Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/Wr_cGwovs4hrCXjI73VPFNf6I50.roa
File: Wr_cGwovs4hrCXjI73VPFNf6I50.roa (raw, json)
Hash identifier: Ox56pxAts7e/ov2UCln9+gvysNEvadwccRcYa4+ON6I=
Subject key identifier: 5A:BF:DC:1B:0A:2F:B3:88:6B:09:78:C8:EF:75:4F:14:D7:FA:23:9D
Certificate issuer: /CN=c8d02a9a3a3338ae63d484ef3006b8ad6eafaa1a
Certificate serial: 018CC801168C237AE25DB882802A143087A9
Authority key identifier: C8:D0:2A:9A:3A:33:38:AE:63:D4:84:EF:30:06:B8:AD:6E:AF:AA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNAqmjozOK5j1ITvMAa4rW6vqho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/Wr_cGwovs4hrCXjI73VPFNf6I50.roa
Signing time: Tue 02 Jan 2024 02:29:23 +0000
ROA not before: Tue 02 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202754
IP address blocks: 45.84.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:16:8c:23:7a:e2:5d:b8:82:80:2a:14:30:87:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d02a9a3a3338ae63d484ef3006b8ad6eafaa1a
Validity
Not Before: Jan 2 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5abfdc1b0a2fb3886b0978c8ef754f14d7fa239d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:68:76:48:c2:63:3c:6e:1a:75:b9:2f:1d:de:
f6:ac:9e:20:6e:43:28:11:60:e1:db:28:04:10:cb:
a2:4d:a3:f4:00:4c:6c:9d:c1:60:fc:39:cf:2f:c7:
c7:df:75:14:a0:50:0d:44:d2:5a:81:2d:09:77:2f:
66:fe:50:b8:8d:5d:2f:60:a0:e9:27:33:9a:cc:f7:
fa:01:2c:33:2b:38:f6:62:ca:92:40:8c:01:84:64:
49:39:70:83:65:01:ef:a4:7c:06:b1:2c:fe:20:e3:
98:7d:cb:ac:43:c1:20:03:b1:39:06:8a:b5:e8:a4:
0c:08:79:83:01:d8:9e:2e:af:75:a8:1c:27:91:89:
d0:91:89:93:35:6f:40:c3:19:84:ca:1b:f0:4a:46:
9e:5a:7b:42:9f:75:36:71:82:f3:ce:40:ad:bb:c6:
20:c4:c8:7f:e3:65:fb:94:9c:02:0e:e0:cf:d4:d8:
32:f6:36:20:ec:a1:ae:21:f4:99:83:32:4d:cf:bb:
fd:8d:da:8d:f4:9c:91:c2:38:6f:d2:5d:c5:d1:99:
3b:6c:7e:37:f0:47:60:be:16:6a:72:38:58:12:3a:
59:9b:03:91:a1:01:63:78:cb:1c:a0:72:19:7d:03:
94:eb:c2:9a:e4:6a:73:b3:24:55:49:57:d4:fe:ba:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BF:DC:1B:0A:2F:B3:88:6B:09:78:C8:EF:75:4F:14:D7:FA:23:9D
X509v3 Authority Key Identifier:
keyid:C8:D0:2A:9A:3A:33:38:AE:63:D4:84:EF:30:06:B8:AD:6E:AF:AA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNAqmjozOK5j1ITvMAa4rW6vqho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/Wr_cGwovs4hrCXjI73VPFNf6I50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/yNAqmjozOK5j1ITvMAa4rW6vqho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.48.0/22
Signature Algorithm: sha256WithRSAEncryption
53:3e:fb:ed:91:f1:6a:59:fd:9e:8b:77:2a:7b:25:77:b7:04:
f8:29:51:c1:ff:95:6c:d3:de:ad:72:2d:65:c5:6c:01:ed:fe:
96:ce:cd:d9:d4:8a:f7:77:68:04:d6:56:04:a8:66:58:66:83:
56:8b:93:7e:22:b6:4b:57:91:9b:ca:fa:a6:40:58:15:57:14:
43:d6:f4:7b:c5:a1:92:8e:8a:c3:99:9b:5c:04:56:8d:22:dc:
c5:99:d6:49:f8:70:43:30:3a:bb:aa:0f:c9:c8:1b:fe:2c:14:
61:62:57:c0:f3:a2:50:3e:93:8d:cb:2f:96:56:a8:c7:78:ce:
a4:5c:26:df:91:1f:3b:7a:08:46:ce:68:f3:fd:44:68:30:d7:
41:08:24:2a:27:e0:83:f9:13:7f:a5:ea:1b:92:a2:49:c7:e5:
be:b8:c5:71:70:71:43:e9:b8:11:44:b8:8c:47:1b:cd:98:8c:
68:73:56:b4:ee:e3:5f:a7:95:78:6e:2f:97:53:88:1e:f5:12:
a2:da:1f:f5:cb:ae:f9:3b:e6:be:df:92:ea:fb:f2:db:27:29:
9e:e1:4e:69:3e:9d:04:c9:69:0d:f8:3b:09:5b:12:cc:82:bc:
98:98:13:90:16:ad:17:ce:7c:f4:7d:1d:90:d2:47:38:60:89:
ee:fc:4d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:37:49 2025 by rpki-client