Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/861f56-9602-4103-ad9d-42083e0c04f8/1/PaMW_vrhHmNoQCAcLxMdcAsfzZo.roa
File: PaMW_vrhHmNoQCAcLxMdcAsfzZo.roa (raw, json)
Hash identifier: OyVH81lGije/tbO3TQeB6cKwE4XqCd4FREL5HemPyNA=
Subject key identifier: 3D:A3:16:FE:FA:E1:1E:63:68:40:20:1C:2F:13:1D:70:0B:1F:CD:9A
Certificate issuer: /CN=bf076a873d848b8da36db3fc55520b400c58bb45
Certificate serial: 018326EC4D746CA1D5544BCC81BC6921CFF3
Authority key identifier: BF:07:6A:87:3D:84:8B:8D:A3:6D:B3:FC:55:52:0B:40:0C:58:BB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vwdqhz2Ei42jbbP8VVILQAxYu0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/861f56-9602-4103-ad9d-42083e0c04f8/1/PaMW_vrhHmNoQCAcLxMdcAsfzZo.roa
Signing time: Sat 10 Sep 2022 10:22:43 +0000
ROA not before: Sat 10 Sep 2022 10:22:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 45.157.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:ec:4d:74:6c:a1:d5:54:4b:cc:81:bc:69:21:cf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf076a873d848b8da36db3fc55520b400c58bb45
Validity
Not Before: Sep 10 10:22:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3da316fefae11e636840201c2f131d700b1fcd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:a5:cd:18:9b:1e:6e:6f:31:a5:dc:9a:cc:
e5:94:f2:3f:32:06:79:7f:b6:a2:13:b9:c2:7d:d1:
14:35:3d:52:ca:f5:b5:e6:e8:ee:76:a1:57:65:04:
79:73:98:07:64:fc:98:8d:78:51:7c:f9:a6:25:e2:
06:62:84:74:77:00:ce:ce:cd:a1:43:a9:df:39:03:
74:82:98:f2:90:8e:83:31:c5:7a:9b:9e:a8:d1:43:
69:fc:37:eb:fe:3b:4b:fc:89:29:1c:39:aa:44:3b:
d6:4e:1e:28:73:f5:7a:7e:e7:0c:e9:83:b5:7a:2f:
ef:15:82:3e:9d:5b:9c:7d:81:32:e1:10:ca:7e:27:
c8:6f:c7:a9:39:99:dd:0e:27:8b:ea:91:6d:d7:05:
5b:4e:eb:4f:e4:61:8b:fd:68:2d:1c:e4:8c:35:da:
d8:ed:9d:99:0b:4d:d2:df:5d:60:0b:02:2e:1c:11:
87:27:d9:96:68:c6:bf:d6:67:02:f1:cb:c6:7a:c6:
09:f3:90:55:1f:b2:6d:3a:4c:b2:b2:e5:27:11:6b:
ee:2f:f1:ae:c8:66:d6:2a:1d:82:fb:25:d5:04:5d:
ec:ae:14:71:2c:a0:d9:20:a1:e9:57:38:0f:5a:6a:
53:ae:8a:cd:e9:3a:05:f7:c0:cc:0c:25:29:ee:6a:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A3:16:FE:FA:E1:1E:63:68:40:20:1C:2F:13:1D:70:0B:1F:CD:9A
X509v3 Authority Key Identifier:
keyid:BF:07:6A:87:3D:84:8B:8D:A3:6D:B3:FC:55:52:0B:40:0C:58:BB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwdqhz2Ei42jbbP8VVILQAxYu0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/861f56-9602-4103-ad9d-42083e0c04f8/1/PaMW_vrhHmNoQCAcLxMdcAsfzZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/861f56-9602-4103-ad9d-42083e0c04f8/1/vwdqhz2Ei42jbbP8VVILQAxYu0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6b:bd:80:6a:29:8f:ce:a7:31:92:25:cc:db:7c:c2:56:b1:
04:67:bc:2b:51:f5:72:1a:a1:84:d3:8a:71:1e:15:44:ae:13:
03:51:1b:3f:87:d5:bf:63:10:e0:5c:58:af:9a:d8:f0:29:93:
2f:e0:64:eb:1a:ab:de:54:46:db:e3:3e:2e:b3:10:d4:41:ad:
63:13:77:60:eb:1f:9a:15:5a:b4:24:bf:27:93:35:0d:5c:cc:
f9:c9:ae:c4:38:f6:9e:59:ba:70:be:e2:50:97:40:11:e4:d4:
5a:78:da:7d:08:8c:91:2f:07:f2:55:eb:8d:0f:63:c8:41:e4:
4f:7a:82:d0:9b:5f:56:99:67:39:03:87:4f:21:d0:7d:15:32:
8c:31:cd:43:23:e7:fa:33:7c:87:8b:9c:b9:02:aa:d6:e8:9d:
b6:bd:22:d6:78:fa:b5:fe:a2:67:34:9d:96:76:0c:f8:df:28:
1f:ad:67:79:a4:9b:8d:54:b2:7e:c6:72:fe:9c:f2:80:e4:4f:
42:fe:8a:1a:2a:26:71:94:05:4a:e7:a9:a5:a4:b8:9b:35:19:
cb:70:22:74:d5:1e:d5:44:a7:c1:1b:f3:13:e6:72:7e:42:c0:
d9:00:b7:ab:ac:fb:aa:98:d9:b7:0e:30:ea:89:2f:8b:68:6d:
69:70:5c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:16 2025 by rpki-client