Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/373ac8-3762-44ad-b14a-d386dc80d8bd/1/WlRrc3iaih4hy8zrn89bY6eDRoA.roa
File: WlRrc3iaih4hy8zrn89bY6eDRoA.roa (raw, json)
Hash identifier: 4P5EiUoiipQdJ9KzbkykIauzlXKlIhmu/YE2mmUfoWI=
Subject key identifier: 5A:54:6B:73:78:9A:8A:1E:21:CB:CC:EB:9F:CF:5B:63:A7:83:46:80
Certificate issuer: /CN=4446a60ff3e51cded46483dfea32a65092cce87e
Certificate serial: 018CC26D8133F435E2974556B97686B9B0E8
Authority key identifier: 44:46:A6:0F:F3:E5:1C:DE:D4:64:83:DF:EA:32:A6:50:92:CC:E8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REamD_PlHN7UZIPf6jKmUJLM6H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/373ac8-3762-44ad-b14a-d386dc80d8bd/1/WlRrc3iaih4hy8zrn89bY6eDRoA.roa
Signing time: Mon 01 Jan 2024 00:30:05 +0000
ROA not before: Mon 01 Jan 2024 00:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43915
IP address blocks: 45.152.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:81:33:f4:35:e2:97:45:56:b9:76:86:b9:b0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4446a60ff3e51cded46483dfea32a65092cce87e
Validity
Not Before: Jan 1 00:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a546b73789a8a1e21cbcceb9fcf5b63a7834680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:da:50:2b:24:22:e4:e6:6e:bb:f4:1e:d5:a4:
25:ec:32:94:57:29:64:1f:d8:ac:6d:5f:16:ec:17:
b8:64:51:34:d9:d1:d4:39:29:81:61:8a:30:5c:d1:
d4:c6:60:e5:7e:10:56:69:7f:e6:e3:2c:f6:f5:39:
cd:17:dc:36:81:05:35:07:80:2d:f1:30:48:ef:41:
9a:22:a2:c0:55:78:6a:76:a2:99:0e:86:01:d7:07:
06:3c:e3:b5:38:46:67:51:78:0a:94:37:18:e9:68:
52:2f:34:8b:d5:46:6f:b7:30:8e:88:3a:28:cf:d9:
2d:e2:54:91:f7:e0:73:7b:c5:28:5d:f5:62:bf:ec:
4b:95:fd:2c:83:61:ca:4d:78:ad:6d:cf:9e:9c:6f:
f4:fa:56:70:84:2d:d0:d9:6f:fb:bf:34:0b:4a:69:
75:78:ac:8e:76:7c:7c:88:f3:54:49:bf:27:31:f2:
8c:4c:aa:c3:10:9d:a5:bd:f5:bb:49:75:c2:8d:53:
6f:2f:63:3e:32:2b:0c:82:a6:35:b7:57:3b:f4:93:
7f:ff:40:25:cd:ad:90:f5:96:7b:6f:c4:73:1b:76:
13:5f:6e:5d:06:d6:7b:09:bb:68:c1:7e:ba:0e:43:
23:ba:8b:62:33:86:a8:94:5f:6f:dc:fc:91:42:7b:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:54:6B:73:78:9A:8A:1E:21:CB:CC:EB:9F:CF:5B:63:A7:83:46:80
X509v3 Authority Key Identifier:
keyid:44:46:A6:0F:F3:E5:1C:DE:D4:64:83:DF:EA:32:A6:50:92:CC:E8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REamD_PlHN7UZIPf6jKmUJLM6H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/373ac8-3762-44ad-b14a-d386dc80d8bd/1/WlRrc3iaih4hy8zrn89bY6eDRoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/373ac8-3762-44ad-b14a-d386dc80d8bd/1/REamD_PlHN7UZIPf6jKmUJLM6H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.28.0/22
