Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/wtFlnQHQYrsql6GT-nf3JPXSndU.roa
File: wtFlnQHQYrsql6GT-nf3JPXSndU.roa (raw, json)
Hash identifier: rIdtCNWGR0CJN6Nw97remOnp03r0FEpSgzK266TFpRs=
Subject key identifier: C2:D1:65:9D:01:D0:62:BB:2A:97:A1:93:FA:77:F7:24:F5:D2:9D:D5
Certificate issuer: /CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Certificate serial: 01856FF024B04D0D7811856EF6684DC2F8C6
Authority key identifier: 61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/wtFlnQHQYrsql6GT-nf3JPXSndU.roa
Signing time: Mon 02 Jan 2023 00:44:47 +0000
ROA not before: Mon 02 Jan 2023 00:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 45.144.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:24:b0:4d:0d:78:11:85:6e:f6:68:4d:c2:f8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6182fa3258c2d2cea1584c56f02625c03ff2b0d5
Validity
Not Before: Jan 2 00:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2d1659d01d062bb2a97a193fa77f724f5d29dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:ac:34:48:f7:5f:79:8f:cc:84:6f:d5:03:
9b:8f:10:a2:f1:47:b0:18:a2:0a:ea:8e:77:31:e1:
bf:8a:c1:b1:d6:2e:50:92:b9:73:d3:40:af:ab:01:
0e:06:f5:f1:c6:b9:72:f8:d2:ba:3e:9a:31:d2:79:
de:40:aa:df:3c:76:f8:18:79:f3:1d:03:8e:fa:8a:
aa:e5:a1:36:9b:bb:21:32:89:17:ee:67:97:36:4d:
95:67:51:25:89:85:0e:f5:fa:b9:e1:f4:e7:62:41:
ce:1d:51:44:1d:9d:10:52:16:79:9b:58:bb:09:ac:
27:67:60:3f:79:3e:45:33:e2:45:f2:39:d8:85:a8:
1b:93:a4:ac:ac:2c:38:67:22:15:7c:62:90:cb:ec:
cc:de:97:f6:ad:c0:c2:f3:63:c4:0d:89:12:a0:6d:
f1:59:c2:dc:b9:ff:af:55:ab:80:03:9f:9a:23:79:
3f:43:ee:97:b8:13:29:73:1b:2e:be:4c:35:a8:2e:
a8:a0:72:7c:96:da:0b:f3:8a:48:7d:d5:b3:89:46:
e2:d3:88:12:55:32:48:cd:a9:37:0b:f9:1e:49:d4:
5f:b9:27:75:23:8f:0c:7a:1b:20:db:7b:7d:63:70:
3d:49:eb:77:bd:73:25:a9:5e:4c:2a:fc:7c:8d:46:
22:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D1:65:9D:01:D0:62:BB:2A:97:A1:93:FA:77:F7:24:F5:D2:9D:D5
X509v3 Authority Key Identifier:
keyid:61:82:FA:32:58:C2:D2:CE:A1:58:4C:56:F0:26:25:C0:3F:F2:B0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYL6MljC0s6hWExW8CYlwD_ysNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/wtFlnQHQYrsql6GT-nf3JPXSndU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3c7504-de12-496e-b019-21877404f462/1/YYL6MljC0s6hWExW8CYlwD_ysNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.196.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ad:a9:f3:37:11:92:fc:45:f2:e5:dd:6e:9c:8e:43:7c:6e:
f9:40:6d:32:18:77:70:1a:63:98:07:74:44:ea:7f:5d:f7:55:
57:3a:8d:ad:5e:e6:df:ae:52:6f:04:52:7d:89:0d:3e:a4:be:
f6:fb:1c:1f:25:82:26:01:3f:9b:2f:56:a6:95:41:f4:bf:bb:
14:7f:e7:1c:88:42:c7:7f:46:17:5b:c4:5b:a7:be:06:41:ab:
43:3c:6d:3a:e5:33:85:dd:dd:64:28:e5:d0:e6:b4:04:9d:ee:
78:fa:80:dc:92:6c:2f:14:5a:14:6d:de:0e:1e:a6:4f:6e:90:
3a:10:b8:53:61:97:71:75:68:69:bd:53:d9:06:87:b5:4d:62:
45:6d:77:3b:9f:a9:a9:d1:31:8a:45:dd:59:6b:ef:6d:70:a9:
b4:6e:70:f0:c5:fb:ac:d4:f6:35:a3:e6:df:ab:02:8d:08:a9:
15:65:14:fa:d7:a3:9e:73:b4:39:65:f0:ac:46:f2:92:08:ae:
0a:61:c6:d8:7e:a5:8c:b2:d5:b2:b4:81:0f:bf:11:89:ee:4e:
ac:c0:68:8e:7a:ca:c0:f6:14:54:f2:3f:40:b1:fb:7c:b1:ad:
33:22:45:de:ad:c4:55:d2:28:d2:be:0a:ab:bf:15:81:f7:fb:
9c:d1:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:50 2025 by rpki-client