Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Wfe4sEm2bWOmdZIq-KwD52LepNo.roa
File: Wfe4sEm2bWOmdZIq-KwD52LepNo.roa (raw, json)
Hash identifier: EprbsIHuI514wFw/UsuqemgU2erlf+2Rj7nCxBEz3OM=
Subject key identifier: 59:F7:B8:B0:49:B6:6D:63:A6:75:92:2A:F8:AC:03:E7:62:DE:A4:DA
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369DC2A3FF4CB9FD72DF1690AA83901
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Wfe4sEm2bWOmdZIq-KwD52LepNo.roa
Signing time: Wed 01 Jan 2025 19:48:47 +0000
ROA not before: Wed 01 Jan 2025 19:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214200
IP address blocks: 45.130.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:dc:2a:3f:f4:cb:9f:d7:2d:f1:69:0a:a8:39:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59f7b8b049b66d63a675922af8ac03e762dea4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a2:e4:a0:9f:30:7b:01:34:af:49:f2:65:ba:
d9:f3:db:66:66:cb:db:c1:fb:99:ee:da:da:f0:df:
79:31:36:79:c3:83:14:0d:3a:67:f3:e6:42:60:f0:
14:ed:ef:e1:d6:2b:63:03:63:35:f7:a8:ba:09:73:
16:35:1f:2f:20:79:19:64:18:1c:80:2a:a9:89:ae:
83:ff:dd:fc:aa:ef:e0:4a:5b:b1:88:34:b5:5b:92:
59:96:d3:7f:7f:a9:b5:48:a4:c7:83:18:9f:1d:fc:
27:be:a2:b1:e8:fd:43:6a:19:ea:fc:ef:8b:75:74:
f0:cd:b8:87:a8:b8:6b:1c:7f:8c:18:7c:f7:42:a3:
68:89:c4:b8:56:a1:c7:a6:66:9d:fb:fe:bf:d2:b3:
0f:60:25:08:c5:9b:18:70:f9:2a:0f:ae:eb:fc:d2:
89:11:91:b5:12:34:a3:b1:a0:de:52:75:e8:aa:f8:
ca:82:8d:31:29:8c:74:b0:42:7e:29:ad:fc:18:5e:
0c:a8:ab:2f:62:f8:ec:62:05:35:dd:c4:3c:4f:27:
10:cb:1b:42:5c:67:fc:50:71:01:42:5a:15:6a:45:
b2:a2:e0:d1:e6:82:ad:20:7d:34:ac:bd:28:d8:d2:
17:e7:67:24:7a:0b:e4:d5:f8:2e:0b:10:d3:59:76:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F7:B8:B0:49:B6:6D:63:A6:75:92:2A:F8:AC:03:E7:62:DE:A4:DA
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Wfe4sEm2bWOmdZIq-KwD52LepNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:78:39:65:56:c9:73:81:3f:b0:c9:3e:08:40:88:3d:96:ea:
3f:ae:7b:6f:8e:d1:fb:66:d8:1c:14:0c:96:c4:d7:72:37:12:
4b:3f:e3:5a:64:82:4e:40:38:89:61:63:a3:b5:51:e8:16:f4:
2f:b6:54:4c:b9:28:6e:26:b7:c7:db:d3:38:38:11:2f:74:c9:
bc:d0:51:8b:ef:59:e0:ec:e3:17:2d:98:95:25:29:7f:f8:7a:
05:1f:f3:e0:38:1e:c7:05:4c:c3:86:e8:0a:39:71:db:be:62:
83:f3:5d:9c:85:fc:29:83:4a:61:7c:f6:16:15:17:99:86:19:
d5:16:67:bf:ee:c1:66:62:7f:6e:57:c1:e2:e8:ea:50:e2:61:
5b:7e:9a:23:34:ad:9a:7a:3e:7b:36:ce:09:eb:f9:f0:61:43:
3e:88:c0:f3:e1:34:b8:b8:89:1b:23:16:0e:54:70:40:a3:6e:
5f:06:6f:70:9f:35:48:b1:11:20:78:b6:7c:96:c9:8f:7d:e9:
96:c4:9b:d6:1c:41:ff:74:c1:b1:3d:07:ac:e3:52:b8:81:68:
4b:6d:30:1d:6e:67:19:93:47:95:9f:7d:e1:95:72:87:66:e3:
27:54:fb:03:59:ba:8a:ea:a6:26:3a:d5:c0:d2:48:77:82:62:
79:da:94:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjadwqP/TLn9ct8WkKqDkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjUwMTAxMTk0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWY3YjhiMDQ5YjY2ZDYzYTY3NTkyMmFmOGFjMDNlNzYyZGVhNGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaLkoJ8wewE0r0nyZbrZ89tmZsvb
wfuZ7tra8N95MTZ5w4MUDTpn8+ZCYPAU7e/h1itjA2M196i6CXMWNR8vIHkZZBgc
gCqpia6D/938qu/gSluxiDS1W5JZltN/f6m1SKTHgxifHfwnvqKx6P1Dahnq/O+L
dXTwzbiHqLhrHH+MGHz3QqNoicS4VqHHpmad+/6/0rMPYCUIxZsYcPkqD67r/NKJ
EZG1EjSjsaDeUnXoqvjKgo0xKYx0sEJ+Ka38GF4MqKsvYvjsYgU13cQ8TycQyxtC
XGf8UHEBQloVakWyouDR5oKtIH00rL0o2NIX52ckegvk1fguCxDTWXa0pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFn3uLBJtm1jpnWSKvisA+di3qTaMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvV2ZlNHNFbTJiV09tZFpJcS1Ld0Q1MkxlcE5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYKVMA0G
CSqGSIb3DQEBCwUAA4IBAQAKeDllVslzgT+wyT4IQIg9luo/rntvjtH7ZtgcFAyW
xNdyNxJLP+NaZIJOQDiJYWOjtVHoFvQvtlRMuShuJrfH29M4OBEvdMm80FGL71ng
7OMXLZiVJSl/+HoFH/PgOB7HBUzDhugKOXHbvmKD812chfwpg0phfPYWFReZhhnV
Fme/7sFmYn9uV8Hi6OpQ4mFbfpojNK2aej57Ns4J6/nwYUM+iMDz4TS4uIkbIxYO
VHBAo25fBm9wnzVIsREgeLZ8lsmPfemWxJvWHEH/dMGxPQes41K4gWhLbTAdbmcZ
k0eVn33hlXKHZuMnVPsDWbqK6qYmOtXA0kh3gmJ52pRQ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:22 2025 by rpki-client