Signature Algorithm: sha256WithRSAEncryption
78:16:a8:71:05:7a:e9:77:f3:78:b0:00:a0:54:b5:76:e3:09:
65:12:4a:c4:29:c7:4d:03:26:21:fc:44:0e:88:9b:f9:b4:37:
05:73:0e:13:b2:7b:63:de:9d:05:d7:17:fb:99:80:74:07:18:
4c:9b:7f:7e:4b:20:e0:c1:5f:b8:f1:7f:62:b8:11:22:96:21:
9a:e1:cc:32:2e:a4:31:25:18:3d:49:9c:60:a4:fc:3d:32:d3:
07:b2:9f:c2:4a:e3:4f:6e:30:b8:c5:8c:01:40:b8:84:2c:99:
9b:5a:01:60:62:91:a6:51:e3:78:8e:bf:dd:7f:bd:37:f7:db:
aa:b3:d5:0f:d5:f9:13:4c:c8:64:0f:84:16:e7:7d:d3:4f:b7:
88:71:d0:74:a6:c1:82:c2:3a:ef:fe:84:f1:e1:5c:d7:55:a8:
66:b2:4a:c3:de:4b:f7:6a:b7:cc:91:7b:b6:77:d8:45:8a:84:
b0:9e:f8:73:23:c3:4a:24:3d:8c:83:8c:88:aa:c8:4e:cf:67:
61:53:fb:b6:51:c7:59:58:c6:35:3a:97:08:94:35:cb:8e:9d:
9d:e7:9e:15:1b:19:85:2d:b6:b9:6f:ea:2e:f1:d7:91:6c:0c:
0f:08:72:a5:7a:08:a4:a4:53:e5:73:a8:a6:fb:8f:30:0e:91:
10:e3:67:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbYEz9DXil0VWuXaGubDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDZhNjBmZjNlNTFjZGVkNDY0ODNkZmVhMzJhNjUwOTJj
Y2U4N2UwHhcNMjQwMTAxMDAzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTU0NmI3Mzc4OWE4YTFlMjFjYmNjZWI5ZmNmNWI2M2E3ODM0NjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NpQKyQi5OZuu/Qe1aQl7DKUVylk
H9isbV8W7Be4ZFE02dHUOSmBYYowXNHUxmDlfhBWaX/m4yz29TnNF9w2gQU1B4At
8TBI70GaIqLAVXhqdqKZDoYB1wcGPOO1OEZnUXgKlDcY6WhSLzSL1UZvtzCOiDoo
z9kt4lSR9+Bze8UoXfViv+xLlf0sg2HKTXitbc+enG/0+lZwhC3Q2W/7vzQLSml1
eKyOdnx8iPNUSb8nMfKMTKrDEJ2lvfW7SXXCjVNvL2M+MisMgqY1t1c79JN//0Al
za2Q9ZZ7b8RzG3YTX25dBtZ7CbtowX66DkMjuotiM4aolF9v3PyRQnu2IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFpUa3N4mooeIcvM65/PW2Ong0aAMB8GA1UdIwQY
MBaAFERGpg/z5Rze1GSD3+oyplCSzOh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVhbURfUGxITjdVWklQZjZqS21VSkxNNkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zNzNhYzgtMzc2Mi00NGFkLWIxNGEt
ZDM4NmRjODBkOGJkLzEvV2xScmMzaWFpaDRoeTh6cm44OWJZNmVEUm9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8zNzNhYzgtMzc2Mi00NGFkLWIxNGEtZDM4NmRjODBkOGJk
LzEvUkVhbURfUGxITjdVWklQZjZqS21VSkxNNkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZgcMA0G
CSqGSIb3DQEBCwUAA4IBAQB4FqhxBXrpd/N4sACgVLV24wllEkrEKcdNAyYh/EQO
iJv5tDcFcw4Tsntj3p0F1xf7mYB0BxhMm39+SyDgwV+48X9iuBEiliGa4cwyLqQx
JRg9SZxgpPw9MtMHsp/CSuNPbjC4xYwBQLiELJmbWgFgYpGmUeN4jr/df70399uq
s9UP1fkTTMhkD4QW533TT7eIcdB0psGCwjrv/oTx4VzXVahmskrD3kv3arfMkXu2
d9hFioSwnvhzI8NKJD2Mg4yIqshOz2dhU/u2UcdZWMY1OpcIlDXLjp2d554VGxmF
Lba5b+ou8deRbAwPCHKlegikpFPlc6im+48wDpEQ42fR
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:41 2025 by rpki-client