Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/WtaRMpH5w4w9goPEwVetApXtzoU.roa
File: WtaRMpH5w4w9goPEwVetApXtzoU.roa (raw, json)
Hash identifier: BlPADUTypLGU2UiGCxiBGjI3cicdPtHOxBRK08An/p8=
Subject key identifier: 5A:D6:91:32:91:F9:C3:8C:3D:82:83:C4:C1:57:AD:02:95:ED:CE:85
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 043731FC
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/WtaRMpH5w4w9goPEwVetApXtzoU.roa
Signing time: Tue 08 Feb 2022 12:53:26 +0000
ROA not before: Tue 08 Feb 2022 12:53:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 45.65.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70726140 (0x43731fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Feb 8 12:53:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ad6913291f9c38c3d8283c4c157ad0295edce85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:ee:e7:7c:ac:d4:51:81:21:fb:56:b9:b2:
ed:03:e8:cd:fb:f0:b5:b9:56:34:d3:6d:51:32:cf:
f3:3c:77:83:d3:07:48:10:64:5a:da:bd:ee:64:42:
6e:ab:73:80:9a:8f:54:0c:37:4b:05:f4:f0:09:9d:
e1:62:cd:33:76:cf:ff:9c:6f:0b:0b:b3:15:d3:1e:
12:2f:94:fe:b1:3c:e9:e2:78:98:de:18:0c:3a:8b:
c8:52:2c:1e:77:f6:a7:41:39:64:fd:d0:4a:43:06:
0c:02:b7:79:3f:84:c0:a0:70:48:8e:3d:ee:5a:28:
92:8b:61:40:55:8e:9e:43:48:ac:ba:3d:ca:82:50:
92:34:50:d5:96:97:4f:d6:c4:e6:47:e4:45:b6:56:
09:a6:e8:b5:23:90:f1:0a:d3:a2:73:7e:0e:c9:69:
fa:69:4a:48:c5:1e:38:77:bb:61:26:2f:4d:37:19:
87:15:a6:83:db:aa:5a:e4:f4:30:f3:97:70:9d:88:
cc:e6:cf:e0:4b:c5:24:7f:6a:53:a7:1c:be:c7:30:
f6:e0:66:d8:34:6d:7f:eb:8f:80:b4:9b:26:02:4a:
48:6c:b3:c2:13:19:bf:e6:44:ec:9a:08:ef:46:23:
29:5e:c4:c2:2a:da:26:ae:41:ab:a4:84:8e:37:bb:
60:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D6:91:32:91:F9:C3:8C:3D:82:83:C4:C1:57:AD:02:95:ED:CE:85
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/WtaRMpH5w4w9goPEwVetApXtzoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/22
Signature Algorithm: sha256WithRSAEncryption
22:9f:15:92:6e:a3:ec:2d:b7:fc:a0:b2:6b:f9:7b:87:a5:84:
5a:58:5f:9e:e1:b7:5d:18:ba:cf:99:32:89:cd:10:a8:4c:6a:
d3:35:f6:34:2d:54:0b:0d:14:5c:9f:50:41:64:ab:33:46:4f:
09:7c:f2:44:96:f4:11:89:28:f4:d3:0f:1d:7a:ba:a0:b4:10:
4c:d4:4a:0c:6e:39:0c:d7:4a:61:4c:a3:74:fe:ea:8c:b4:76:
52:c1:e8:f4:5a:e2:57:23:06:d0:d8:37:c1:b0:1a:d7:69:97:
9d:87:00:a8:81:35:d9:0f:bf:f3:ab:b7:83:3e:a5:41:ae:e3:
d4:43:b0:35:3c:6c:15:4e:34:c4:51:29:d1:2a:f5:c4:4d:be:
57:1b:80:2a:e8:17:f5:91:83:0f:cd:b8:db:68:9e:64:7d:d6:
16:96:1e:1c:91:61:b0:bd:cc:5b:f9:31:ff:01:0e:38:84:47:
c7:bd:ae:37:f9:a5:35:e0:76:05:c7:63:a3:33:e0:37:73:af:
96:d7:7c:d9:10:4d:55:67:c3:5b:43:68:30:e6:ee:38:1e:cd:
f6:8d:f0:0e:5d:e4:fd:54:6d:0b:17:a8:23:35:79:77:08:98:
72:b1:9c:fe:96:57:e7:2f:12:57:d3:12:b1:bd:36:05:ca:49:
47:a6:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:40 2025 by rpki-client