Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/WZBLvv9OFIzqKVar5Stt9tIoe6c.roa
File: WZBLvv9OFIzqKVar5Stt9tIoe6c.roa (raw, json)
Hash identifier: eDDz9g857ZbC4qMPJ/+ARLyYUZhWBgiSlQKhk+w4u2c=
Subject key identifier: 59:90:4B:BE:FF:4E:14:8C:EA:29:56:AB:E5:2B:6D:F6:D2:28:7B:A7
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01942521B72E18D7C721D5C0B401A3D49337
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/WZBLvv9OFIzqKVar5Stt9tIoe6c.roa
Signing time: Thu 02 Jan 2025 03:49:14 +0000
ROA not before: Thu 02 Jan 2025 03:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8796
IP address blocks: 45.10.68.0/24 maxlen: 24
91.216.169.0/24 maxlen: 24
91.216.190.0/24 maxlen: 24
91.217.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b7:2e:18:d7:c7:21:d5:c0:b4:01:a3:d4:93:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 2 03:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59904bbeff4e148cea2956abe52b6df6d2287ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:9c:16:10:34:88:98:5f:72:83:17:68:d7:
9f:0f:52:87:08:13:a7:eb:49:d5:25:c9:ed:70:fc:
9e:c9:70:39:01:20:5b:94:3d:8f:51:7e:58:d8:69:
9e:d4:c1:99:b5:76:d0:6c:e8:e7:d9:2c:45:c3:07:
37:c0:c1:d6:fe:36:df:b6:3c:e5:ff:e1:66:96:74:
e0:d7:13:8b:5d:f0:67:2d:11:dc:22:d6:e3:1a:d4:
12:40:b6:9c:66:54:d3:bc:02:c4:33:f2:08:45:c0:
f3:c9:e2:26:05:51:9b:e2:99:fa:a8:f3:54:7b:71:
0b:10:0c:8a:35:7d:4c:21:cd:a0:76:6f:37:2f:a5:
aa:f5:cd:92:7e:ef:00:f3:10:08:82:55:ec:99:72:
b8:a5:54:80:7b:5d:55:85:82:33:66:ac:fc:15:1d:
e2:ac:86:d2:a2:1f:1e:9e:d7:de:72:2c:2b:7e:2e:
aa:72:33:b2:55:92:ef:2f:97:51:77:32:ec:3e:c7:
4e:e8:ec:7d:45:f3:6d:09:70:15:40:2a:04:f3:15:
ba:a2:0b:d0:99:c1:7b:76:1a:fe:45:e9:f4:67:11:
7f:74:35:59:ca:2a:01:b8:ee:5e:4b:98:fc:51:6c:
12:69:fb:8d:75:1c:33:28:61:58:6d:50:6a:32:f7:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:90:4B:BE:FF:4E:14:8C:EA:29:56:AB:E5:2B:6D:F6:D2:28:7B:A7
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/WZBLvv9OFIzqKVar5Stt9tIoe6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.68.0/24
91.216.169.0/24
91.216.190.0/24
91.217.135.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:0e:07:67:2a:cf:81:7f:7f:0e:80:1f:c6:76:c1:bd:b8:41:
ea:9e:d2:24:cb:be:2f:a8:ae:72:9d:f8:f1:98:28:41:f4:f8:
21:0e:ab:05:ed:ce:cf:94:2b:47:43:bc:e1:35:df:d8:9c:ee:
4a:24:25:20:00:21:d9:06:92:69:15:fc:89:74:29:4a:d1:15:
f7:55:ab:98:5d:be:33:91:ef:53:d9:02:d3:09:99:b0:38:44:
40:95:39:2f:2b:d0:45:8e:4c:8e:f6:0b:9e:12:dc:b3:af:19:
93:46:45:6b:71:f9:c5:b9:05:75:76:4c:a6:7f:7b:ce:ec:46:
7a:2e:10:31:6a:9f:f2:b5:24:d7:cc:dd:3b:35:42:1e:64:76:
0f:09:30:83:bd:df:c0:57:09:8c:df:ca:a5:91:8c:20:01:c6:
2a:47:d7:1b:a6:9c:bb:4c:9e:fc:fd:48:98:2b:0f:73:c6:6d:
ff:be:fd:77:70:06:8c:02:9c:9c:0f:7b:99:6f:76:a5:f2:fb:
c6:eb:31:66:6a:7d:fd:3f:ce:1a:dd:a0:c1:2f:eb:86:1e:75:
a7:8e:01:97:20:68:76:9a:01:c7:4e:7e:df:ea:27:80:ac:56:
de:56:c1:38:fc:9d:56:d7:17:57:90:02:5b:67:84:7f:f3:f8:
3f:e2:a9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:29 2025 by rpki-client