Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/WgYjeGzNVzebf_6CGezjfRx351k.roa
File: WgYjeGzNVzebf_6CGezjfRx351k.roa (raw, json)
Hash identifier: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=
Subject key identifier: 5A:06:23:78:6C:CD:57:37:9B:7F:FE:82:19:EC:E3:7D:1C:77:E7:59
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067C081FEDD3DBC045CEAE7C2C30202
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/WgYjeGzNVzebf_6CGezjfRx351k.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134835
IP address blocks: 45.153.10.0/24 maxlen: 24
45.153.11.0/24 maxlen: 24
45.155.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c0:81:fe:dd:3d:bc:04:5c:ea:e7:c2:c3:02:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a0623786ccd57379b7ffe8219ece37d1c77e759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:7c:6d:17:f8:6d:2b:8f:38:bc:18:e6:3f:
3a:ad:84:6a:d5:87:71:64:f4:77:59:a2:ea:d2:35:
1c:91:54:12:e1:ae:04:7b:4e:09:62:43:4e:fe:90:
36:01:4d:a8:ac:72:5d:d2:0c:ac:56:db:b6:b6:04:
85:45:2a:c8:ca:83:65:97:b7:5f:97:05:5e:09:12:
e5:11:6e:9b:5f:99:f0:da:3f:10:04:38:34:21:a2:
5e:3f:9c:72:2c:47:38:39:94:3e:53:96:bd:40:dc:
64:4e:7c:0d:86:eb:ff:91:cf:6f:8b:60:75:54:14:
93:6b:fd:7c:4a:c5:b7:76:c3:7a:17:fe:d6:17:e2:
6a:48:f8:69:d6:a4:51:7d:04:bd:89:6d:f5:e0:fb:
9c:68:27:86:89:43:35:fa:1d:4e:32:61:10:82:7a:
67:82:d2:51:b0:2f:fd:99:55:04:f3:30:b2:be:56:
e3:bd:0a:83:a3:e6:41:e9:dc:4f:4f:28:c9:83:ca:
cf:01:df:ed:62:60:1c:53:be:28:7c:fb:78:b8:57:
28:cb:ee:59:94:1f:8b:5a:70:2d:0f:d8:a3:cb:6a:
6b:41:ea:a4:dc:a9:ae:15:36:e6:e7:6c:f7:50:64:
08:32:17:d1:69:16:86:80:fa:9c:13:33:55:22:74:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:06:23:78:6C:CD:57:37:9B:7F:FE:82:19:EC:E3:7D:1C:77:E7:59
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/WgYjeGzNVzebf_6CGezjfRx351k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.10.0/23
45.155.220.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:ca:a9:7f:19:92:62:b8:8c:ef:d7:3d:af:ff:9d:fe:76:e8:
89:e5:9f:09:9c:31:6f:00:a4:b0:32:78:cb:38:65:e1:40:c1:
3e:27:8c:64:93:7b:51:10:8c:79:12:2d:e7:5f:36:ab:3d:47:
b1:5e:c4:44:86:8c:e7:4e:9e:12:a0:a4:e0:95:46:bb:87:43:
f6:f7:a3:e1:3e:e9:2c:19:8f:b4:2b:00:85:b3:9a:5a:cf:a1:
57:6b:6c:7a:61:ee:a1:74:0c:6e:0a:2c:84:56:58:e0:30:68:
1d:d8:76:bb:c5:50:0b:f9:69:8f:a8:27:4a:e4:bf:42:1f:7f:
1f:27:f2:5a:aa:da:3c:49:1a:6e:89:34:96:e2:6a:01:8e:e4:
4a:6c:da:80:c6:89:c8:07:35:62:15:79:90:bb:95:9c:6f:3b:
9d:fa:d8:7a:a6:9e:8d:5e:88:53:07:19:b8:24:57:e9:90:c2:
f4:6b:e4:3e:9c:53:7f:96:49:5e:5f:1f:6e:86:fb:67:fb:00:
7a:6c:57:4b:46:5b:d5:4d:44:ea:1c:f5:e7:e0:08:b2:b7:8a:
e9:13:20:4c:16:62:44:35:a8:28:34:92:a9:3b:ca:04:97:ea:
6d:64:05:1d:3f:2c:ec:0f:c8:cc:92:78:a5:ab:cb:2b:0c:c3:
43:5b:bb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:59:40 2025 by rpki-client