Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/WpzW6CM2x3UV4sUUaoFccGUhKaE.roa
File: WpzW6CM2x3UV4sUUaoFccGUhKaE.roa (raw, json)
Hash identifier: ivGsC1d4bEgc8chYxmBnlBkexP1bJ0sm6tvVuQMTU2c=
Subject key identifier: 5A:9C:D6:E8:23:36:C7:75:15:E2:C5:14:6A:81:5C:70:65:21:29:A1
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 0186EB0FCF73BA885941743C4635159FBCC4
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/WpzW6CM2x3UV4sUUaoFccGUhKaE.roa
Signing time: Thu 16 Mar 2023 15:35:27 +0000
ROA not before: Thu 16 Mar 2023 15:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.85.108.0/22 maxlen: 22
45.139.1.0/24 maxlen: 24
45.94.96.0/22 maxlen: 22
45.139.0.0/24 maxlen: 24
45.130.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:0f:cf:73:ba:88:59:41:74:3c:46:35:15:9f:bc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Mar 16 15:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a9cd6e82336c77515e2c5146a815c70652129a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:38:41:f7:68:43:ec:8d:9d:17:c9:fc:9a:
68:56:32:96:ad:02:10:3e:94:e1:a7:06:f3:97:4c:
a7:4b:d0:6f:67:c8:70:8d:11:d4:8a:b3:f8:cb:03:
a8:1d:1c:56:d2:60:eb:94:db:32:fe:d0:cd:69:19:
27:a9:44:1e:59:c4:4d:f3:74:bc:6b:15:d1:15:3f:
ad:ec:5b:cc:6f:cc:3f:8a:69:6f:4f:db:86:72:41:
d6:1c:e4:a7:e2:02:d9:a8:3d:6b:32:9c:ef:d6:09:
d8:87:f7:d0:32:2e:4d:46:81:e6:cf:86:1d:cc:48:
52:0e:1d:0d:4a:7b:6d:2a:68:00:2d:51:0d:20:69:
31:94:c4:7b:07:cd:43:5d:6d:98:6b:09:cd:ab:e3:
d8:d3:d6:23:09:4c:f6:0e:8f:57:54:0b:6a:d7:c7:
3e:b5:e5:1c:08:fb:f4:ea:6a:9e:d4:f9:8b:19:29:
4d:28:31:ec:68:30:1f:7b:b1:7e:04:d8:40:bc:2e:
a9:99:50:71:77:45:89:02:d5:da:73:cf:7b:1d:41:
ee:3d:a9:f9:6d:eb:2a:c3:bb:92:83:c5:70:9c:11:
4c:3f:5b:43:25:bf:85:32:ca:fe:e6:d7:5d:6f:f6:
d0:2a:8f:68:be:39:05:aa:f6:b4:3e:ac:cb:54:f5:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9C:D6:E8:23:36:C7:75:15:E2:C5:14:6A:81:5C:70:65:21:29:A1
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/WpzW6CM2x3UV4sUUaoFccGUhKaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.108.0/22
45.94.96.0/22
45.130.65.0/24
45.139.0.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:9a:af:0d:ce:3d:97:ac:be:53:fc:e8:d5:5c:ff:97:22:6c:
d1:bf:da:7e:eb:c3:30:c8:9a:72:3e:5b:ce:f8:6b:1f:68:88:
8f:1c:77:3b:28:a3:7c:81:ab:0e:f1:57:08:93:92:3b:ac:b7:
69:ae:73:03:fb:e9:9c:0d:47:87:0d:5d:2c:73:af:34:d0:a6:
84:b1:70:fe:97:64:47:ef:d2:1a:4e:d4:1c:05:fe:ac:59:63:
dc:f9:cc:7c:e8:90:63:66:5c:a4:8d:c4:e3:0e:11:89:c3:2b:
c0:24:3a:0f:20:a7:e7:9b:ef:ff:7f:a6:f5:3e:82:18:ba:f2:
aa:75:fa:03:9f:30:42:75:7a:11:cd:67:6d:ae:e1:6d:7f:dd:
ff:50:af:f3:92:0d:74:ea:be:f2:34:1a:c0:3e:e5:ca:4e:6b:
4d:4a:a5:44:ac:fa:85:3a:33:09:95:7b:5d:4b:46:62:15:9d:
9e:4b:58:11:dd:92:25:9e:20:dd:14:42:e6:d2:8e:71:18:b4:
cc:4a:3c:21:2e:31:ad:d8:59:d8:5c:c2:85:5c:d8:83:1a:b2:
2b:42:33:58:4b:49:d2:87:7b:e3:46:80:08:82:cc:ff:2b:98:
67:fc:37:2a:3c:fd:83:bd:77:32:f7:b4:3a:8a:f3:97:b0:e0:
a9:7f:94:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:49 2025 by rpki-client