Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/WDBKZyOd-luCh-I9iOt3g7sqfoE.roa
File: WDBKZyOd-luCh-I9iOt3g7sqfoE.roa (raw, json)
Hash identifier: EAGep4zAPHjUVHaK5gPal5XWLch/j2qXULtesEJZZEI=
Subject key identifier: 58:30:4A:67:23:9D:FA:5B:82:87:E2:3D:88:EB:77:83:BB:2A:7E:81
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 018FE2F43AAA4A4EE04AD8A5F51CD1D8008D
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/WDBKZyOd-luCh-I9iOt3g7sqfoE.roa
Signing time: Tue 04 Jun 2024 11:13:27 +0000
ROA not before: Tue 04 Jun 2024 11:13:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.133.141.0/24 maxlen: 24
45.133.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:f4:3a:aa:4a:4e:e0:4a:d8:a5:f5:1c:d1:d8:00:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jun 4 11:13:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58304a67239dfa5b8287e23d88eb7783bb2a7e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:ef:e1:b1:4e:33:bc:12:a5:6b:7f:0c:43:
d5:7f:3a:3b:e5:97:df:f4:ce:e1:16:a8:92:33:5f:
f7:ca:ba:04:5b:77:f8:d0:35:a0:d4:b8:c0:6a:5e:
85:28:ce:37:e6:7c:dd:78:a6:7b:48:6e:97:10:53:
5a:75:0f:12:b1:20:40:92:bb:ec:09:39:b7:6f:88:
5d:86:1f:81:8d:9c:29:cf:93:76:f4:55:c6:e5:de:
8a:79:af:17:e1:a1:fd:aa:72:ed:88:a2:06:81:ec:
30:97:f6:88:91:22:6b:b5:6d:99:88:f7:2c:04:32:
e3:d5:2d:55:6a:9e:1c:b4:ea:76:b0:e9:1f:6a:05:
4a:ee:5d:5a:75:8d:1a:ab:6c:87:36:51:09:73:c5:
ef:37:59:92:a6:35:49:05:d3:c1:3e:71:4b:c2:40:
c1:7a:92:de:01:4f:db:2d:11:38:cb:e1:81:93:b6:
47:e8:b2:0b:e4:14:3e:d7:0a:07:37:82:4c:5f:4a:
67:6c:ef:02:9c:cc:ab:5f:f8:0d:f0:30:5c:59:3f:
56:a5:b6:9e:e3:70:f0:91:02:0d:da:e0:24:7e:b0:
f7:8c:43:ba:83:60:67:64:61:ac:e7:df:76:61:c4:
56:c4:bb:c7:7d:f9:f6:04:d5:55:e4:80:f1:f8:5d:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:30:4A:67:23:9D:FA:5B:82:87:E2:3D:88:EB:77:83:BB:2A:7E:81
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/WDBKZyOd-luCh-I9iOt3g7sqfoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.141.0/24
45.133.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f5:5f:ea:c6:0c:f0:62:26:84:87:92:45:93:d0:7b:84:ce:
e3:5b:08:cc:9f:63:a1:aa:24:a5:0b:e8:7b:cc:c7:ac:48:96:
c5:53:b1:51:fd:ad:95:bc:4d:5a:24:d0:27:3c:2f:db:4c:32:
01:4a:25:68:bb:93:1e:bc:eb:dd:f6:03:4d:38:38:d9:6b:6a:
4f:14:fd:9a:66:79:73:24:4e:0b:31:52:0b:d1:45:ac:2e:d4:
4f:77:16:8a:ed:92:46:dd:06:03:fb:71:5d:16:7b:0e:14:60:
c5:49:79:9e:d6:81:df:b3:61:e4:a6:39:d1:e4:f1:af:15:45:
39:67:9b:3a:2e:98:52:ba:19:77:18:2b:c2:a1:aa:73:0d:20:
9d:f5:8a:9d:04:45:30:05:d6:a7:43:29:14:3f:2a:46:9f:82:
36:5b:5b:5c:56:ee:c6:31:12:ea:89:5c:29:c8:2c:2b:37:35:
0e:e3:57:5e:41:db:77:14:7d:8a:72:bd:1f:7a:57:f7:4b:7d:
09:73:b4:5e:bf:67:29:4d:ff:21:12:26:b8:72:d6:74:00:55:
60:b6:1f:13:f7:a3:db:5e:7c:d9:00:2a:1c:7f:3f:99:02:4c:
3e:01:79:65:b7:6b:c6:bc:b2:7b:ad:16:47:93:3a:e0:2a:ba:
a4:bb:bf:54
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/i9DqqSk7gStil9RzR2ACNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk
NGYzMTgwHhcNMjQwNjA0MTExMzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODMwNGE2NzIzOWRmYTViODI4N2UyM2Q4OGViNzc4M2JiMmE3ZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyynv4bFOM7wSpWt/DEPVfzo75Zff
9M7hFqiSM1/3yroEW3f40DWg1LjAal6FKM435nzdeKZ7SG6XEFNadQ8SsSBAkrvs
CTm3b4hdhh+BjZwpz5N29FXG5d6Kea8X4aH9qnLtiKIGgewwl/aIkSJrtW2ZiPcs
BDLj1S1Vap4ctOp2sOkfagVK7l1adY0aq2yHNlEJc8XvN1mSpjVJBdPBPnFLwkDB
epLeAU/bLRE4y+GBk7ZH6LIL5BQ+1woHN4JMX0pnbO8CnMyrX/gN8DBcWT9Wpbae
43DwkQIN2uAkfrD3jEO6g2BnZGGs5992YcRWxLvHffn2BNVV5IDx+F0eZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFgwSmcjnfpbgofiPYjrd4O7Kn6BMB8GA1UdIwQY
MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt
NjMzNDhjZGJmMDI0LzEvV0RCS1p5T2QtbHVDaC1JOWlPdDNnN3NxZm9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0
LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYWNAwQA
LYWPMA0GCSqGSIb3DQEBCwUAA4IBAQAa9V/qxgzwYiaEh5JFk9B7hM7jWwjMn2Oh
qiSlC+h7zMesSJbFU7FR/a2VvE1aJNAnPC/bTDIBSiVou5MevOvd9gNNODjZa2pP
FP2aZnlzJE4LMVIL0UWsLtRPdxaK7ZJG3QYD+3FdFnsOFGDFSXme1oHfs2HkpjnR
5PGvFUU5Z5s6LphSuhl3GCvCoapzDSCd9YqdBEUwBdanQykUPypGn4I2W1tcVu7G
MRLqiVwpyCwrNzUO41deQdt3FH2Kcr0felf3S30Jc7Rev2cpTf8hEia4ctZ0AFVg
th8T96PbXnzZACocfz+ZAkw+AXllt2vGvLJ7rRZHkzrgKrqku79U
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:01 2025 by rpki-client