Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/3AEzUhvWiUCFE9TD7sc_sco4M4s.roa
File: 3AEzUhvWiUCFE9TD7sc_sco4M4s.roa (raw, json)
Hash identifier: YvnBXtJ1AsIMCvoUECret3v2ZnpUMeRLw/ViAsDPbeg=
Subject key identifier: DC:01:33:52:1B:D6:89:40:85:13:D4:C3:EE:C7:3F:B1:CA:38:33:8B
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 01849B2A5FE613EA9EFFA34FF85333D38179
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/3AEzUhvWiUCFE9TD7sc_sco4M4s.roa
Signing time: Mon 21 Nov 2022 17:09:16 +0000
ROA not before: Mon 21 Nov 2022 17:09:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35478
IP address blocks: 45.129.15.0/24 maxlen: 24
45.13.212.0/24 maxlen: 24
45.13.213.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
193.47.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9b:2a:5f:e6:13:ea:9e:ff:a3:4f:f8:53:33:d3:81:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Nov 21 17:09:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc0133521bd689408513d4c3eec73fb1ca38338b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:fa:b8:58:20:a5:97:89:2d:b5:6c:ce:8f:
44:5f:62:a6:c3:2e:fc:7d:13:e7:21:dc:a8:5f:05:
ad:0e:b2:54:88:e7:f5:96:3e:e5:0b:3d:b5:4a:1a:
03:fb:04:af:8a:d8:26:a4:cb:45:d0:82:d6:73:a0:
01:bd:98:12:44:10:fd:7c:f3:72:b0:b8:60:d7:9d:
cd:9b:3b:e0:8c:09:7f:d0:0e:92:7e:f1:58:7d:1b:
4f:f3:09:e8:95:6b:9f:c1:f6:86:8f:09:94:f1:f3:
55:41:ae:a9:ea:34:30:c7:a5:22:3c:97:4e:97:d8:
43:df:47:6b:46:ca:fe:e5:98:15:df:6e:ab:ae:1a:
48:9d:86:e6:73:32:c3:64:83:24:19:f8:8d:35:89:
f3:81:47:2e:8e:3f:72:96:81:ad:8a:6b:1a:5c:d8:
0e:4b:1d:67:5a:0a:c9:26:7b:7c:c6:19:ae:81:9b:
71:d3:f4:e1:f1:5c:01:e4:c8:38:67:4b:b5:c6:80:
16:df:6d:75:8d:af:17:0e:c4:da:a6:7c:a9:67:1c:
fb:8c:7b:b2:f9:f8:b8:6b:74:31:e4:49:fb:5e:18:
52:cf:0b:21:8c:c4:5c:80:97:5e:1c:b1:87:da:e9:
bd:a3:e1:57:a3:2b:18:43:59:9a:3f:32:84:c3:57:
27:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:33:52:1B:D6:89:40:85:13:D4:C3:EE:C7:3F:B1:CA:38:33:8B
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/3AEzUhvWiUCFE9TD7sc_sco4M4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.212.0/23
45.129.15.0/24
193.47.68.0/23
Signature Algorithm: sha256WithRSAEncryption
92:87:6f:e6:ba:59:d8:fa:8c:a8:1e:d6:77:99:5a:67:0a:9a:
d6:f4:99:63:23:3a:91:0c:62:d8:e0:4b:da:82:53:37:ca:79:
9c:75:c3:d7:19:87:fe:08:cb:a1:cf:7a:61:e6:da:7e:c2:79:
ef:b3:1f:8b:17:42:94:6a:f0:61:60:21:d9:e8:5e:6b:2a:f0:
8b:5e:4f:7d:91:52:f9:14:a3:0c:07:e5:24:26:61:3e:50:d3:
c9:2d:98:58:6c:da:af:0f:45:dd:1a:1c:79:eb:53:21:11:95:
8b:45:36:67:fe:ca:a5:a8:fa:90:f9:53:f2:ff:25:e5:b4:21:
c9:6f:e7:64:a9:63:c3:84:00:a9:b2:9c:11:a9:8e:76:27:2b:
b3:b9:41:6a:63:d4:b6:be:b2:4d:54:65:12:09:12:cf:0e:13:
e6:18:10:87:ba:59:ef:f0:a2:dd:7f:56:1c:dd:48:98:f4:28:
64:d5:49:81:85:f9:67:5e:8e:f1:c8:fb:1c:88:8b:01:09:4e:
da:d7:bf:82:bd:4b:25:ec:43:7e:f2:7a:33:de:fb:92:d8:ff:
14:cf:d5:7c:a8:74:c8:11:e6:8d:b6:7f:48:f0:4d:eb:97:c4:
14:8d:9f:2e:1a:9f:27:98:ed:c5:dc:e6:e3:0d:81:62:03:eb:
66:98:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:16 2025 by rpki-client