Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/RWWczp84opqTntQ9QhZWUB_bRi0.roa
File: RWWczp84opqTntQ9QhZWUB_bRi0.roa (raw, json)
Hash identifier: 8hWrUOsLBDMZGiH7jK9VZnVFWGofCo14DbKrIs6+3oU=
Subject key identifier: 45:65:9C:CE:9F:38:A2:9A:93:9E:D4:3D:42:16:56:50:1F:DB:46:2D
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01936E0DFA71B768FC154C988C9820DBFAEB
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/RWWczp84opqTntQ9QhZWUB_bRi0.roa
Signing time: Wed 27 Nov 2024 14:37:10 +0000
ROA not before: Wed 27 Nov 2024 14:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136988
IP address blocks: 45.146.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:0d:fa:71:b7:68:fc:15:4c:98:8c:98:20:db:fa:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Nov 27 14:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45659cce9f38a29a939ed43d421656501fdb462d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:81:1e:43:27:a5:bc:d1:3f:45:91:7b:45:
40:e6:fe:59:51:52:a7:32:69:e3:45:cb:52:f2:d3:
54:c0:8c:52:c1:ca:7e:01:7b:df:4b:7f:7f:b8:ce:
2c:f6:72:22:fe:e2:52:f9:e6:22:6a:c1:1f:7a:d7:
66:a0:b6:e1:c0:53:05:4a:d0:e1:37:e4:03:94:43:
4a:cc:ea:28:8c:fe:1e:9c:5a:28:b9:a6:22:5c:5b:
9c:ae:82:4e:0c:83:88:8f:44:36:54:6c:30:c2:3c:
65:86:d5:a0:cf:6e:26:cf:07:32:78:00:f1:09:fc:
33:a4:fe:62:31:04:a0:37:26:06:99:5e:20:35:8c:
3a:ad:5d:e6:4a:11:a7:ac:27:b0:e6:d5:64:6b:8a:
cf:49:02:6f:fd:9a:25:06:d9:22:0d:b5:ee:ac:0b:
15:2e:f7:97:7c:40:cd:82:9b:50:b7:59:14:2e:92:
f9:48:9e:31:dc:09:66:06:8b:e2:23:dd:25:05:7b:
ce:67:13:30:54:7e:d5:c7:31:86:db:2f:29:54:d7:
01:3a:c7:93:09:2e:a7:ab:0c:73:00:d0:e6:6a:c8:
ce:f5:75:9a:13:3b:a5:47:0f:c7:ed:51:34:05:a5:
55:57:14:f0:c1:1d:c7:5e:24:39:b1:9b:36:e2:16:
c4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:65:9C:CE:9F:38:A2:9A:93:9E:D4:3D:42:16:56:50:1F:DB:46:2D
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/RWWczp84opqTntQ9QhZWUB_bRi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.220.0/24
Signature Algorithm: sha256WithRSAEncryption
90:02:46:61:2b:d0:a6:62:c2:79:e7:45:4b:1a:f9:62:af:0b:
dd:00:12:f1:13:5d:4c:54:e0:08:4c:ee:de:5b:45:ac:6a:54:
53:80:9f:eb:a0:92:dc:08:21:19:39:5a:17:21:44:51:76:dd:
3a:11:36:51:9c:a6:78:e3:1d:41:00:ce:13:bf:5a:8d:ff:a3:
40:eb:02:f1:15:98:b7:1e:9a:2e:a6:00:41:9b:ab:1b:2a:2c:
04:f7:11:11:11:93:3f:44:d4:40:eb:23:cf:ab:10:ef:73:e2:
42:18:ce:78:5e:24:bd:ae:93:06:f3:10:f5:a3:3f:05:46:a1:
35:28:db:f1:d2:a1:29:0d:12:36:fe:10:ff:e0:38:de:37:cb:
27:d4:bf:f6:3c:e7:82:e3:18:34:7a:8e:85:7a:9e:bc:e4:ff:
42:cc:c5:de:be:06:dc:98:e8:2f:06:0a:50:ca:4d:79:4b:92:
41:35:20:3d:a6:d6:38:89:59:55:5f:54:73:1b:f1:45:3a:84:
27:a2:b4:65:ad:a1:b2:f7:4b:fc:25:f8:18:13:ac:c8:2f:7b:
62:ef:ba:d9:9a:ff:76:6b:3c:9b:6c:64:b3:5c:ff:bb:42:2d:
e6:f3:bb:58:c3:4b:9c:ca:97:18:0d:ed:9d:c9:51:2f:27:f9:
a3:14:e3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:46:14 2025 by rpki-client