8f:b1:a1:a7:74:d5:
b8:d4:fe:93:11:3d:46:b0:69:32:c7:14:d1:fe:75:
ac:73:a5:a5:4a:95:76:1f:21:bb:11:98:0b:e6:59:
d3:aa:57:71:7e:3c:28:35:f8:27:1c:b6:d2:6d:5e:
64:b8:fe:52:e3:9b:52:10:4c:84:16:75:47:7e:70:
27:43:ad:c7:5f:2d:ee:7a:42:53:f1:25:1f:9c:2e:
c5:b8:da:3e:c0:da:cc:3a:30:81:69:19:22:1d:cb:
0c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8C:72:7E:BE:18:1C:AF:59:1A:00:7A:78:FF:E8:83:B0:E4:46:66
X509v3 Authority Key Identifier:
keyid:AC:09:84:50:10:84:A4:72:20:C5:CC:CF:54:78:B8:97:C2:82:2C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAmEUBCEpHIgxczPVHi4l8KCLH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/woxyfr4YHK9ZGgB6eP_og7DkRmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/293ec2-b144-4bcc-8a48-4bc7034f28d8/1/rAmEUBCEpHIgxczPVHi4l8KCLH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:f6:12:61:11:59:7a:bd:31:38:29:00:a4:aa:ec:cc:f1:2e:
85:c5:df:e3:15:a6:7c:15:9f:79:93:81:b5:bb:e0:aa:bc:5d:
45:d9:fc:76:6c:3d:c1:39:b1:59:40:51:a9:f7:87:a9:d8:92:
ff:a2:54:d6:76:c4:6a:c8:b6:b2:df:bb:9d:9e:5c:0e:e6:dd:
6e:90:75:a9:8b:eb:f0:aa:e7:7b:da:ac:64:fb:cf:91:03:55:
05:62:09:3c:56:dc:6b:d2:db:35:8b:cf:5f:78:f9:43:84:26:
23:75:c6:a6:ff:fc:b0:86:c4:6a:8f:4c:17:4f:b2:92:a6:8f:
45:3b:7a:2c:60:af:e9:57:ab:27:f7:de:68:7d:98:d7:ac:a5:
63:b8:5e:db:c8:ce:33:bb:fb:00:1a:a3:60:02:1c:e6:8a:84:
a6:80:10:1b:15:12:5b:e5:1c:86:6b:d7:52:79:13:6d:c5:fe:
c3:ca:9d:76:f0:38:8f:80:4f:90:fd:33:09:e7:a0:76:18:da:
91:82:3f:f1:fd:48:3b:9d:52:c6:bc:c3:91:ad:ae:12:15:4c:
c5:d6:4f:5c:65:8b:69:e2:ac:87:3a:b7:d0:ac:83:78:8a:41:
14:a6:52:ee:df:cf:53:93:8d:83:f2:0b:ee:a0:39:79:11:0f:
d2:ea:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:24:56 2025 by rpki-client