Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/wbw9TXH3qKFffmMpS0Lvxn427_U.roa
File: wbw9TXH3qKFffmMpS0Lvxn427_U.roa (raw, json)
Hash identifier: qdWA8nWSdpDsJmpyjspcey9Q1o80DDJ0reaERs4EfXk=
Subject key identifier: C1:BC:3D:4D:71:F7:A8:A1:5F:7E:63:29:4B:42:EF:C6:7E:36:EF:F5
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01856D7864AA9C21F6632F2CD46FC0B4A685
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/wbw9TXH3qKFffmMpS0Lvxn427_U.roa
Signing time: Sun 01 Jan 2023 13:14:44 +0000
ROA not before: Sun 01 Jan 2023 13:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 45.8.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:64:aa:9c:21:f6:63:2f:2c:d4:6f:c0:b4:a6:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 13:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1bc3d4d71f7a8a15f7e63294b42efc67e36eff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:c3:c7:49:df:7a:14:a1:c0:3a:fd:d6:86:
e2:3f:48:46:ca:f7:a6:51:08:61:83:66:b8:25:73:
1a:c4:bb:58:51:1b:e5:3c:02:8c:44:1a:9b:62:e6:
25:10:e6:86:e7:f5:56:a4:5b:aa:7f:95:3f:2d:f9:
37:b2:cb:32:9d:1b:b9:8f:a4:9a:8f:55:87:6f:f0:
e9:17:88:a8:f2:e4:c1:0a:27:44:c9:bd:d3:e3:d5:
dc:a8:2a:5d:93:22:12:6e:91:0e:9e:80:32:74:56:
0e:7f:f7:72:ed:e8:47:77:7d:1e:4f:2b:c7:69:93:
0f:40:f1:71:b9:e7:0a:0b:7c:c3:fe:8a:68:c0:43:
8a:29:a8:3d:8d:ed:96:dc:9b:82:a2:9e:f5:5a:a3:
ad:d2:7d:bf:0e:70:aa:b6:9e:53:56:ac:b7:c8:ad:
c0:a6:17:25:b4:86:48:ca:ef:d4:7d:a3:d6:79:a6:
ae:49:af:9d:26:e2:ce:5f:3f:7e:eb:fa:c1:b8:8c:
42:b7:86:78:fa:76:d3:20:9f:c6:4e:cb:8a:44:2d:
e5:68:c5:9f:dd:db:04:6b:d1:bb:f0:54:5b:e6:2d:
6e:db:3a:5c:f9:4e:f4:ff:bd:e2:78:a4:25:3a:3a:
2d:f8:78:50:73:16:d2:19:9b:3e:ac:d2:aa:65:fc:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BC:3D:4D:71:F7:A8:A1:5F:7E:63:29:4B:42:EF:C6:7E:36:EF:F5
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/wbw9TXH3qKFffmMpS0Lvxn427_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.219.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:06:10:18:39:f8:31:f0:9b:3e:cc:6d:2a:b6:b3:f9:56:3a:
7c:6d:f8:d3:d5:1f:b2:6d:4e:b5:c9:bd:8f:4f:1f:e0:c6:b4:
fb:47:1f:65:43:b3:dc:03:69:8d:2d:99:05:2f:d8:78:7e:71:
19:75:bd:ce:c4:da:ba:a9:e7:25:9c:03:9c:70:b4:be:af:45:
f8:38:53:12:0d:15:6e:48:3c:90:f9:cd:ee:d1:e9:8c:e2:26:
ae:a1:0d:95:89:48:17:37:31:25:75:47:80:81:9f:1b:b6:81:
35:b9:da:c9:a5:fb:b7:c4:6f:c4:64:1d:48:1d:bf:5a:55:0a:
b6:bc:63:a3:42:38:06:a3:df:0e:b2:2f:89:53:48:f6:97:5e:
59:bd:af:62:65:44:8e:e7:d6:fb:dc:da:b4:8d:f2:0a:31:0e:
58:d7:54:03:8f:b7:d1:ba:74:05:81:b9:8a:05:8b:96:22:d8:
7c:96:c3:5b:43:76:54:4d:29:2e:9c:58:18:03:40:c1:c1:20:
42:ab:80:b6:48:ff:e2:d7:42:61:a4:ae:88:8d:2a:66:5b:ca:
40:39:ac:3f:69:8b:3a:e1:f6:7a:87:0e:9b:8d:c5:6d:86:f3:
42:a8:f6:31:bd:a8:80:8e:ae:3b:2e:64:b5:2d:ef:4b:2b:ca:
d4:aa:d9:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVteGSqnCH2Yy8s1G/AtKaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNDAzOTM5OTAxN2ZhMDkzZGM4ZDUwMzc5OWY2Y2E0MDNm
MGJkMDUwHhcNMjMwMTAxMTMxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWJjM2Q0ZDcxZjdhOGExNWY3ZTYzMjk0YjQyZWZjNjdlMzZlZmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPjDx0nfehShwDr91obiP0hGyvem
UQhhg2a4JXMaxLtYURvlPAKMRBqbYuYlEOaG5/VWpFuqf5U/Lfk3sssynRu5j6Sa
j1WHb/DpF4io8uTBCidEyb3T49XcqCpdkyISbpEOnoAydFYOf/dy7ehHd30eTyvH
aZMPQPFxuecKC3zD/opowEOKKag9je2W3JuCop71WqOt0n2/DnCqtp5TVqy3yK3A
phcltIZIyu/UfaPWeaauSa+dJuLOXz9+6/rBuIxCt4Z4+nbTIJ/GTsuKRC3laMWf
3dsEa9G78FRb5i1u2zpc+U70/73ieKQlOjot+HhQcxbSGZs+rNKqZfwyTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMG8PU1x96ihX35jKUtC78Z+Nu/1MB8GA1UdIwQY
MBaAFGJAOTmQF/oJPcjVA3mfbKQD8L0FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYt
MzI1OTQ5NmU3YzVmLzEvd2J3OVRYSDNxS0ZmZm1NcFMwTHZ4bjQyN19VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lYjIzOWEtMzNjOC00ZGJkLWJjOTYtMzI1OTQ5NmU3YzVm
LzEvWWtBNU9aQVgtZ2s5eU5VRGVaOXNwQVB3dlFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjbMA0G
CSqGSIb3DQEBCwUAA4IBAQA6BhAYOfgx8Js+zG0qtrP5Vjp8bfjT1R+ybU61yb2P
Tx/gxrT7Rx9lQ7PcA2mNLZkFL9h4fnEZdb3OxNq6qeclnAOccLS+r0X4OFMSDRVu
SDyQ+c3u0emM4iauoQ2ViUgXNzEldUeAgZ8btoE1udrJpfu3xG/EZB1IHb9aVQq2
vGOjQjgGo98Osi+JU0j2l15Zva9iZUSO59b73Nq0jfIKMQ5Y11QDj7fRunQFgbmK
BYuWIth8lsNbQ3ZUTSkunFgYA0DBwSBCq4C2SP/i10JhpK6IjSpmW8pAOaw/aYs6
4fZ6hw6bjcVthvNCqPYxvaiAjq47LmS1Le9LK8rUqtkC
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:39 2025 by rpki-client