Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/_Wa26R0p92UR_HbGayvhunDyfUg.roa
File: _Wa26R0p92UR_HbGayvhunDyfUg.roa (raw, json)
Hash identifier: 8CS4Jrgooyp8RR8z9lPnTrNF0GUSTPt461US+SduoxU=
Subject key identifier: FD:66:B6:E9:1D:29:F7:65:11:FC:76:C6:6B:2B:E1:BA:70:F2:7D:48
Certificate issuer: /CN=12608e7181a303df044911ab4f2d51c2887ef278
Certificate serial: 0187285013FF12A2C036937D742A4CF426A9
Authority key identifier: 12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/_Wa26R0p92UR_HbGayvhunDyfUg.roa
Signing time: Tue 28 Mar 2023 13:02:29 +0000
ROA not before: Tue 28 Mar 2023 13:02:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 45.149.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:50:13:ff:12:a2:c0:36:93:7d:74:2a:4c:f4:26:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608e7181a303df044911ab4f2d51c2887ef278
Validity
Not Before: Mar 28 13:02:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd66b6e91d29f76511fc76c66b2be1ba70f27d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e9:50:62:dc:1f:fd:26:e3:64:70:ec:2d:60:
c6:ab:bc:72:66:0f:e6:8b:42:ec:2b:05:fa:62:13:
a2:b1:a7:c7:75:74:ca:36:c4:e7:3e:4c:fa:1a:71:
1c:2f:77:2f:a1:ce:49:82:7f:83:2b:f7:48:41:e3:
df:5b:32:9b:32:12:98:1f:d2:97:13:47:07:e6:8c:
64:df:77:c4:ee:1c:f3:60:ab:71:81:1a:cc:15:19:
07:93:4d:7a:bc:d5:da:13:8d:6f:c3:2a:00:2b:99:
6d:47:79:ee:4d:7e:2a:a3:73:0e:6d:f6:0a:e4:26:
7c:59:b0:ff:51:0b:3d:dc:9d:1e:ba:60:e1:63:23:
37:02:4d:4a:f6:92:83:e1:8a:1a:0a:70:94:e1:44:
c7:2b:51:80:ec:61:ff:02:2e:4c:c2:4f:c8:f0:9f:
e2:94:e2:5f:d3:d4:c7:c5:17:01:7d:2e:8a:99:31:
cc:1f:6a:c2:59:ab:ea:2f:07:fe:f7:c8:f3:2f:db:
32:f6:90:17:11:00:48:43:51:2e:53:ac:77:b8:d0:
6c:e7:24:e4:14:0f:8b:5b:a8:87:b3:63:06:2c:fa:
9d:c8:e7:da:4b:7b:56:85:ff:3e:bf:ae:1c:eb:9c:
d2:f6:7d:db:21:5f:18:ff:dc:6d:d8:a0:db:ab:01:
eb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:66:B6:E9:1D:29:F7:65:11:FC:76:C6:6B:2B:E1:BA:70:F2:7D:48
X509v3 Authority Key Identifier:
keyid:12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/_Wa26R0p92UR_HbGayvhunDyfUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:c5:ab:e8:3d:8f:bd:b9:c3:a3:d8:fd:25:31:c6:71:27:53:
33:2e:52:41:67:93:30:81:c8:18:ce:31:45:e8:29:c3:5f:36:
bf:20:e8:00:46:e7:0d:d6:b3:b9:86:b3:6a:95:77:32:65:60:
ad:8d:7c:c0:11:40:8f:cd:2e:2f:75:84:94:12:81:f0:fc:de:
01:52:9e:92:b7:7c:18:ce:93:6a:0a:8e:87:45:28:76:ac:3b:
e4:20:cc:e4:58:c5:27:75:38:39:a7:33:9a:53:1b:9a:83:71:
22:2f:ce:57:0a:b0:ee:f5:2d:19:7b:40:1f:30:30:90:3d:c8:
20:e3:56:21:d6:3f:02:a8:45:68:dd:be:3e:2b:e6:60:85:6d:
6b:fc:16:b4:eb:27:eb:8a:7f:48:db:61:82:ef:06:cc:a2:69:
e7:a7:55:51:cc:e9:f9:3e:4a:99:dc:4d:5b:d0:9c:3d:8b:aa:
fd:2b:9e:80:05:bc:3c:ad:3e:d8:c2:a9:76:45:c3:6c:b6:9b:
11:19:7e:00:87:55:b7:05:35:f7:03:20:ec:c8:c8:9a:cc:e9:
13:99:6c:15:97:65:6b:f6:f9:20:37:88:80:86:5d:c2:f8:2a:
ed:06:70:89:cb:32:ca:c8:c5:cd:54:80:ad:ac:ba:9f:1d:f1:
1b:f1:03:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcoUBP/EqLANpN9dCpM9CapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjA4ZTcxODFhMzAzZGYwNDQ5MTFhYjRmMmQ1MWMyODg3
ZWYyNzgwHhcNMjMwMzI4MTMwMjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDY2YjZlOTFkMjlmNzY1MTFmYzc2YzY2YjJiZTFiYTcwZjI3ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOlQYtwf/SbjZHDsLWDGq7xyZg/m
i0LsKwX6YhOisafHdXTKNsTnPkz6GnEcL3cvoc5Jgn+DK/dIQePfWzKbMhKYH9KX
E0cH5oxk33fE7hzzYKtxgRrMFRkHk016vNXaE41vwyoAK5ltR3nuTX4qo3MObfYK
5CZ8WbD/UQs93J0eumDhYyM3Ak1K9pKD4YoaCnCU4UTHK1GA7GH/Ai5Mwk/I8J/i
lOJf09THxRcBfS6KmTHMH2rCWavqLwf+98jzL9sy9pAXEQBIQ1EuU6x3uNBs5yTk
FA+LW6iHs2MGLPqdyOfaS3tWhf8+v64c65zS9n3bIV8Y/9xt2KDbqwHr7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP1mtukdKfdlEfx2xmsr4bpw8n1IMB8GA1UdIwQY
MBaAFBJgjnGBowPfBEkRq08tUcKIfvJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1DT2NZR2pBOThFU1JHclR5MVJ3b2gtOG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80YTIyYmItMjg2Mi00MjFjLWIwNzEt
ZGE5OTI1MWIxMzI4LzEvX1dhMjZSMHA5MlVSX0hiR2F5dmh1bkR5ZlVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS80YTIyYmItMjg2Mi00MjFjLWIwNzEtZGE5OTI1MWIxMzI4
LzEvRW1DT2NZR2pBOThFU1JHclR5MVJ3b2gtOG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZUQMA0G
CSqGSIb3DQEBCwUAA4IBAQAqxavoPY+9ucOj2P0lMcZxJ1MzLlJBZ5MwgcgYzjFF
6CnDXza/IOgARucN1rO5hrNqlXcyZWCtjXzAEUCPzS4vdYSUEoHw/N4BUp6St3wY
zpNqCo6HRSh2rDvkIMzkWMUndTg5pzOaUxuag3EiL85XCrDu9S0Ze0AfMDCQPcgg
41Yh1j8CqEVo3b4+K+ZghW1r/Ba06yfrin9I22GC7wbMomnnp1VRzOn5PkqZ3E1b
0Jw9i6r9K56ABbw8rT7Ywql2RcNstpsRGX4Ah1W3BTX3AyDsyMiazOkTmWwVl2Vr
9vkgN4iAhl3C+CrtBnCJyzLKyMXNVICtrLqfHfEb8QMe
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:33:29 2025 by rpki-client