Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa
File: WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa (raw, json)
Hash identifier: 2eqZynI8QAeqviBK64M0ctiXcb1WfCdmlsqvsre2oAM=
Subject key identifier: 58:31:19:DD:96:83:69:CD:6B:1D:73:88:4E:8D:18:D3:F8:00:D5:60
Certificate issuer: /CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Certificate serial: 019422FC045CF33D748865ADEEA5F16EFA83
Authority key identifier: 4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa
Signing time: Wed 01 Jan 2025 17:48:49 +0000
ROA not before: Wed 01 Jan 2025 17:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202208
IP address blocks: 45.154.224.0/22 maxlen: 22
45.154.224.0/23 maxlen: 23
45.154.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:04:5c:f3:3d:74:88:65:ad:ee:a5:f1:6e:fa:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcbef06ad05fd6e6e7e7b1084cb1d7d65e6426f
Validity
Not Before: Jan 1 17:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=583119dd968369cd6b1d73884e8d18d3f800d560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:d1:a2:be:6e:ea:93:d3:7a:f0:2e:be:db:
6c:a4:eb:dc:84:72:03:00:1b:d2:9d:e5:a2:65:f2:
a5:0d:51:82:d4:4d:b1:80:88:66:28:c9:12:3d:ab:
21:60:15:11:e5:ff:54:cb:98:b5:02:75:ea:7d:07:
16:ee:20:bb:cc:59:27:07:7e:52:e6:6b:12:42:59:
99:af:cf:89:6a:5b:9c:28:5f:9c:67:c6:4a:0d:f6:
73:cf:b8:df:dc:81:48:f6:8d:9a:e0:a6:7b:b3:e0:
c3:82:cc:dd:e2:4f:08:50:d8:a5:8e:18:96:6c:57:
e1:83:3a:3d:57:87:c9:e2:9d:3f:5e:83:38:a5:52:
24:1f:c5:fa:ba:2c:9a:65:a1:f6:48:d5:d4:80:39:
e1:2e:12:0a:72:8e:71:ba:91:6a:1f:3a:7e:9f:c3:
0c:d4:83:cd:0d:ec:50:33:68:86:41:c6:48:c1:86:
a4:68:31:e7:b9:e1:76:b3:55:f4:da:f2:58:d4:54:
4e:1b:58:5d:48:2b:63:d9:37:87:86:41:99:dc:84:
ae:88:96:77:a3:db:5a:d5:93:ee:40:d3:e4:c7:a3:
a2:53:5c:e0:5b:33:6e:1f:de:72:4c:7a:62:00:9c:
01:15:fd:bc:18:bf:cc:6b:3c:cb:07:83:12:53:8f:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:31:19:DD:96:83:69:CD:6B:1D:73:88:4E:8D:18:D3:F8:00:D5:60
X509v3 Authority Key Identifier:
keyid:4D:CB:EF:06:AD:05:FD:6E:6E:7E:7B:10:84:CB:1D:7D:65:E6:42:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcvvBq0F_W5ufnsQhMsdfWXmQm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/WDEZ3ZaDac1rHXOITo0Y0_gA1WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2a6eaa-e437-43bc-972e-3e3bfaa190df/1/TcvvBq0F_W5ufnsQhMsdfWXmQm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.224.0/22
Signature Algorithm: sha256WithRSAEncryption
18:01:56:95:05:d3:c0:61:f1:96:be:58:ce:be:95:79:7d:a3:
31:1f:dd:fc:1d:a6:77:5d:34:53:fd:25:49:60:ea:33:f4:c0:
7e:35:98:0d:80:6f:52:57:15:4e:c5:9e:26:a4:b0:07:6a:8d:
32:87:81:59:66:31:37:2a:e9:b9:7f:c0:fc:b5:69:3a:ca:98:
6f:db:8c:2a:3f:7d:d1:a3:6d:e2:ff:23:ac:8f:98:ab:71:02:
57:ae:bd:cf:cd:e7:6b:a2:62:5b:46:0d:ea:6d:1a:67:98:cd:
5a:8e:21:4b:8b:f7:de:d6:61:e4:a2:19:e8:60:00:2a:ed:c9:
15:19:69:b3:a8:8c:b3:f3:a8:cb:13:aa:8e:e9:2b:05:41:b2:
87:18:d5:73:25:d1:14:15:fc:89:96:c3:45:69:2c:af:84:cf:
a6:4b:22:ac:0c:27:68:7c:48:df:3f:59:ee:ed:d1:80:1f:4c:
ea:ee:3f:12:72:14:8d:b1:42:b3:d1:eb:59:e3:ea:65:de:af:
b5:8f:1d:42:2f:19:e8:27:e9:c1:7e:b8:1e:66:85:44:c9:95:
58:f3:d6:8c:5b:03:4a:7d:50:7f:67:63:89:54:88:61:ae:9c:
9d:b5:f7:14:54:1d:38:2e:02:89:bc:dc:8b:3d:4c:19:f6:1c:
7d:06:d7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:20:43 2025 by rpki-client