Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/RWAst6rhQtck0cf4rpJmbaVPDy4.roa
File: RWAst6rhQtck0cf4rpJmbaVPDy4.roa (raw, json)
Hash identifier: ptBc35DUx8RheDUbwgxYVnrU5/IkEp9u9Ianwe8RHT0=
Subject key identifier: 45:60:2C:B7:AA:E1:42:D7:24:D1:C7:F8:AE:92:66:6D:A5:4F:0F:2E
Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial: 01941F8C026918E6B1CCD6CDB923A7F9B262
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/RWAst6rhQtck0cf4rpJmbaVPDy4.roa
Signing time: Wed 01 Jan 2025 01:47:36 +0000
ROA not before: Wed 01 Jan 2025 01:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 45.8.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:02:69:18:e6:b1:cc:d6:cd:b9:23:a7:f9:b2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45602cb7aae142d724d1c7f8ae92666da54f0f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:ef:b1:c5:f1:43:27:67:83:fd:d8:4e:bd:
df:14:0d:bf:b4:d5:07:c7:27:70:94:12:3f:30:1d:
ee:29:16:6f:d9:f2:fb:53:17:7c:4a:f9:55:60:8f:
55:43:b5:b5:b3:ef:16:34:0a:c8:f2:32:0d:7a:6d:
22:64:4f:5a:a8:bd:76:cc:f0:54:f6:ca:86:a6:4f:
aa:ac:a5:87:39:42:7a:f0:45:b3:3d:fc:b2:25:26:
b8:5c:f3:17:2a:8d:6f:fc:0d:3c:a5:8a:25:00:70:
7c:0a:4b:d3:af:63:7d:3d:a0:6f:1a:fd:db:0b:65:
81:01:6b:a4:5e:96:9a:c7:ef:28:d8:11:0d:dd:49:
d0:23:d7:38:e9:63:56:d4:4a:e1:19:56:30:cf:61:
74:2b:86:2b:d6:55:8a:b4:31:dd:02:ea:d7:84:ea:
63:4b:e8:4e:57:5b:3d:bd:3c:0d:36:3e:dd:66:29:
f2:e1:ce:96:f8:50:a7:51:1c:2b:23:c6:6f:2f:e3:
3a:6e:f5:f5:6c:dd:33:01:f3:39:db:c0:09:c7:79:
fe:5e:39:c1:11:4b:cf:9b:55:d8:41:40:a1:f1:9e:
2e:c6:cc:9d:d6:54:ac:c5:5e:bf:6b:ce:fa:28:37:
88:2f:d6:54:bb:2b:f3:9b:39:0e:5b:b3:22:9d:b4:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:60:2C:B7:AA:E1:42:D7:24:D1:C7:F8:AE:92:66:6D:A5:4F:0F:2E
X509v3 Authority Key Identifier:
keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/RWAst6rhQtck0cf4rpJmbaVPDy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.43.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:37:93:22:0e:36:6f:ec:34:c8:e9:d8:91:d9:45:87:bc:ca:
65:7a:17:86:85:b3:b4:4e:7f:02:a4:b7:29:dc:d1:8b:04:28:
c8:d4:2d:18:0b:43:67:ad:b4:3c:30:dd:9a:59:e7:5b:ca:9d:
27:db:fc:f0:39:85:a5:87:1c:31:2d:fe:db:cc:b8:ff:42:14:
1f:b9:71:34:a1:b5:28:9e:fe:d0:79:d0:9d:95:c0:66:a6:52:
07:84:13:65:f5:71:d0:78:3f:57:31:6c:8b:09:ce:44:6a:32:
27:22:34:79:09:e6:7c:c4:69:66:e8:bb:81:22:87:41:4b:b7:
b0:b7:4f:0d:6b:a9:af:d0:bd:03:97:63:5a:fe:6f:d3:a9:ec:
27:96:43:dd:19:b1:e4:23:4f:1e:ee:1f:16:b2:3c:30:87:c1:
a1:de:95:e6:6d:43:fa:77:34:44:56:43:15:ac:b7:82:bb:8d:
81:38:e3:64:24:c8:a4:e4:40:d9:aa:31:c7:5c:d6:ef:0b:49:
76:78:30:fa:c4:d0:01:e7:60:cb:f1:1d:16:2c:c7:96:23:2b:
c9:24:73:cf:04:a6:51:64:e7:64:f3:78:76:59:2f:87:e1:35:
29:f0:ef:7d:52:a6:f6:0d:d3:32:b3:23:9a:55:26:21:50:86:
10:41:3a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:01:51 2025 by rpki-client