Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/iXoSRKkWEwR4x0KJqilnpYa6lOM.roa
File: iXoSRKkWEwR4x0KJqilnpYa6lOM.roa (raw, json)
Hash identifier: ZcUe3OT8DJpLmXdFIebvt3vuTGQrnH0Iv8Y4qaPPUFk=
Subject key identifier: 89:7A:12:44:A9:16:13:04:78:C7:42:89:AA:29:67:A5:86:BA:94:E3
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 019374FC45257402845D9A80E9D4E4D522E1
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/iXoSRKkWEwR4x0KJqilnpYa6lOM.roa
Signing time: Thu 28 Nov 2024 22:55:10 +0000
ROA not before: Thu 28 Nov 2024 22:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49468
IP address blocks: 45.13.36.0/24 maxlen: 24
45.13.214.0/24 maxlen: 24
45.13.215.0/24 maxlen: 24
45.129.12.0/24 maxlen: 24
45.134.49.0/24 maxlen: 24
45.134.50.0/24 maxlen: 24
45.148.8.0/24 maxlen: 24
193.29.12.0/24 maxlen: 24
193.32.160.0/24 maxlen: 24
193.32.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:fc:45:25:74:02:84:5d:9a:80:e9:d4:e4:d5:22:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Nov 28 22:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=897a1244a916130478c74289aa2967a586ba94e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:9e:ec:72:cb:e3:92:66:53:e4:f8:6d:4d:
69:f9:c0:73:f9:94:fd:21:89:26:5a:b9:c3:9c:af:
b6:bb:77:56:c7:ea:33:17:f9:d9:16:8d:df:f6:09:
1e:ec:d9:ae:12:b3:f0:cb:8a:f5:b7:da:ee:7a:33:
24:94:44:44:99:46:ac:29:ec:2e:3c:73:e6:c4:04:
62:f1:51:06:16:1d:8d:dc:ea:82:cb:a9:2d:5c:17:
65:b2:fa:ff:1e:a7:dd:99:ad:f5:0a:f8:6d:2d:d3:
c9:0d:20:4c:0a:cc:28:bc:91:f0:07:2b:03:a4:12:
6f:7b:6b:3c:57:af:ec:48:3b:94:c7:e3:b1:9f:87:
f0:c8:12:40:ad:b0:fc:ce:10:6a:16:a5:49:c5:36:
17:78:2c:e0:93:17:84:96:67:c1:78:9a:ee:90:5a:
7c:d6:2a:fd:8f:80:28:42:e1:a9:2d:a0:12:4b:5f:
43:da:d6:e1:e4:c3:eb:45:9e:62:e0:6b:ab:c1:61:
59:83:29:3c:b0:57:98:58:4f:94:7e:c8:06:f5:e7:
98:58:dd:53:5e:a9:a0:76:51:b3:ba:94:8d:46:31:
04:a6:de:2b:eb:8a:bb:6c:e3:a2:79:a8:e1:fa:b5:
e1:4e:75:7b:f5:75:bf:df:56:b7:9d:fe:dc:53:17:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7A:12:44:A9:16:13:04:78:C7:42:89:AA:29:67:A5:86:BA:94:E3
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/iXoSRKkWEwR4x0KJqilnpYa6lOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.36.0/24
45.13.214.0/23
45.129.12.0/24
45.134.49.0-45.134.50.255
45.148.8.0/24
193.29.12.0/24
193.32.160.0/23
Signature Algorithm: sha256WithRSAEncryption
86:93:7d:c1:44:e4:c5:97:ed:88:56:7c:d0:bb:17:dc:ce:20:
c2:94:23:a9:11:cd:87:80:fb:77:ee:82:0f:c5:53:94:7e:44:
5b:1d:7f:cc:4d:a9:5b:32:69:31:2f:bb:b8:84:19:0f:9e:d1:
b3:13:4c:da:97:df:43:e7:21:35:95:29:92:f0:2c:5a:12:88:
a3:fc:28:66:f7:bc:ff:2d:0a:e4:ec:20:f6:40:b8:91:92:9f:
e4:bc:fe:aa:a6:72:28:10:30:46:c4:f3:f7:7a:d1:07:4f:2d:
da:53:ed:36:a8:70:60:23:0c:6b:45:0f:1f:b3:df:c6:70:8d:
d9:2f:58:e4:e8:ce:80:fe:11:8a:dd:1a:50:dd:3c:50:60:6f:
4f:d6:28:0f:33:b5:a6:37:33:e5:78:d6:d5:b0:33:19:79:f3:
e9:91:3c:4a:ca:f2:87:fd:c3:2e:c9:3b:58:2d:88:81:55:86:
00:19:06:01:48:8d:16:20:8b:4b:e9:e0:a3:f0:a4:4c:00:92:
e9:c7:47:16:5f:b7:17:f0:bd:c0:22:e8:d0:46:50:20:5c:21:
a1:ca:6b:86:11:18:85:9f:c5:60:b2:1c:c5:8b:d7:75:e1:a2:
35:d0:4a:ed:dc:9e:60:f6:f1:78:64:da:f6:c5:10:2d:50:83:
f0:86:06:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:53 2025 by rpki-client