Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/WCZTQxU946nlR7ch0PPIZ_wC2wE.roa
File: WCZTQxU946nlR7ch0PPIZ_wC2wE.roa (raw, json)
Hash identifier: gB/77HCksF53BORp9peHh3slxdDcnobCSMUhewaJyNA=
Subject key identifier: 58:26:53:43:15:3D:E3:A9:E5:47:B7:21:D0:F3:C8:67:FC:02:DB:01
Certificate issuer: /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial: 0194236A1D8960B4B16626A9E97C97782A9A
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/WCZTQxU946nlR7ch0PPIZ_wC2wE.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 45.143.224.0/24 maxlen: 24
45.143.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1d:89:60:b4:b1:66:26:a9:e9:7c:97:78:2a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58265343153de3a9e547b721d0f3c867fc02db01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:37:cc:0b:a8:f3:f8:5c:59:6b:35:f3:14:
51:16:a6:ea:47:bf:09:f3:44:cb:e8:aa:bd:6b:08:
8a:05:1b:29:11:74:cc:b6:34:56:40:43:5e:19:d3:
1d:46:ef:2c:b6:9b:64:06:d5:a8:ff:90:ee:b5:4e:
ef:5c:6e:cb:b3:6a:3f:25:94:37:ec:c0:0f:b0:98:
cc:c0:9c:bb:82:e0:b3:e6:ec:9e:c8:a7:92:92:57:
96:37:3a:42:79:30:05:a6:60:75:e9:e4:9f:27:5b:
84:14:00:42:07:98:05:33:73:7e:ac:d8:3d:96:a7:
80:a4:2c:5f:6d:2f:37:d7:76:2f:ce:2d:0b:b3:76:
46:b6:1c:f0:11:ee:c7:80:62:39:de:1c:82:1f:51:
40:cc:c1:b8:cd:65:a8:da:c4:09:06:42:0d:87:07:
0a:e5:14:56:7b:59:b3:78:83:d8:27:c4:61:1a:ce:
2f:11:74:c4:64:94:08:8e:4c:88:7c:73:d0:4f:53:
71:59:01:ae:44:8e:27:d3:1a:0a:c8:74:eb:ca:d7:
c6:c8:cf:72:42:b0:1f:ff:58:a2:c3:aa:c6:53:b4:
4d:d0:a6:70:60:42:19:36:1f:27:19:78:d4:02:32:
61:a0:1e:79:64:3c:62:00:15:53:18:a2:d7:2c:43:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:26:53:43:15:3D:E3:A9:E5:47:B7:21:D0:F3:C8:67:FC:02:DB:01
X509v3 Authority Key Identifier:
keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/WCZTQxU946nlR7ch0PPIZ_wC2wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.224.0/23
Signature Algorithm: sha256WithRSAEncryption
48:95:98:aa:d8:bf:23:0c:a1:a9:73:ae:70:40:f3:82:91:5a:
36:e0:c6:27:1d:91:38:ed:a1:16:1e:3b:1f:19:e1:d4:9d:64:
75:15:32:69:72:48:1f:28:2c:fa:db:d9:5c:ed:d8:e8:4f:1b:
8e:0e:57:d4:10:d9:c7:8a:fd:65:8f:34:e4:72:68:9e:b8:df:
10:ec:87:af:30:26:67:94:85:64:e3:3d:11:d6:58:7b:11:c5:
3a:b4:76:2d:b5:ab:a1:06:da:b6:d3:dc:55:66:99:dc:4b:45:
eb:20:73:59:a5:5f:7f:50:28:24:70:4f:92:8c:43:91:12:45:
09:55:16:cd:ec:0f:b8:7d:24:23:7f:3d:84:d1:dd:5b:92:e7:
56:0d:91:db:49:44:e2:11:cb:7d:dc:48:68:b1:c4:95:8b:67:
f3:68:89:25:e6:11:4d:79:fb:21:03:e6:9c:cd:0f:40:61:76:
fe:4d:87:6d:e7:c8:f5:cb:ad:e7:4a:8d:e7:de:80:f9:f0:82:
45:87:7e:44:9b:fb:b1:89:c9:91:f0:e6:83:a2:56:2d:68:c0:
92:29:1c:62:72:89:cc:76:46:46:3b:56:f9:69:dc:50:c3:40:
f6:2f:df:5b:4d:5f:58:f8:f4:c2:82:45:6c:7d:2f:04:fc:6c:
b3:f2:c9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:05:01 2025 by rpki-client