Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/W8JHD8YWCOFCTsKpUE0uk5BCaHw.roa
File: W8JHD8YWCOFCTsKpUE0uk5BCaHw.roa (raw, json)
Hash identifier: OZX13pp6qedihtlUQiqkw3NEMFII+6uO5gSoylWqYSQ=
Subject key identifier: 5B:C2:47:0F:C6:16:08:E1:42:4E:C2:A9:50:4D:2E:93:90:42:68:7C
Certificate issuer: /CN=49324f3d95d1b9b96d0faf0df92dafa849ad4796
Certificate serial: 018474A41C2E13E5455CBD58E0159E737C02
Authority key identifier: 49:32:4F:3D:95:D1:B9:B9:6D:0F:AF:0D:F9:2D:AF:A8:49:AD:47:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STJPPZXRubltD68N-S2vqEmtR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/W8JHD8YWCOFCTsKpUE0uk5BCaHw.roa
Signing time: Mon 14 Nov 2022 05:37:02 +0000
ROA not before: Mon 14 Nov 2022 05:37:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136933
IP address blocks: 45.149.17.0/24 maxlen: 24
45.149.16.0/24 maxlen: 24
45.149.19.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:74:a4:1c:2e:13:e5:45:5c:bd:58:e0:15:9e:73:7c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49324f3d95d1b9b96d0faf0df92dafa849ad4796
Validity
Not Before: Nov 14 05:37:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5bc2470fc61608e1424ec2a9504d2e939042687c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ea:28:cf:2e:c1:77:e8:cc:d2:e3:17:1c:a7:
18:4c:6d:78:87:e2:a9:7a:3d:9f:2f:ab:58:60:08:
76:30:c7:df:59:6f:9a:ba:91:e7:71:ae:14:0f:96:
28:e4:d5:ef:54:57:8e:26:8e:57:31:7a:e4:37:40:
9e:cd:27:78:86:2d:75:7a:14:ac:54:98:3d:c9:54:
a2:5c:ae:85:4e:ae:6c:4f:2a:a5:24:87:d0:b2:e7:
f5:c8:b0:76:1d:bf:4b:a2:6e:a9:98:8d:43:fd:8d:
a5:03:39:5c:39:9a:8a:7b:54:81:f0:34:a9:b4:11:
8b:69:bd:a8:d1:5b:2c:09:00:ef:3e:74:77:e4:3c:
fd:18:28:b6:e1:57:5a:79:61:1c:5f:1d:be:6c:7c:
66:a4:d1:1b:54:6d:8b:85:8c:09:bd:e7:4b:48:d6:
9d:4d:6e:69:49:2b:0a:ce:1b:b5:9c:5a:da:a0:a7:
12:c6:fb:e9:20:37:3a:fa:1e:3d:36:c1:ba:c1:63:
04:f0:6d:20:b9:cd:d2:f2:33:19:2c:e6:6e:55:c6:
1e:6c:bb:ef:34:08:e0:09:6a:df:94:e7:8c:c9:29:
89:8e:4e:36:98:18:4f:f2:36:bf:67:7e:b4:e9:b5:
e4:11:f2:bd:22:a6:3d:f9:db:a5:ca:24:4e:b5:8a:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C2:47:0F:C6:16:08:E1:42:4E:C2:A9:50:4D:2E:93:90:42:68:7C
X509v3 Authority Key Identifier:
keyid:49:32:4F:3D:95:D1:B9:B9:6D:0F:AF:0D:F9:2D:AF:A8:49:AD:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STJPPZXRubltD68N-S2vqEmtR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/W8JHD8YWCOFCTsKpUE0uk5BCaHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b8badc-b15d-4558-b58e-c6e68c8e8e3e/1/STJPPZXRubltD68N-S2vqEmtR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
00:09:f3:59:d9:43:b1:c6:f7:10:ed:6d:14:25:29:50:02:de:
0a:e8:51:23:40:25:7e:42:ea:8e:6f:cb:6c:40:9d:54:d4:d9:
21:75:50:f6:43:73:2d:6c:d3:10:6f:04:5b:b4:14:ff:38:51:
c3:5d:0a:b4:f7:07:95:11:b1:34:40:8b:6e:fd:ed:c1:ee:f1:
46:6b:e9:15:62:9e:7f:db:9d:30:97:c1:c3:76:61:85:83:b5:
6f:e3:34:9a:cf:5d:7d:e4:f0:fe:27:14:5a:82:ee:01:0a:19:
2e:62:01:fc:e7:04:61:f9:db:69:83:9b:ef:60:ea:a7:3f:51:
59:5c:00:50:ac:5f:bc:5b:0f:e4:78:38:1b:19:b9:05:09:07:
d2:67:ad:d8:92:59:9d:2b:f0:98:7e:18:6a:2c:e7:b1:ea:e8:
3d:68:47:b8:2d:de:a1:c0:01:d1:55:31:42:e4:cb:2e:9a:39:
18:09:1f:10:34:29:96:a9:7a:b5:42:82:2a:6e:22:4e:eb:c8:
dd:cf:c0:35:b9:cd:8e:be:72:c7:a4:2d:82:d1:68:a6:42:47:
62:6e:c9:09:66:48:ca:97:f3:9b:20:cf:d2:04:51:92:50:77:
6a:e0:4c:38:d1:c3:35:e1:7e:b1:e7:ce:54:7b:a0:4f:4d:9d:
4f:be:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:59:33 2025 by rpki-client