Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/W4DOZ56K8U2R0OOrJXjuka5G27E.roa
File: W4DOZ56K8U2R0OOrJXjuka5G27E.roa (raw, json)
Hash identifier: Hh1VMXH+0iyojFJrYDXadYhj2x6t8vxfCizKWDidMgI=
Subject key identifier: 5B:80:CE:67:9E:8A:F1:4D:91:D0:E3:AB:25:78:EE:91:AE:46:DB:B1
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018CC795222299F3B0D407964CF058109811
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/W4DOZ56K8U2R0OOrJXjuka5G27E.roa
Signing time: Tue 02 Jan 2024 00:31:28 +0000
ROA not before: Tue 02 Jan 2024 00:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212219
IP address blocks: 45.147.46.0/24 maxlen: 24
45.136.6.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:22:22:99:f3:b0:d4:07:96:4c:f0:58:10:98:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 00:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b80ce679e8af14d91d0e3ab2578ee91ae46dbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fe:83:16:04:24:b7:8f:e2:63:87:39:f1:9f:
51:cd:33:27:15:77:6f:80:86:df:d0:de:8d:53:d1:
da:7d:74:04:12:af:29:69:45:d4:5f:53:42:f5:09:
0c:cc:36:21:1c:6e:a3:6f:82:4f:4e:85:42:cb:22:
98:bb:48:73:ec:d4:c1:f0:e9:43:e6:1d:1f:fb:3d:
2f:98:14:f3:5e:48:da:e4:ee:61:7d:57:be:77:1b:
15:db:d2:ae:f5:6c:33:0c:0f:87:8a:af:7c:a9:94:
56:8a:87:00:85:72:91:12:74:e7:b1:a9:e6:18:61:
3a:6c:0a:a2:2b:34:43:aa:a2:13:bb:4c:ef:61:34:
e5:ea:97:ae:1a:a3:fc:a4:33:b6:20:d1:52:6a:e3:
28:75:6a:9b:94:ba:3d:bf:34:88:8e:ee:20:1b:bf:
38:2c:c4:79:ab:75:bc:e4:bb:d2:c7:52:f8:e4:2d:
8e:d5:2d:88:37:cf:aa:27:1b:95:8c:87:20:4d:f2:
59:1c:11:d7:14:70:72:f5:04:5f:f3:a3:7a:ec:75:
27:df:56:f1:87:42:3d:44:08:0d:a4:88:98:ab:e2:
09:14:5a:cc:ac:58:b1:8f:13:5b:74:60:b5:3e:27:
4f:2d:7e:28:43:71:91:06:3e:a3:14:07:62:41:d6:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:80:CE:67:9E:8A:F1:4D:91:D0:E3:AB:25:78:EE:91:AE:46:DB:B1
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/W4DOZ56K8U2R0OOrJXjuka5G27E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.6.0/24
45.141.151.0/24
45.147.46.0/24
Signature Algorithm: sha256WithRSAEncryption
69:54:54:8d:9e:eb:62:c7:6e:01:7c:e4:59:bc:1b:ba:ca:5b:
ba:34:d3:30:e5:75:ee:aa:77:c3:3b:a9:94:cb:09:cf:16:36:
07:3a:09:e8:83:a6:1c:e8:ee:7c:fd:23:6c:bc:a8:47:5e:8f:
d4:6c:c4:ad:30:13:47:6e:92:d0:d4:ae:9f:55:41:55:c9:bd:
3b:71:ba:6a:98:c4:e7:a6:58:c7:2c:4d:f1:f5:36:01:29:19:
0d:c9:40:48:da:5e:b4:98:9c:b4:28:0f:c4:83:3e:2e:0c:33:
64:38:05:66:d7:23:f2:78:d0:99:01:e5:ac:03:6b:93:df:4e:
0a:38:15:09:b4:89:da:a1:22:bf:9d:18:ea:17:33:aa:70:c8:
7d:1f:f0:69:d4:ee:6b:fd:57:bc:04:fe:17:97:66:e5:22:a0:
c4:aa:66:51:ca:31:f3:28:25:92:b0:ac:98:d3:6c:9f:82:32:
00:e8:eb:75:f5:f0:48:65:20:5b:c1:95:89:02:e5:6f:9e:56:
77:29:5f:5d:9a:f8:db:c1:f8:c6:1f:36:5b:9d:29:f4:8b:3d:
88:be:69:fb:97:32:29:fb:eb:0c:21:06:ec:a4:e9:bb:e8:7f:
e6:00:55:b9:32:54:f6:00:ca:44:9b:ba:8c:4e:3a:57:30:3a:
f9:7f:64:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:48 2025 by rpki-client