Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/wRBJ_chDorISJS0YB1PX9lr2jAk.roa
File: wRBJ_chDorISJS0YB1PX9lr2jAk.roa (raw, json)
Hash identifier: IZSxV1DZThMKafP1JWbM6uo5XMnlxjbtlkumDUCXrpc=
Subject key identifier: C1:10:49:FD:C8:43:A2:B2:12:25:2D:18:07:53:D7:F6:5A:F6:8C:09
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 018313F0AD1E007FE3BD5168D04E4AB8C7A8
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/wRBJ_chDorISJS0YB1PX9lr2jAk.roa
Signing time: Tue 06 Sep 2022 17:54:43 +0000
ROA not before: Tue 06 Sep 2022 17:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 45.8.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:f0:ad:1e:00:7f:e3:bd:51:68:d0:4e:4a:b8:c7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Sep 6 17:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c11049fdc843a2b212252d180753d7f65af68c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:9b:2e:1e:06:64:c4:89:ed:62:fa:20:60:
ff:a1:e2:db:e2:a8:55:43:15:bb:9a:2e:37:56:33:
81:3a:37:8c:24:d3:1e:2b:70:d2:03:89:4d:2b:ba:
e0:e9:a8:96:c7:d0:b9:7d:79:28:05:68:dd:40:71:
a9:6f:29:ca:d9:c9:32:7c:03:a8:f8:72:46:7c:60:
31:69:61:fd:52:50:9a:b1:20:b6:74:c9:dc:7c:62:
60:3b:a1:d5:c0:a8:e5:44:40:a1:1a:6c:86:ac:8b:
59:79:a4:c7:d4:39:e6:ba:32:7f:e3:ba:56:3a:fc:
9e:fe:ab:f9:b4:be:d1:66:fc:0f:07:98:7d:71:47:
09:73:a8:8c:6a:53:f4:94:02:e6:27:98:21:13:d0:
86:1f:01:a8:cf:18:48:b6:f6:f3:de:89:dc:0c:14:
a1:e2:6f:34:99:6b:b2:42:d4:02:de:f7:f9:9a:cc:
9e:f1:39:26:44:95:79:e5:93:9f:64:ef:50:fc:62:
97:a1:1c:20:bc:93:d4:f6:42:11:18:73:7d:8a:f2:
f9:fb:5b:9f:6e:da:2d:3d:20:f8:0c:0f:c9:a0:69:
ac:54:d7:d1:d1:b2:aa:f0:b1:90:73:8a:7a:3e:30:
c0:4a:12:b5:29:af:56:3a:98:17:a9:cc:14:4c:d1:
c8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:10:49:FD:C8:43:A2:B2:12:25:2D:18:07:53:D7:F6:5A:F6:8C:09
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/wRBJ_chDorISJS0YB1PX9lr2jAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.218.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ae:8a:f9:30:89:38:6c:a1:97:77:03:c2:aa:a1:af:03:98:
ff:bd:e8:67:69:77:ba:04:0e:21:f9:7e:17:5a:01:69:f2:de:
91:25:60:f6:86:1e:5f:8b:e4:b2:49:50:f2:5c:23:c4:25:50:
0c:85:ac:3d:cc:b0:45:c1:5a:0c:1e:84:dc:7b:4c:92:9a:4f:
96:a8:40:af:e5:a7:45:72:ce:ec:d7:e4:ec:21:af:d4:17:e9:
15:46:cc:84:0d:0d:a5:2a:d1:0f:8d:fe:f4:a5:e2:91:f2:c1:
83:02:74:8c:a5:0d:4b:76:2d:81:79:d5:f0:7a:4c:90:1a:87:
b5:56:8c:78:02:c0:62:b0:c1:3a:81:66:be:be:7b:6e:9d:93:
57:6e:97:87:d7:8f:47:e2:42:0d:b0:c1:5e:db:1e:66:3b:bb:
f6:4d:74:97:34:7d:94:a5:68:af:7b:3a:b5:48:a2:a9:e3:91:
ec:82:a7:3b:94:70:c4:02:ad:5d:25:19:62:63:ad:12:1a:cc:
e6:c4:0e:96:75:3b:e4:41:e0:24:05:a9:28:6c:c0:10:e0:0d:
48:a4:d5:86:c6:44:38:5f:98:c5:e9:c7:79:a1:42:d0:3a:d6:
de:72:b8:c1:f4:73:00:1f:f6:58:db:34:d8:1a:bc:78:a2:e4:
cf:72:c4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:49 2025 by rpki-client