Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/wzyOntPyHe2_vob8ftvNa_NHz8Q.roa
File: wzyOntPyHe2_vob8ftvNa_NHz8Q.roa (raw, json)
Hash identifier: jsopFRalC2C1iJbieVLkelaTdE/c46JWYuJBBa2M4iA=
Subject key identifier: C3:3C:8E:9E:D3:F2:1D:ED:BF:BE:86:FC:7E:DB:CD:6B:F3:47:CF:C4
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 019427478C66065AC595EF53E490FF7C3DE6
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/wzyOntPyHe2_vob8ftvNa_NHz8Q.roa
Signing time: Thu 02 Jan 2025 13:49:47 +0000
ROA not before: Thu 02 Jan 2025 13:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215559
IP address blocks: 45.129.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:8c:66:06:5a:c5:95:ef:53:e4:90:ff:7c:3d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Jan 2 13:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c33c8e9ed3f21dedbfbe86fc7edbcd6bf347cfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:0e:ef:4d:38:65:6a:a9:a6:b4:99:de:d3:
58:2f:8e:27:83:6b:fb:44:92:65:36:dc:e4:39:90:
60:74:f5:04:37:31:a9:e6:fa:4f:43:f8:cd:88:d6:
29:94:86:96:20:76:fb:c0:4f:09:f8:b2:ae:b4:44:
cd:35:95:98:7d:6f:fb:51:7d:0f:27:7e:34:59:9a:
10:f8:3e:d8:6b:1d:40:f6:0f:60:27:a4:da:c8:9b:
58:e1:aa:26:5c:3b:b2:db:89:68:2d:1e:28:a1:8f:
3c:e5:d5:f6:cb:50:68:57:66:74:79:bf:9e:a1:e3:
15:83:66:bc:fe:7b:8a:1c:6f:2a:9c:7d:1b:d8:fd:
a2:9c:d1:98:0c:03:c4:a1:22:a4:b7:c3:2c:13:25:
c3:b8:92:70:99:51:da:19:ca:5c:32:c1:44:8a:d7:
79:e9:df:03:38:bd:91:48:e1:70:fb:6a:3e:f8:fe:
19:81:e8:4c:b8:4b:a4:c3:01:25:c2:89:45:12:24:
36:50:10:17:ab:2c:f4:90:bc:b5:88:91:0b:0b:ea:
b2:39:58:19:8b:2b:62:28:3e:68:ea:0e:05:00:76:
92:e3:90:a4:c0:70:83:94:4b:cc:37:ce:72:74:ab:
26:c9:be:57:a1:ce:32:61:e8:e7:45:5e:76:5d:0c:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3C:8E:9E:D3:F2:1D:ED:BF:BE:86:FC:7E:DB:CD:6B:F3:47:CF:C4
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/wzyOntPyHe2_vob8ftvNa_NHz8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.166.0/24
Signature Algorithm: sha256WithRSAEncryption
20:29:a5:fa:4d:04:12:54:a8:e2:a7:98:9e:e3:7e:b5:16:c5:
2c:aa:16:d1:ce:0a:66:fe:6c:8f:51:98:83:e0:b5:88:ed:eb:
8b:06:35:14:d9:36:71:bb:57:ec:70:52:1e:3d:67:8b:39:0d:
06:fe:d5:81:38:af:56:5c:68:a2:ee:61:9e:21:01:f5:1e:c2:
01:e9:0a:e0:45:ad:64:38:f8:ee:f7:ea:e2:5b:2e:c1:40:e4:
a2:52:e5:82:25:7c:b9:63:a4:3d:02:2b:d3:e7:c9:bc:f1:e8:
70:85:fe:a0:1a:94:01:4f:78:ca:5a:74:50:ae:65:21:cd:a3:
e2:15:00:ba:5d:11:e0:a8:e9:8f:56:ec:d6:51:fa:04:a2:5c:
42:9b:42:25:ae:bf:04:c0:40:67:b6:3e:c3:cd:56:34:7b:5e:
b0:97:a2:5e:44:5d:d0:30:d7:89:aa:81:56:0a:5f:9c:88:93:
7d:f3:52:3f:3a:a9:b8:c8:4a:27:f1:0a:d0:4a:cf:2f:d8:56:
65:10:58:da:41:29:4c:c4:7d:a4:56:32:1c:89:27:36:5f:25:
a6:66:bc:d7:f4:73:32:a5:ad:ef:28:e5:9e:6d:83:78:cf:d2:
74:20:73:89:f7:fb:fa:38:54:dc:36:e7:45:07:e4:a4:ec:e4:
6a:df:48:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:26:51 2025 by rpki-client