Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/wCZd-dkDIeehMAu_5hoIv2JD1YA.roa
File: wCZd-dkDIeehMAu_5hoIv2JD1YA.roa (raw, json)
Hash identifier: aDuVVI4vXCaf5nytTYWEs+EjYpmJPFYWjK5kxGXx9sU=
Subject key identifier: C0:26:5D:F9:D9:03:21:E7:A1:30:0B:BF:E6:1A:08:BF:62:43:D5:80
Certificate issuer: /CN=12608e7181a303df044911ab4f2d51c2887ef278
Certificate serial: 018DC003F764A1F8D9A0EBC0EE5AD69F7951
Authority key identifier: 12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/wCZd-dkDIeehMAu_5hoIv2JD1YA.roa
Signing time: Mon 19 Feb 2024 06:18:21 +0000
ROA not before: Mon 19 Feb 2024 06:18:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151630
IP address blocks: 45.149.16.0/24 maxlen: 24
45.149.17.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
45.149.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:03:f7:64:a1:f8:d9:a0:eb:c0:ee:5a:d6:9f:79:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608e7181a303df044911ab4f2d51c2887ef278
Validity
Not Before: Feb 19 06:18:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0265df9d90321e7a1300bbfe61a08bf6243d580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:0b:9f:96:af:a8:53:89:9e:cf:9c:39:4b:
1a:a4:00:9c:3f:56:15:66:7a:3c:4d:eb:07:ce:18:
11:34:22:86:5d:64:e9:ad:e9:29:e4:55:5a:92:8a:
1e:ec:24:95:f0:6c:09:68:10:52:50:16:d9:68:ab:
3c:20:14:46:a4:4d:13:9e:35:d6:70:e3:64:3c:02:
9d:1c:26:cc:c2:df:f7:4b:71:1a:82:10:64:87:2f:
d0:ce:a4:09:c5:59:0d:ae:aa:47:3a:ad:c2:9b:bb:
96:cf:0c:01:89:54:25:a5:7b:56:47:59:b6:9c:68:
da:57:6e:68:49:47:fd:21:20:fe:3c:fb:2e:16:ac:
89:62:b0:ef:22:47:e1:2d:ca:59:45:8a:b1:91:0d:
36:46:68:1b:74:82:86:75:a5:76:b3:a5:b1:52:0d:
1e:ef:04:2d:59:04:08:38:dd:1d:43:a3:25:c5:39:
2f:d5:4e:98:28:18:94:f8:48:37:de:16:75:39:ab:
60:98:3c:f0:7e:09:0f:db:73:43:df:6a:35:b9:f9:
51:46:8d:cc:04:a3:ce:26:a3:24:98:c5:b1:9d:49:
11:54:17:d5:81:fa:7e:cd:09:f6:b4:7a:95:2c:59:
b5:98:0d:5d:62:5d:82:74:cf:95:b9:0a:a1:96:5e:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:26:5D:F9:D9:03:21:E7:A1:30:0B:BF:E6:1A:08:BF:62:43:D5:80
X509v3 Authority Key Identifier:
keyid:12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/wCZd-dkDIeehMAu_5hoIv2JD1YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
81:0d:b2:09:d3:ae:05:d7:a1:ee:59:56:7a:a2:ee:d7:eb:05:
24:3f:6b:34:ec:1e:c0:7c:99:ec:59:f0:61:c1:62:18:2f:d3:
79:3e:04:b6:18:f9:84:e8:4a:af:9c:27:8b:14:7f:a3:31:5d:
11:7e:63:e6:f4:0a:1f:a0:34:52:06:ee:dd:a7:6a:07:69:c2:
94:cd:09:d7:d8:16:ab:a2:c1:af:f4:4d:64:b5:47:00:d2:5f:
b8:1d:fe:ba:9a:9a:26:a4:b6:cf:98:91:4f:54:7c:12:84:a9:
2c:41:d1:87:33:38:3d:38:77:d1:f1:b2:04:4f:3c:05:cc:f8:
4d:33:b7:24:e4:d3:c2:39:68:29:08:f5:f2:9c:b4:8a:fc:a8:
ad:8a:0e:95:ee:f2:0c:a2:26:7b:47:1d:cd:3c:00:fe:45:ab:
27:e1:1f:c6:31:a8:a1:29:05:6d:bb:39:b8:03:34:bb:39:cd:
b0:84:03:5a:b7:4f:af:df:ff:43:04:58:d9:a9:7c:1a:87:45:
0e:d2:34:41:4f:e3:f5:ba:68:eb:25:8e:a0:f2:28:87:7a:e3:
5e:c9:4e:a8:f3:8d:3b:a4:3f:19:96:4c:c1:78:70:96:8a:f0:
ce:e1:78:23:83:8a:07:02:e7:42:e8:6b:54:ea:d6:bd:02:30:
ee:b9:e7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:00 2024 by rpki-client on console-fra.rpki-client.org