Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/w4Ijlf9GVmOk3AAgueBo5lNHXnw.roa
File: w4Ijlf9GVmOk3AAgueBo5lNHXnw.roa (raw, json)
Hash identifier: qK8y8f79JwftJMsrm23X0Fw5WEF80v1YI0iYAoaL0V8=
Subject key identifier: C3:82:23:95:FF:46:56:63:A4:DC:00:20:B9:E0:68:E6:53:47:5E:7C
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 0188BF9224966D8FF147B29E5137BE533862
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/w4Ijlf9GVmOk3AAgueBo5lNHXnw.roa
Signing time: Thu 15 Jun 2023 15:00:05 +0000
ROA not before: Thu 15 Jun 2023 15:00:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.82.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:92:24:96:6d:8f:f1:47:b2:9e:51:37:be:53:38:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jun 15 15:00:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3822395ff465663a4dc0020b9e068e653475e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:8d:70:de:88:c7:c1:1e:a9:ff:e4:70:8c:
a9:c8:6e:c4:13:db:7b:49:1f:33:81:72:3f:37:73:
8d:8d:0c:e3:c7:ad:58:6a:4b:8f:77:b0:97:81:28:
55:98:e1:56:c2:87:14:8e:17:c4:c5:32:38:68:5e:
9b:dc:33:01:82:bf:57:e7:d7:41:1c:41:e2:45:e7:
a4:83:8b:02:32:2c:f7:92:f4:24:6f:b5:19:7e:75:
8f:db:01:d5:dd:3d:70:39:a4:4e:17:3f:6a:39:83:
62:24:62:40:06:26:ac:63:c9:51:6e:34:bf:cf:de:
61:8d:f4:5a:9c:8d:6e:b5:dd:a3:16:62:c2:da:e4:
c3:4e:b5:27:4f:bc:ee:5c:51:9d:c6:17:e0:5c:01:
ca:b8:0f:21:06:ac:3f:60:8e:32:f2:24:65:f8:b3:
6d:4a:74:49:ad:64:4c:82:be:59:f8:fe:69:b1:73:
16:e1:c6:77:44:ae:86:4a:3b:8d:96:c7:75:f9:65:
3d:4e:e8:7b:d2:3e:86:5e:58:26:27:50:9c:45:b9:
f5:e6:40:5d:31:ff:c7:d0:94:1c:14:f7:5e:18:05:
4b:fe:1b:37:13:68:76:c7:0e:38:66:0a:b3:70:fa:
c5:96:92:67:86:d3:8b:05:d9:22:7f:43:8a:7e:36:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:82:23:95:FF:46:56:63:A4:DC:00:20:B9:E0:68:E6:53:47:5E:7C
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/w4Ijlf9GVmOk3AAgueBo5lNHXnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.42.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:67:54:ad:cd:8e:b4:75:95:31:0a:92:48:25:ea:4e:71:fe:
82:3b:19:e8:d0:5b:a5:72:ab:b1:23:3e:e2:e3:b3:c2:a3:f0:
c1:c3:14:dd:2b:67:92:62:34:3c:0a:d7:b3:02:23:c7:7b:3e:
53:06:4b:28:a3:db:a2:24:cb:03:51:6b:77:2b:d5:a6:92:60:
de:42:f4:11:20:49:a0:4a:9c:a7:78:22:41:58:fa:a9:f8:3b:
a2:09:fe:fa:7a:4c:1b:71:4d:43:b2:7a:2e:8b:cc:f1:bc:f7:
1e:5b:d6:8e:9f:99:9e:24:f3:48:52:eb:a1:9e:e3:02:94:b4:
e7:dc:9c:24:cd:2b:af:ad:e0:46:a4:e9:64:e1:f3:ef:00:32:
c9:6f:9b:46:24:52:da:68:3b:83:c9:a0:54:3f:6a:f0:37:1e:
43:22:28:86:a5:38:bf:52:5b:75:bc:1f:d2:df:19:b3:8e:8b:
41:e7:68:be:fc:3f:e0:6c:5b:94:2f:2f:7f:55:04:2b:7c:55:
b9:47:43:ed:e9:cb:5f:03:02:58:1e:80:71:3c:30:60:96:36:
0b:1b:3f:50:88:3f:62:62:eb:12:86:0e:a5:e2:75:d4:a7:93:
ff:55:84:d5:20:4a:58:c6:5e:3f:0f:3d:f0:3a:92:4b:43:48:
69:b7:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:16 2025 by rpki-client