Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/WiFPEqL5aLHYDTUivn172V6ofTY.roa
File: WiFPEqL5aLHYDTUivn172V6ofTY.roa (raw, json)
Hash identifier: P8R8iHTgsq2aAzqfPAPjE/rsgzLx2Tsg79jQgj3zXxk=
Subject key identifier: 5A:21:4F:12:A2:F9:68:B1:D8:0D:35:22:BE:7D:7B:D9:5E:A8:7D:36
Certificate issuer: /CN=904567f6e6755663bd99a3eef0ded53a42004193
Certificate serial: 01856BC11A59B5C5C6D2A6BF7D8AC2758CAF
Authority key identifier: 90:45:67:F6:E6:75:56:63:BD:99:A3:EE:F0:DE:D5:3A:42:00:41:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kEVn9uZ1VmO9maPu8N7VOkIAQZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/WiFPEqL5aLHYDTUivn172V6ofTY.roa
Signing time: Sun 01 Jan 2023 05:14:55 +0000
ROA not before: Sun 01 Jan 2023 05:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 45.91.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:1a:59:b5:c5:c6:d2:a6:bf:7d:8a:c2:75:8c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=904567f6e6755663bd99a3eef0ded53a42004193
Validity
Not Before: Jan 1 05:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a214f12a2f968b1d80d3522be7d7bd95ea87d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:90:8f:a9:b4:bb:1c:fc:0b:6d:1e:95:bf:
30:ba:83:58:31:95:46:8d:39:de:ac:3e:13:da:74:
01:3f:86:7e:38:f6:40:9b:02:dc:11:ae:b2:cd:99:
bb:b8:0a:ab:f7:58:22:62:0a:21:8c:e7:94:43:85:
10:8f:3b:77:b4:f4:4a:bd:24:d6:c2:8c:d8:31:1c:
33:97:fc:a5:01:1d:b1:b7:1b:eb:32:da:fa:de:2a:
2d:8c:0b:46:eb:29:d5:c8:56:df:c4:d9:7e:d9:e0:
25:3a:1c:72:6c:c2:84:ab:46:c9:dc:0b:5c:38:ac:
e0:fc:ba:e5:e4:67:b6:3b:96:42:7f:45:8a:9c:47:
41:76:97:d1:8e:a6:d1:b7:fd:d0:2f:58:3a:3a:df:
5a:35:8e:27:e1:6d:9f:6d:9e:48:35:3c:ad:93:8a:
0c:58:97:e8:c9:fd:bb:0c:c5:85:3c:52:0c:6c:11:
17:e7:2b:ec:09:85:0f:95:15:38:f9:e9:90:3f:56:
7a:82:6d:88:75:8f:c4:fc:43:cb:62:1b:6c:54:80:
11:48:9d:f0:c7:09:63:99:90:ae:da:e6:ef:2c:a9:
71:9b:02:62:40:13:92:d3:f1:7d:0f:93:4c:a5:22:
e0:c8:d0:5d:72:65:20:f0:b7:fb:c1:fa:3e:c3:a8:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:21:4F:12:A2:F9:68:B1:D8:0D:35:22:BE:7D:7B:D9:5E:A8:7D:36
X509v3 Authority Key Identifier:
keyid:90:45:67:F6:E6:75:56:63:BD:99:A3:EE:F0:DE:D5:3A:42:00:41:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kEVn9uZ1VmO9maPu8N7VOkIAQZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/WiFPEqL5aLHYDTUivn172V6ofTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/kEVn9uZ1VmO9maPu8N7VOkIAQZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.149.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:8f:20:d8:cc:40:2b:5b:a5:4f:12:46:15:22:36:14:0e:2f:
17:d0:16:ed:55:fc:0c:01:4b:ef:0a:db:b5:5a:0d:70:00:5b:
3d:0c:c0:db:81:91:51:c5:0a:5c:50:55:75:ce:e6:a0:e3:d4:
13:5f:f9:b7:98:f2:4d:b5:43:7a:83:3d:ea:2c:77:cc:ed:78:
2d:af:22:28:bf:13:9a:2e:58:d2:b4:81:80:04:c0:d3:f2:03:
b9:b7:83:c8:81:9f:d7:bf:69:b5:1d:df:68:4c:63:72:14:c2:
ae:9b:b8:a5:46:89:3d:a3:d3:f3:2d:97:40:a1:b6:7d:a2:5e:
4f:6a:17:49:68:21:a0:f1:96:20:36:cb:81:87:ee:49:5b:5c:
ae:1e:50:98:29:39:f0:f0:83:ba:d6:e0:81:2e:8e:8e:0c:a4:
f8:5e:1c:b6:6a:dc:32:7c:61:6c:79:ee:cf:bd:69:95:12:b6:
f7:cd:22:ee:4f:d9:b9:d4:eb:bf:65:cc:4a:c9:3d:de:90:ad:
53:99:0e:c0:48:84:1a:c9:cc:98:7c:a3:4a:34:a5:8d:86:63:
a6:ec:2b:31:07:b6:d5:cc:ca:cb:1e:68:f1:80:aa:f6:aa:1c:
6d:17:ad:c9:98:4a:d4:34:7a:44:52:0c:29:18:f8:af:bc:45:
ee:6c:bf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:35:32 2025 by rpki-client