Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/wz343m4WTEfXoZmZ9Foj5Bb_hUA.roa
File: wz343m4WTEfXoZmZ9Foj5Bb_hUA.roa (raw, json)
Hash identifier: TvUORjSLpK+RSDLxXyR8gmc3qSBJvMB3VpORNJF4DAs=
Subject key identifier: C3:3D:F8:DE:6E:16:4C:47:D7:A1:99:99:F4:5A:23:E4:16:FF:85:40
Certificate issuer: /CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Certificate serial: 0768C0C5
Authority key identifier: 81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/wz343m4WTEfXoZmZ9Foj5Bb_hUA.roa
Signing time: Sat 01 Jan 2022 00:52:06 +0000
ROA not before: Sat 01 Jan 2022 00:52:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39421
IP address blocks: 45.157.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124305605 (0x768c0c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8133d89c06a8a1cc9dbc362201f7ec559d7fdd48
Validity
Not Before: Jan 1 00:52:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c33df8de6e164c47d7a19999f45a23e416ff8540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:0e:62:3b:6b:73:f6:99:21:df:be:fb:61:
4e:1c:6a:0e:22:62:cb:9d:0b:24:a4:f9:27:54:35:
89:60:fd:1e:f1:fb:98:ff:13:ba:33:f8:da:bd:79:
54:4d:9c:6e:0c:b8:34:d8:bf:b6:52:e6:09:a4:b0:
88:2f:cc:02:7a:f6:f8:05:8e:76:58:33:e7:a3:b9:
94:77:f6:ad:b9:35:85:65:a7:bf:67:46:c8:eb:03:
94:14:4a:58:ba:58:ef:0d:ba:7c:1f:91:97:c6:5d:
41:49:31:08:ed:dd:66:9c:aa:e3:f9:30:79:36:77:
bd:86:3e:4d:de:fb:b0:28:9e:d0:b1:b4:1c:e0:23:
9b:88:5e:27:56:c5:63:10:d6:f6:62:67:da:0b:51:
f8:8e:bf:e1:fb:e6:e7:1c:1d:a9:70:d8:22:0c:d3:
b5:6a:78:4a:1e:9e:56:ff:d9:97:dc:c2:35:cb:48:
56:c2:b5:c7:61:ec:7f:d0:84:83:d3:c5:d4:bc:62:
a3:ab:8e:ff:5f:d7:c7:bd:3b:10:c9:93:d3:38:ba:
21:ea:66:3a:36:99:c5:69:8e:2e:09:1d:a6:3c:6c:
e1:7f:6f:13:bf:db:a3:21:75:9f:53:fd:35:51:4b:
12:7d:25:63:07:bc:df:30:b6:4e:29:65:cd:16:74:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3D:F8:DE:6E:16:4C:47:D7:A1:99:99:F4:5A:23:E4:16:FF:85:40
X509v3 Authority Key Identifier:
keyid:81:33:D8:9C:06:A8:A1:CC:9D:BC:36:22:01:F7:EC:55:9D:7F:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTPYnAaoocydvDYiAffsVZ1_3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/wz343m4WTEfXoZmZ9Foj5Bb_hUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e90ff2-6c91-4eb8-a4b1-c5febe487c40/1/gTPYnAaoocydvDYiAffsVZ1_3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.11.0/24
Signature Algorithm: sha256WithRSAEncryption
74:71:1e:f4:d3:51:92:6a:24:be:dc:ea:dd:f0:34:4a:ff:02:
e5:30:83:90:49:f9:9f:ea:d6:3c:ed:5a:a3:3e:5b:7b:19:05:
7b:06:f9:4d:2b:5f:0d:ae:e5:fa:f7:4d:b4:9c:3a:81:2d:23:
ef:6d:8d:93:80:87:15:d2:ab:2a:c6:6d:8d:8a:45:bb:8c:0d:
ab:d8:e4:ff:97:90:51:3c:fe:6d:5d:ac:50:ad:6e:0a:44:87:
38:ed:22:26:3d:5a:aa:a4:9e:cd:57:5f:8f:d4:b4:f2:a8:4c:
29:67:ec:8a:96:43:05:09:21:47:dc:14:0b:9c:df:bd:e9:72:
8d:86:12:d5:38:90:f4:ec:68:21:a9:b2:63:9b:2e:44:3b:64:
0f:03:e1:02:d6:c7:a0:1c:7e:ce:da:35:62:a7:85:b8:b5:4e:
32:aa:fa:53:a1:d0:36:47:ea:36:9f:63:8c:ac:dd:0f:c2:a9:
82:38:18:0d:ea:50:69:e8:a5:e0:a5:6a:23:ef:26:d1:a8:11:
87:a1:e2:84:e2:95:8c:4a:d1:ac:65:89:d5:3b:7f:08:6b:5b:
e3:b1:aa:8d:a6:51:4c:2f:ea:79:cc:90:bb:f3:04:b5:fc:b4:
12:92:d3:b4:2a:50:67:7c:85:8b:7c:58:16:67:27:16:dc:b1:
7d:77:37:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:52 2025 by rpki-client