Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/N-pJtrKqx7hO48PTNshhEn-WP9c.roa
File: N-pJtrKqx7hO48PTNshhEn-WP9c.roa (raw, json)
Hash identifier: 0hb+XvAEB72O8S3Scf21s9qtO1dxI4V6YAtbpGUY0Eg=
Subject key identifier: 37:EA:49:B6:B2:AA:C7:B8:4E:E3:C3:D3:36:C8:61:12:7F:96:3F:D7
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018C206E326E3E0BFAFEFC5F00585729908C
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/N-pJtrKqx7hO48PTNshhEn-WP9c.roa
Signing time: Thu 30 Nov 2023 13:32:21 +0000
ROA not before: Thu 30 Nov 2023 13:32:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35478
IP address blocks: 45.13.212.0/24 maxlen: 24
193.47.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:6e:32:6e:3e:0b:fa:fe:fc:5f:00:58:57:29:90:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Nov 30 13:32:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37ea49b6b2aac7b84ee3c3d336c861127f963fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e2:82:7f:eb:d0:b4:fe:e7:9b:a8:a2:e7:54:
1b:97:b8:5f:eb:d4:7c:c4:6a:ce:05:be:ba:a8:0c:
a9:6c:f9:ee:06:c7:16:de:a1:de:dc:d8:5a:41:01:
7a:79:f5:7e:8d:43:bf:cd:34:9c:a2:65:9f:f1:72:
d2:99:27:3e:dd:03:c8:dc:3c:48:5c:19:29:13:46:
a3:ca:8a:7e:16:b4:ae:4c:52:be:dd:f9:6d:77:0a:
67:c4:d7:c8:f6:46:3e:eb:54:b6:93:60:13:92:8f:
92:14:4a:ad:b3:1a:f5:43:63:c3:b1:fd:da:30:1b:
45:d0:72:0d:3c:71:85:b0:01:aa:f3:33:14:57:8e:
46:2e:cb:5c:d9:7c:18:d0:3e:1c:bc:97:fc:29:bd:
fb:63:6b:a7:ea:22:47:11:98:ee:38:8e:63:bb:cc:
53:aa:b6:a9:4f:e9:5f:05:d9:44:28:db:24:8b:ff:
ac:4d:4b:5c:4e:fa:46:9f:48:d9:ec:dc:a2:b3:60:
a0:7a:6f:c6:ce:97:11:fe:00:7b:a6:45:f9:c0:36:
a4:f2:1e:6a:ec:15:23:6b:6e:28:14:21:57:9a:84:
36:49:70:63:0a:fc:95:09:79:09:30:b4:61:7b:0f:
f9:a6:04:01:8e:98:79:7d:0e:00:87:93:ff:1b:2b:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EA:49:B6:B2:AA:C7:B8:4E:E3:C3:D3:36:C8:61:12:7F:96:3F:D7
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/N-pJtrKqx7hO48PTNshhEn-WP9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.212.0/24
193.47.68.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e5:bf:52:92:12:40:ec:af:26:70:15:d4:6e:57:d6:89:d9:
bb:37:97:68:9a:87:b9:37:bb:d5:6f:ab:88:57:00:0d:4f:9b:
c1:e6:88:6d:5a:4d:de:25:3d:a9:12:7e:39:4d:0c:21:ab:ed:
4a:cd:13:25:d9:0e:f9:69:a6:39:0b:15:e4:2c:b6:ae:30:83:
05:e1:1d:b1:76:d7:3f:86:9a:c9:b0:1b:1c:4c:96:87:78:6b:
ab:6d:09:51:6a:92:e1:b3:cd:2a:21:b7:a1:55:bc:b1:d6:a9:
bf:26:e5:db:cb:80:6f:56:d0:3e:b9:57:26:fc:80:fe:2c:8b:
95:73:e5:05:b9:03:df:fb:2c:e3:34:f9:b6:07:53:0a:cc:2f:
c5:ca:a1:06:c4:70:45:ce:ed:2e:ed:f8:ea:d4:ac:01:42:d0:
86:3b:b5:fa:d2:b9:c2:82:48:3f:b8:19:80:6c:4c:44:c0:18:
1d:bc:dd:62:96:ad:0e:df:f4:5d:41:38:73:6a:aa:13:88:29:
2a:56:57:87:f6:86:11:5c:16:c8:15:bf:1e:ba:7e:ca:4d:3f:
32:3c:dc:02:eb:ec:be:d2:6c:ee:5e:13:58:f9:e2:c1:bf:ff:
8a:09:6a:2c:5e:ef:b8:7c:fb:ad:7a:aa:45:a2:5d:5f:d6:bf:
ee:e7:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:34 2025 by rpki-client