Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/o0w1bPk9yQkEzOmquHjyTCzVPsc.roa
File: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (raw, json)
Hash identifier: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=
Subject key identifier: A3:4C:35:6C:F9:3D:C9:09:04:CC:E9:AA:B8:78:F2:4C:2C:D5:3E:C7
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 0194244577A897007355D371F7F331BA5BC4
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/o0w1bPk9yQkEzOmquHjyTCzVPsc.roa
Signing time: Wed 01 Jan 2025 23:48:39 +0000
ROA not before: Wed 01 Jan 2025 23:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20712
IP address blocks: 45.141.49.0/24 maxlen: 24
45.141.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:77:a8:97:00:73:55:d3:71:f7:f3:31:ba:5b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 23:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a34c356cf93dc90904cce9aab878f24c2cd53ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:eb:e7:50:71:fc:1a:d0:b0:6e:6f:51:e4:
cc:8a:83:c6:a4:cd:f0:fe:b7:7d:79:0e:62:fb:ab:
de:58:be:8f:e3:ca:a3:de:82:59:8a:09:f2:31:b0:
3c:04:24:51:6a:fb:c9:30:bc:b4:7e:0f:d1:be:b9:
56:5f:4d:53:9e:c1:de:56:1e:0f:56:fd:20:02:ef:
d8:11:5f:3e:fb:02:72:34:a8:23:65:1f:b6:d9:1c:
8f:b4:b4:49:44:48:90:6b:6a:2f:44:b0:cd:51:88:
f1:b8:c3:29:4f:41:a3:06:76:a2:b4:68:41:2b:7f:
79:2b:c5:d7:03:f2:03:bc:d2:5f:94:1b:b9:d8:93:
72:ac:5f:75:25:cb:69:8f:bf:a4:83:56:60:fd:25:
ee:be:8a:ab:e1:8e:dd:95:39:ed:f6:62:b2:81:3d:
35:22:f0:f7:0a:0a:6d:b0:fb:db:17:8a:df:0b:d0:
e3:7b:c7:a8:c1:3d:2b:1e:e6:b7:44:ae:26:91:45:
9b:6a:21:99:ed:72:d1:f3:76:f8:f9:8c:eb:53:15:
e3:70:63:3e:13:bb:d0:cb:24:4d:64:25:24:20:b6:
6f:02:eb:4e:3d:bb:4d:70:b8:5c:63:3f:4b:2d:17:
33:8d:c5:72:12:bf:09:07:72:c7:72:79:03:95:fe:
22:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4C:35:6C:F9:3D:C9:09:04:CC:E9:AA:B8:78:F2:4C:2C:D5:3E:C7
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/o0w1bPk9yQkEzOmquHjyTCzVPsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.49.0/24
45.141.51.0/24
Signature Algorithm: sha256WithRSAEncryption
44:2b:0e:cb:a6:7f:51:b2:44:d7:eb:67:59:25:03:bc:40:b7:
0d:97:17:6e:2f:52:06:fc:bb:14:9d:c8:10:47:57:2e:af:90:
66:d4:61:f0:1a:16:1c:cb:fc:fc:57:9b:24:f6:34:c9:2a:09:
66:a7:94:12:6d:bb:48:47:72:6b:e1:a4:7c:04:ab:af:76:fd:
53:0c:06:29:99:26:b6:11:35:3d:6e:ad:ba:c7:87:08:e6:de:
45:43:69:cf:33:ec:70:56:1d:09:71:ad:bd:a7:ad:5c:c3:5c:
ff:55:13:ca:f8:8a:d2:20:3b:6e:9d:b6:d8:d6:58:fa:b6:32:
95:2a:9f:a0:df:83:a6:1d:03:c4:47:7b:78:a7:f8:71:21:08:
22:9e:11:09:d6:d1:fd:18:97:11:ee:db:63:3a:f2:3e:20:93:
0a:b9:36:02:49:52:6f:7f:31:41:61:ba:ba:43:41:1c:91:58:
81:ab:27:38:76:be:7a:0e:8c:96:cc:a1:58:9c:35:9b:b7:fd:
95:cb:b8:9e:e1:fc:4c:09:69:37:64:07:7e:9e:77:89:75:71:
dd:1d:0c:4a:7c:87:72:06:84:de:bb:9a:97:c1:67:f8:c2:37:
40:ca:45:a4:d2:e1:df:14:99:e1:89:8e:4b:5f:3d:6c:70:67:
de:f8:dc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:18:45 2025 by rpki-client