Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa
File: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (raw, json)
Hash identifier: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=
Subject key identifier: C1:F7:01:E2:60:27:16:3D:D0:53:59:3E:52:8A:83:EC:B3:47:DA:4B
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 01942821545CB9A90E00F2CC489934C89D16
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa
Signing time: Thu 02 Jan 2025 17:47:40 +0000
ROA not before: Thu 02 Jan 2025 17:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42692
IP address blocks: 45.148.20.0/24 maxlen: 24
45.148.22.0/24 maxlen: 24
45.148.23.0/24 maxlen: 24
2a0f:2a04::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:21:54:5c:b9:a9:0e:00:f2:cc:48:99:34:c8:9d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Jan 2 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1f701e26027163dd053593e528a83ecb347da4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7d:0b:f0:ee:57:90:0a:b3:8f:fe:2c:11:a6:
4a:27:21:54:8b:0a:ce:8b:33:21:fd:c2:db:5d:34:
55:e6:69:a7:b0:de:a6:b6:c1:c8:52:1a:bd:3c:73:
2c:52:7d:31:c7:e0:a8:aa:ae:9f:e5:0c:8d:68:aa:
22:cf:0a:11:f8:9e:81:42:d7:15:ab:fa:3c:29:4f:
c4:9a:e4:ce:50:a7:16:3b:6e:7d:cc:3b:3a:86:ea:
85:a3:a7:d0:fa:75:6d:26:68:41:fb:da:29:42:93:
6f:5b:6b:66:ec:b5:2d:8a:e3:bc:32:97:30:80:a9:
e6:f7:d6:38:9a:aa:4e:b6:30:da:12:85:bd:5b:ad:
dc:af:f8:2c:ce:7d:bf:52:ed:92:09:df:7a:f6:a4:
1d:fa:d8:64:3a:f0:7f:c4:9e:b4:a0:7b:79:38:09:
d0:4f:fa:67:7b:db:11:80:0f:7f:4a:dc:49:24:81:
a3:ac:fc:2b:b4:44:1b:76:34:f5:e9:b4:b2:38:27:
be:f4:7e:50:3b:a0:10:d3:4d:eb:3e:f6:ae:22:7c:
1b:30:9a:6a:49:72:e6:76:0c:b6:c6:70:47:54:32:
dd:69:9c:6e:53:f6:9c:72:72:4d:b2:bf:b4:62:c4:
90:b3:4f:03:4e:e2:6f:6d:f2:be:f8:58:e3:6f:be:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F7:01:E2:60:27:16:3D:D0:53:59:3E:52:8A:83:EC:B3:47:DA:4B
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.20.0/24
45.148.22.0/23
IPv6:
2a0f:2a04::/32
Signature Algorithm: sha256WithRSAEncryption
07:7e:b5:0a:11:30:df:f9:71:0f:e9:e6:1d:e5:ca:11:a0:ee:
5b:a5:a0:f3:01:55:e3:a8:0c:36:b6:89:a2:59:18:f7:ae:3b:
92:56:f4:97:4d:e8:7e:c1:57:c9:55:60:ad:0f:a5:c4:7c:a9:
65:1a:8a:7e:2f:6d:dc:d3:b6:d2:ed:29:e8:0c:90:7a:16:12:
2d:83:4d:e7:d3:05:df:3e:59:25:1f:e9:71:0d:2b:6c:3b:9f:
6c:69:e3:cd:a5:37:a7:7d:fd:e5:3b:27:ce:9e:2b:ac:e8:60:
bc:53:bc:50:cf:7d:c7:8e:c7:42:59:cf:ee:49:6d:eb:25:b8:
21:4b:90:ff:71:ac:b5:ed:c1:55:49:6f:78:dc:ea:77:f9:01:
9e:b0:af:20:be:82:c1:c5:c2:5e:68:fc:39:56:5e:ec:47:6d:
c7:09:b5:8a:3b:60:db:d0:5d:3a:0a:ef:f0:52:31:3c:30:3d:
24:24:9f:6b:8d:f4:a7:95:5e:57:d1:87:77:c4:67:a6:cb:86:
2a:92:c4:8e:a9:5b:f2:52:68:7d:32:2f:3d:b9:a9:f7:11:83:
bc:f0:e5:8f:67:5b:62:34:d6:04:d5:1d:21:9e:43:04:e9:d8:
93:09:84:74:7f:f7:de:fa:94:c8:6f:fd:aa:c7:a0:6d:d7:18:
5e:fc:69:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:54 2025 by rpki-client