Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/kfww1dGbJxM7SZR_q5E4l6ILXvI.roa
File: kfww1dGbJxM7SZR_q5E4l6ILXvI.roa (raw, json)
Hash identifier: 00rjQkYBujgcEinIIy4V9tMPi2mCFc8Bh3bBV9FpZJ0=
Subject key identifier: 91:FC:30:D5:D1:9B:27:13:3B:49:94:7F:AB:91:38:97:A2:0B:5E:F2
Certificate issuer: /CN=787650d0951529b1a817232c12c42e49b889e1b8
Certificate serial: 018FA488D72F633D7C0CD72BCBCF61988FDF
Authority key identifier: 78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/kfww1dGbJxM7SZR_q5E4l6ILXvI.roa
Signing time: Thu 23 May 2024 08:19:42 +0000
ROA not before: Thu 23 May 2024 08:19:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215238
IP address blocks: 45.150.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:88:d7:2f:63:3d:7c:0c:d7:2b:cb:cf:61:98:8f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787650d0951529b1a817232c12c42e49b889e1b8
Validity
Not Before: May 23 08:19:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91fc30d5d19b27133b49947fab913897a20b5ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:01:66:2b:6f:6d:f9:3a:a7:ec:49:16:4b:22:
81:b0:8a:b7:35:e6:30:b0:0f:1f:b4:55:d8:56:a3:
3e:9c:13:a6:60:8e:7b:a2:aa:a0:40:4e:ca:cf:5d:
87:d7:23:39:c8:40:6e:a2:59:e2:f0:b7:66:a7:f5:
c0:42:20:c5:02:24:b7:5e:42:5a:e6:58:4b:50:43:
09:c1:c3:35:0c:3a:a4:80:3f:c7:05:7d:5f:db:90:
f6:6f:93:46:75:ed:cd:10:00:e5:ad:73:e4:af:1a:
8d:74:03:ed:f7:aa:d7:ef:68:26:5c:e8:57:69:d1:
fc:20:34:24:ac:36:5b:78:dd:f0:73:e0:22:c5:ee:
67:ae:8f:f0:0c:c7:52:fc:90:9d:7c:68:ab:03:3e:
37:b2:a3:1a:85:57:ea:6f:fa:61:10:07:1a:aa:c4:
16:5c:ad:36:7c:69:c3:b2:55:44:a7:b7:45:59:5a:
52:f7:c8:42:19:c0:ea:5f:03:0d:ee:c8:55:cd:c5:
20:85:1f:d1:b8:a2:2e:49:ad:64:cc:58:33:cb:21:
0e:c2:54:cd:94:70:62:03:0a:7e:2b:c8:31:a4:07:
03:57:79:c6:ce:5d:e8:2f:1f:72:10:60:a7:53:93:
cc:81:d6:1a:bd:9a:3e:9f:e0:81:b9:a4:32:14:87:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FC:30:D5:D1:9B:27:13:3B:49:94:7F:AB:91:38:97:A2:0B:5E:F2
X509v3 Authority Key Identifier:
keyid:78:76:50:D0:95:15:29:B1:A8:17:23:2C:12:C4:2E:49:B8:89:E1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/kfww1dGbJxM7SZR_q5E4l6ILXvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0735e3-00aa-405d-89bb-96a404c790b7/1/eHZQ0JUVKbGoFyMsEsQuSbiJ4bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.149.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b6:80:da:9a:a0:11:ac:62:34:eb:75:c2:af:19:be:86:40:
88:30:e8:bd:45:06:09:99:5d:ed:cb:ba:13:f6:c5:ee:e8:50:
7a:ae:42:81:92:f6:a1:4f:72:f3:49:50:5e:d5:7b:ae:83:81:
6a:ed:8b:a9:0e:27:dc:e3:bf:9c:e5:16:8f:d1:2a:0d:44:76:
95:48:7b:65:55:55:dc:09:2a:98:bc:a7:f3:1e:0d:15:78:30:
7e:9e:23:7d:ac:69:81:e4:11:37:7c:b3:23:a9:d1:43:16:4c:
c4:32:7b:ad:ec:66:2a:0b:45:06:db:08:c1:01:9b:05:47:c7:
ea:2c:1c:45:ec:65:f6:07:2e:76:f8:aa:68:5d:6a:d1:80:6d:
48:25:b7:e7:48:c0:de:72:09:d7:72:b2:fe:85:dc:29:fb:dc:
f5:77:7f:40:4d:47:0e:b1:2c:26:4c:1b:45:74:b6:81:09:f7:
bc:30:bc:98:e6:d1:92:e6:bb:4e:cf:21:cf:8f:31:56:a2:8b:
ae:23:f2:5d:1f:29:c8:26:d4:3f:76:bf:c9:ad:d9:c0:76:4a:
9d:9e:92:5a:f8:2f:4c:00:5c:2a:2a:a9:8b:18:e6:c7:4a:04:
7a:33:4a:78:ce:b5:24:26:0c:4e:98:ec:7b:38:ae:09:bf:14:
68:1c:2c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:17 2025 by rpki-client