Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/w3l7tOkieTbpOX4_4cjs7MuyF6k.roa
File: w3l7tOkieTbpOX4_4cjs7MuyF6k.roa (raw, json)
Hash identifier: bG2aZwwNdLnAHsV3fv4Jy2PIU0YSKda92/+0Oe/KGso=
Subject key identifier: C3:79:7B:B4:E9:22:79:36:E9:39:7E:3F:E1:C8:EC:EC:CB:B2:17:A9
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01849EB5AD3CB17046A3521C016D8C94432C
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/w3l7tOkieTbpOX4_4cjs7MuyF6k.roa
Signing time: Tue 22 Nov 2022 09:40:17 +0000
ROA not before: Tue 22 Nov 2022 09:40:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 45.154.107.0/24 maxlen: 24
192.166.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:b5:ad:3c:b1:70:46:a3:52:1c:01:6d:8c:94:43:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 22 09:40:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3797bb4e9227936e9397e3fe1c8ececcbb217a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:31:b5:a2:02:15:2e:c1:78:ab:a6:3b:63:
b4:73:3f:7f:c0:e7:50:87:e7:8b:6a:1b:6a:9b:3d:
ae:01:14:79:18:66:c5:96:b5:fa:70:e2:4a:46:56:
8f:f8:40:3b:86:4e:18:63:0b:0e:2b:0b:00:16:fb:
11:80:29:9e:a9:88:d8:e4:28:fa:ee:a0:21:b1:12:
b1:fc:84:7e:06:ab:53:bb:ab:f4:d5:26:e2:9a:42:
6f:18:90:f5:d7:69:aa:cb:2c:8e:a2:bd:7d:f3:f7:
dd:c6:b5:77:d8:47:1d:fd:f3:0e:4f:a0:44:3f:ca:
3e:18:ce:0d:b6:54:a1:02:67:c1:ac:55:68:b8:e2:
df:ec:ea:5c:42:38:95:6f:94:13:cd:a6:1e:aa:45:
47:9c:62:34:f1:14:c7:f7:5f:25:38:4d:83:20:b7:
52:5a:21:55:bc:fd:5c:f1:25:2b:b0:80:28:c1:5e:
b8:1a:9b:cf:f9:83:da:1b:0f:60:f9:6d:2e:84:e2:
76:b6:9f:12:1d:70:eb:5d:6a:fc:19:f5:0a:69:ea:
94:09:e4:11:2f:6d:1f:ce:24:82:38:2a:80:f7:5f:
39:45:e5:47:ac:41:c7:8e:16:49:af:02:0e:ac:f1:
bb:35:32:7c:8a:c9:64:aa:99:91:7d:87:85:23:c0:
cc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:79:7B:B4:E9:22:79:36:E9:39:7E:3F:E1:C8:EC:EC:CB:B2:17:A9
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/w3l7tOkieTbpOX4_4cjs7MuyF6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.107.0/24
192.166.114.0/24
Signature Algorithm: sha256WithRSAEncryption
02:5b:ef:06:86:b4:12:c1:ca:95:14:ec:5e:ff:73:f9:de:0c:
96:c5:26:3b:bd:e9:05:45:8e:85:f3:4b:22:7f:48:e4:58:c4:
72:16:3e:69:e0:c9:b7:d5:cb:8e:88:98:1c:9f:99:aa:c7:13:
fc:d7:f2:dc:6d:be:8b:8c:b5:1f:ea:24:97:2b:71:d3:b9:8a:
11:dc:7a:35:9e:a5:7d:e5:b7:c0:73:1f:ae:66:da:82:bf:53:
8a:44:23:76:9a:17:47:cb:a3:bf:2d:cc:9f:34:89:bd:56:d0:
55:a7:60:8e:08:41:f8:39:f5:ca:43:a8:89:a0:e9:24:44:80:
4a:67:54:bd:3d:55:57:f9:2d:af:06:e4:08:a0:8f:d4:e6:0d:
91:b3:5a:2d:f3:75:be:28:e7:a6:a6:9e:7b:3e:f4:e3:72:8f:
d6:86:db:ad:c5:16:3b:6b:1e:f0:af:52:09:42:35:da:da:50:
5f:3b:21:8a:71:d7:32:17:27:10:07:38:11:d9:ba:0f:45:68:
b7:4d:f2:24:16:84:5b:41:27:09:15:45:1b:2b:9a:25:b3:e7:
c4:3b:7d:47:56:ef:47:10:d7:17:92:fe:19:9c:8c:5a:99:da:
d5:51:7d:2c:83:79:84:70:6d:91:8e:d7:94:63:cd:5e:c0:19:
14:6d:6f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:44 2025 by rpki-client