Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/w9FUe2VghB5z5wMiCq16O5p3Ksc.roa
File: w9FUe2VghB5z5wMiCq16O5p3Ksc.roa (raw, json)
Hash identifier: KNJA+jBep1B37UC+UJ1nU0p7ajYlp1CAGn4r+iwUJ3o=
Subject key identifier: C3:D1:54:7B:65:60:84:1E:73:E7:03:22:0A:AD:7A:3B:9A:77:2A:C7
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01873948A34856887E9512A30ED4F11CAB3F
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/w9FUe2VghB5z5wMiCq16O5p3Ksc.roa
Signing time: Fri 31 Mar 2023 20:07:54 +0000
ROA not before: Fri 31 Mar 2023 20:07:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 45.146.105.0/24 maxlen: 24
92.114.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:39:48:a3:48:56:88:7e:95:12:a3:0e:d4:f1:1c:ab:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Mar 31 20:07:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3d1547b6560841e73e703220aad7a3b9a772ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:5a:60:23:5c:af:42:5b:27:c4:a1:63:b0:
e2:fb:f7:eb:e6:c4:de:a2:61:34:6f:49:41:74:83:
55:14:3f:19:83:fe:44:fa:72:80:4d:38:3f:1a:8f:
43:51:94:01:31:bf:1e:77:6d:b8:ed:13:61:df:16:
30:c0:57:c0:11:62:ee:45:3f:c9:69:35:32:9f:b3:
a8:5b:90:5a:87:fa:66:ed:a1:24:4c:f1:1d:69:9c:
f9:5d:30:86:3a:fd:85:e6:b8:b4:09:6a:4d:ad:a7:
01:4f:8a:34:54:5b:77:f5:04:68:a0:ac:e9:c5:a5:
5c:50:04:58:4e:d4:62:fe:ee:ba:d4:f4:52:1b:fb:
c6:a2:4f:5f:d8:4c:0a:c3:12:61:34:19:01:ee:df:
2e:27:9c:8c:41:c1:f4:8f:2c:b2:f0:df:77:c4:48:
e0:0b:35:ea:d0:36:35:dc:0a:12:bb:ab:dc:23:09:
b1:b7:59:6f:93:da:03:4b:11:9b:64:b1:41:9e:7d:
4e:56:2d:aa:cc:9c:4c:a8:14:ba:14:f8:6c:83:8c:
c7:71:d6:3f:02:6f:3a:ea:3b:21:b4:5d:ea:d0:b4:
4f:13:d5:9f:4b:39:7e:77:b6:fc:20:9a:d0:3c:02:
38:d5:c3:44:d0:61:7b:dd:3c:e4:ea:78:34:16:b1:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D1:54:7B:65:60:84:1E:73:E7:03:22:0A:AD:7A:3B:9A:77:2A:C7
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/w9FUe2VghB5z5wMiCq16O5p3Ksc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.105.0/24
92.114.5.0/24
Signature Algorithm: sha256WithRSAEncryption
41:24:1a:1b:df:64:a0:ab:64:ec:f5:c4:f3:e6:e7:0d:ee:85:
a5:f9:11:8d:94:df:9b:6a:c2:96:a8:bc:28:aa:aa:a0:ff:f3:
9e:2a:08:ed:d2:3d:1c:27:0f:8e:78:5c:b2:2b:c3:14:24:ca:
a5:f1:25:c4:1c:f1:a2:7d:ba:7d:77:c0:ac:37:a2:c7:75:2b:
19:a4:2f:8d:3d:0e:6b:44:96:5d:7a:b6:8b:ba:ed:f5:bb:d1:
17:b0:01:b6:56:e8:f8:29:68:85:fb:76:ab:c1:65:15:d0:d7:
33:59:2c:ba:be:4e:33:f3:35:8e:39:e4:1c:0b:0d:7c:f7:8c:
79:90:11:d5:37:fc:da:0c:e4:c8:5d:6e:e6:3b:3f:18:80:46:
de:36:71:b2:de:d5:45:a0:c8:12:03:f9:00:4d:36:e3:2f:0e:
c4:e6:02:76:77:4b:09:f0:e5:fe:6a:90:89:f1:1e:59:a5:35:
b8:aa:72:3c:45:f4:01:96:5d:93:97:55:f4:37:60:0c:fd:f7:
8d:33:2d:b0:ba:3e:ca:f3:0b:47:fc:11:e8:25:90:07:b0:a0:
8b:cd:de:98:cf:86:df:fc:aa:6c:3e:38:57:aa:f0:f1:71:85:
8d:21:1f:f8:19:ff:0d:cb:2c:1c:86:30:e0:3e:89:81:c8:07:
de:0a:95:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org