Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/waN452M8QOFW3Ybd80Nhqz4qUAM.roa
File: waN452M8QOFW3Ybd80Nhqz4qUAM.roa (raw, json)
Hash identifier: 9pggNeJgLpgOoT4yZRrNwBBFcDO4KQRcy/LJIDGnYQo=
Subject key identifier: C1:A3:78:E7:63:3C:40:E1:56:DD:86:DD:F3:43:61:AB:3E:2A:50:03
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0190E8C2E327D7506AE48C1CEF99BFE22BC7
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/waN452M8QOFW3Ybd80Nhqz4qUAM.roa
Signing time: Thu 25 Jul 2024 07:20:04 +0000
ROA not before: Thu 25 Jul 2024 07:20:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 45.139.68.0/23 maxlen: 24
45.150.80.0/23 maxlen: 24
80.91.221.0/24 maxlen: 24
193.36.162.0/24 maxlen: 24
193.36.163.0/24 maxlen: 24
212.87.200.0/24 maxlen: 24
212.87.201.0/24 maxlen: 24
212.87.202.0/24 maxlen: 24
212.87.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:c2:e3:27:d7:50:6a:e4:8c:1c:ef:99:bf:e2:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jul 25 07:20:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1a378e7633c40e156dd86ddf34361ab3e2a5003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:01:f6:f7:c0:39:c8:53:87:e2:6e:c1:20:
4d:ee:41:8c:1f:32:82:32:f8:c4:c2:17:6b:02:b6:
9a:42:64:5d:d4:03:a9:5a:79:05:89:be:e2:91:db:
e9:4f:29:cc:66:36:2f:c6:cf:50:9b:2f:fd:a2:0c:
be:6e:f7:b3:c5:32:61:fb:a2:49:c4:41:d9:e1:73:
c5:eb:72:0f:fb:84:4e:21:b5:9b:35:64:72:e9:d5:
40:f6:d3:7c:a9:34:12:cc:b5:00:87:fa:e9:b3:02:
d8:88:b7:31:b8:e6:8f:9b:fe:95:82:ed:ca:9e:7e:
8f:8c:e5:e0:aa:dc:3a:10:54:17:70:b2:09:89:17:
b9:c7:4f:9e:ef:e3:d0:2d:8f:5f:91:98:44:b0:7e:
6e:41:e8:d0:98:27:50:7c:37:d9:c1:34:35:0b:1b:
e6:05:9c:77:7f:0b:3b:71:9c:27:9c:84:1e:5d:86:
ed:2d:56:55:fe:0b:d6:73:3a:d2:11:b2:96:e7:53:
1d:8e:d1:ba:8f:d0:55:13:8f:b5:02:d3:ba:ed:be:
8c:9d:25:26:c7:f2:b1:6c:0a:0f:b4:4e:4d:21:a8:
3b:b5:c0:33:9d:58:70:26:6e:35:2d:21:f0:7c:7a:
69:83:27:63:b7:ae:72:b0:43:1d:77:d0:d6:ca:e0:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A3:78:E7:63:3C:40:E1:56:DD:86:DD:F3:43:61:AB:3E:2A:50:03
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/waN452M8QOFW3Ybd80Nhqz4qUAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.68.0/23
45.150.80.0/23
80.91.221.0/24
193.36.162.0/23
212.87.200.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:b6:d9:e1:80:87:7d:a3:2f:bb:da:99:97:56:5a:a6:eb:7b:
4e:69:e6:a6:f7:20:ef:48:fe:ba:93:ec:83:44:e9:c7:90:8a:
ce:bd:66:98:ae:da:f3:c4:69:a9:d4:13:40:a3:f2:83:b9:33:
29:c8:4b:5b:cf:59:4d:ff:cc:2f:df:c4:a5:b8:c4:ff:aa:d9:
30:63:d3:3b:1f:cb:dd:e0:80:13:bb:4d:ad:92:8e:29:0b:85:
60:8a:bd:f9:7f:69:ac:bf:70:23:38:b8:9d:f7:f4:56:e3:4e:
5b:66:e2:2c:b7:45:6c:73:cb:58:54:09:5d:fe:59:44:a5:2a:
3e:fb:96:9b:59:c8:81:66:63:78:4e:75:d5:33:49:72:1a:0d:
44:7b:ae:82:a3:0c:d0:37:f2:be:d5:e4:c8:b0:80:f6:95:33:
9c:bb:9b:ea:e6:36:61:af:8b:a1:16:99:60:d0:c6:0e:c8:af:
f6:e4:e6:ca:08:27:5d:95:50:bb:80:37:bb:30:67:82:ef:ce:
16:04:e8:c7:65:c1:91:79:d7:b3:3f:e0:a0:37:14:71:02:1f:
d0:a3:e2:1c:e5:d2:63:50:ee:d0:a2:7b:80:99:d5:31:18:29:
fc:85:6e:48:80:d2:6b:61:a7:2a:e4:72:c4:1e:b9:cd:8b:6f:
7c:09:13:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:19 2025 by rpki-client