Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/hVX4dKuohvCGQi3l1LcgNVttVoM.roa
File: hVX4dKuohvCGQi3l1LcgNVttVoM.roa (raw, json)
Hash identifier: ni7zg1S4BCaurGVvOl2STrq7TatbbjtiPUHBQsfw7go=
Subject key identifier: 85:55:F8:74:AB:A8:86:F0:86:42:2D:E5:D4:B7:20:35:5B:6D:56:83
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 01857270F40E9FBE07E1C6ED8826C7DD85DE
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/hVX4dKuohvCGQi3l1LcgNVttVoM.roa
Signing time: Mon 02 Jan 2023 12:24:43 +0000
ROA not before: Mon 02 Jan 2023 12:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35478
IP address blocks: 45.129.15.0/24 maxlen: 24
45.13.212.0/24 maxlen: 24
45.13.213.0/24 maxlen: 24
193.47.69.0/24 maxlen: 24
193.47.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:f4:0e:9f:be:07:e1:c6:ed:88:26:c7:dd:85:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 2 12:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8555f874aba886f086422de5d4b720355b6d5683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c5:bd:4f:75:93:e6:c2:b7:c8:c4:f9:5f:c4:
99:a8:e5:06:cb:0b:42:74:7b:ed:46:fc:29:bf:b9:
14:68:48:a8:32:1f:a0:47:96:63:d2:ca:9f:5f:09:
8b:d9:16:b1:3c:e3:77:6b:8c:6b:03:ec:2e:e9:12:
e5:6c:78:ed:0c:45:e4:99:84:94:43:22:c8:6d:42:
7e:c3:b0:3a:65:98:6a:0f:19:a7:7e:59:33:2c:7d:
e0:ae:04:0c:a4:cf:73:68:fb:cf:03:21:bd:3c:8f:
e7:e5:e4:50:62:79:4c:4c:2e:e4:04:1f:d2:41:28:
03:08:39:86:e1:00:f6:2a:d0:1d:90:d0:a1:75:51:
86:d1:31:3a:9e:b3:b7:14:b1:7d:43:46:5f:6c:f2:
eb:ec:d4:97:dd:d5:d1:f1:0a:df:cd:15:0a:de:5c:
f3:c4:8f:d0:cf:2e:1d:fd:24:42:c9:e2:26:05:8b:
3d:2d:15:29:52:71:35:79:c3:23:99:62:65:d1:aa:
74:93:21:f0:8d:10:93:0e:c1:3b:35:be:f9:d9:40:
ea:46:03:a3:ac:3d:86:ed:d6:be:40:d8:be:27:44:
f3:f3:61:9a:0d:c0:a2:83:b7:af:a7:79:f5:cf:5d:
b7:50:ac:4f:cf:4a:92:2c:18:33:09:94:e6:d1:ea:
d2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:55:F8:74:AB:A8:86:F0:86:42:2D:E5:D4:B7:20:35:5B:6D:56:83
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/hVX4dKuohvCGQi3l1LcgNVttVoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.212.0/23
45.129.15.0/24
193.47.68.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:26:a1:c1:af:0c:e2:bb:9b:85:c2:1f:d1:fe:de:bb:59:3b:
2d:84:f2:c4:3c:9e:da:cc:b4:2e:e7:39:f5:a0:f2:d2:6e:68:
6e:4b:a1:6a:fe:bd:8d:99:2e:25:26:3a:d9:d1:ca:da:62:05:
f7:e4:89:3d:7a:99:5a:bf:e2:c5:4a:c7:ee:69:9a:a2:7a:8f:
14:9b:e3:39:a4:34:e3:04:3d:91:43:8d:f3:52:2c:2f:e5:d6:
72:4f:c4:5d:9c:01:66:bf:0d:cb:75:d4:7b:15:08:da:7c:da:
80:24:2e:48:a8:55:d0:7f:52:f4:8e:87:ac:b3:b4:13:13:cc:
f5:fd:63:14:fc:2a:c5:ca:f6:f9:2f:da:f2:18:25:33:69:2b:
08:43:59:6e:9e:a6:6d:8e:14:c5:5d:32:5c:b9:56:af:cc:80:
0f:73:82:4e:37:95:74:24:86:95:7b:13:c2:b0:c1:39:0f:36:
97:ac:3e:6c:b1:53:52:de:3c:de:05:22:68:91:18:39:0b:a4:
91:3b:13:9c:db:0c:5d:e9:eb:05:6b:8d:ec:93:0f:44:e7:46:
70:77:6f:23:90:e0:6b:36:99:9d:0a:45:bc:c1:d3:7d:97:70:
80:ad:81:6c:7b:78:57:ed:6c:99:c8:93:b5:33:00:86:f6:e9:
97:b2:d0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:13 2025 by rpki-client