Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/1-n_CWEf59DOTIbyIIfg40GmhpAk.roa
File: 1-n_CWEf59DOTIbyIIfg40GmhpAk.roa (raw, json)
Hash identifier: RgjtQohngYCNzRrYKTOvGKE2n+h7NyUWicvDLlJeFG0=
Subject key identifier: FA:7F:C2:58:47:F9:F4:33:93:21:BC:88:21:F8:38:D0:69:A1:A4:09
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 0186EAFE6ABAFC15384DCF83E3CA52C6A0A7
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/1-n_CWEf59DOTIbyIIfg40GmhpAk.roa
Signing time: Thu 16 Mar 2023 15:16:27 +0000
ROA not before: Thu 16 Mar 2023 15:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.139.1.0/24 maxlen: 24
45.94.96.0/22 maxlen: 22
45.139.0.0/24 maxlen: 24
45.130.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:fe:6a:ba:fc:15:38:4d:cf:83:e3:ca:52:c6:a0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Mar 16 15:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa7fc25847f9f4339321bc8821f838d069a1a409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:f4:43:20:5c:7a:c6:05:d0:1b:f7:75:93:
c2:cd:1e:41:69:f9:cd:b5:98:91:23:6c:c1:b7:d7:
a8:4d:09:9a:10:2b:a8:8e:bc:a1:0d:ae:b8:08:6f:
6e:84:1b:47:13:f0:75:ac:d7:09:3b:d4:a5:69:0c:
3b:3a:43:2e:21:9d:ce:c1:16:d1:00:fc:18:65:20:
6b:e1:dd:87:c2:58:e6:c1:11:11:93:5c:b7:55:e1:
0c:5b:cd:9a:76:6c:76:25:b8:6e:bb:cf:12:48:8c:
41:c8:cb:e0:cd:05:6d:6e:0e:8c:44:24:f7:39:31:
ea:44:79:68:89:8b:52:34:22:29:74:6f:36:4b:4a:
c9:86:70:45:92:d6:3a:32:d7:25:0d:39:c6:c8:72:
a8:b5:75:1b:b5:3a:70:73:f4:16:b7:3d:41:f7:b7:
2c:bc:90:ed:37:2c:48:7c:cc:c0:fe:23:aa:27:de:
f1:f6:bc:8e:63:f3:2f:8c:5b:27:37:f8:e4:24:8a:
da:98:a6:ec:14:b5:e0:df:18:29:2f:3a:d5:4c:5c:
17:e4:27:ba:81:14:87:69:9d:40:bb:d7:d0:7a:9c:
0b:07:c7:44:b2:46:a6:d6:0c:82:35:f9:95:82:cd:
d1:70:2b:f0:c3:56:b5:49:72:a8:b0:7a:66:27:1b:
19:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7F:C2:58:47:F9:F4:33:93:21:BC:88:21:F8:38:D0:69:A1:A4:09
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/1-n_CWEf59DOTIbyIIfg40GmhpAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.96.0/22
45.130.65.0/24
45.139.0.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:ae:a1:dc:60:d0:43:a0:29:5d:96:19:44:33:cb:b5:77:1c:
9e:a8:03:0c:2e:16:1d:99:43:9d:64:db:62:f1:33:87:3f:a5:
a2:9f:3e:13:f5:82:9e:24:e5:69:00:ae:e3:0f:af:20:6c:71:
fd:55:38:90:e0:d9:bf:e7:03:a6:d8:29:a3:dd:12:cf:c4:5c:
b9:fe:33:09:fb:4f:f2:45:01:64:f3:77:a2:d7:98:68:40:b3:
e5:bc:25:f8:c0:f0:f8:69:5a:ce:f8:51:29:e8:78:01:87:b6:
e6:62:ee:4e:47:df:8a:3f:fb:91:e6:1b:5e:03:59:79:22:86:
a6:5c:29:7e:06:bd:e7:2a:23:2e:17:74:c0:7f:a3:e4:a7:f8:
28:88:9c:bf:ba:29:a0:03:09:61:7d:7e:72:36:25:9e:ac:c2:
37:20:e2:89:0b:6e:84:ec:23:24:a4:10:57:a6:84:8b:31:c5:
8f:b9:61:1f:09:29:69:e6:b8:5d:47:19:64:ce:3a:4a:9c:dd:
2e:8e:eb:d0:57:ad:a1:14:a0:e7:19:fe:d5:41:b9:24:92:70:
ef:72:5a:7e:6b:57:11:d8:f1:48:64:31:6c:ab:ca:56:9e:ce:
ec:79:22:03:e4:82:8d:6d:ee:fe:56:32:94:bd:2f:5c:e3:ca:
99:60:b5:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:43 2025 by rpki-client