Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/iWG0e2p_lpA9oY1P-xWysNlatDg.roa
File: iWG0e2p_lpA9oY1P-xWysNlatDg.roa (raw, json)
Hash identifier: 1EOUOTHb8q8DiEWcZ1rAlwxPmA3RHmN7wnrxIrzvh0Y=
Subject key identifier: 89:61:B4:7B:6A:7F:96:90:3D:A1:8D:4F:FB:15:B2:B0:D9:5A:B4:38
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018C2B24323EA2AA2D436DE5354E85CF7141
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/iWG0e2p_lpA9oY1P-xWysNlatDg.roa
Signing time: Sat 02 Dec 2023 15:27:21 +0000
ROA not before: Sat 02 Dec 2023 15:27:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.201.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2b:24:32:3e:a2:aa:2d:43:6d:e5:35:4e:85:cf:71:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Dec 2 15:27:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8961b47b6a7f96903da18d4ffb15b2b0d95ab438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:64:6d:3a:b2:39:a2:01:87:15:4d:4f:48:88:
10:4c:cc:a5:f9:56:e0:97:48:37:a6:a6:d0:2a:ca:
6b:30:f1:19:64:7d:ac:73:f6:f5:3a:e1:fc:87:72:
03:17:5c:af:83:23:71:dc:dc:18:24:7a:51:06:c5:
75:4d:c6:ba:09:e1:c0:fe:ab:80:6c:0a:3a:67:8c:
f7:16:02:1c:0b:f0:5d:8a:d5:aa:c0:2b:9f:67:19:
9e:71:36:72:9a:5c:3e:84:5c:7b:60:cf:b8:3c:a8:
e6:22:87:55:d4:29:e8:61:1e:a2:db:46:93:6d:11:
90:ce:db:fc:85:cb:f4:8e:aa:f7:d3:a3:e3:c1:61:
0a:bd:6c:ad:c4:bb:3a:00:7f:e5:1b:e4:b1:92:88:
a9:aa:19:ed:7c:06:73:46:c4:cd:e9:dd:86:8f:ee:
0a:19:3b:ef:ba:0c:48:9d:ac:53:d1:82:c1:34:b4:
89:cd:92:15:24:5e:eb:4e:77:36:4d:b8:73:2e:7b:
60:cc:04:c2:69:43:68:91:9a:58:8b:3f:41:c1:86:
41:52:9b:b3:d2:85:d0:56:62:48:b0:05:bc:43:6c:
39:f2:96:29:35:31:6d:1e:63:a4:5a:43:c6:eb:a9:
0f:b5:cb:10:ff:6c:7d:dd:4c:a0:75:6a:9e:2e:42:
a9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:61:B4:7B:6A:7F:96:90:3D:A1:8D:4F:FB:15:B2:B0:D9:5A:B4:38
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/iWG0e2p_lpA9oY1P-xWysNlatDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.150.0/24
77.83.201.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7b:22:2b:8e:70:cd:30:63:70:4c:60:ec:80:99:2c:1b:a6:
64:79:a0:08:c4:a2:47:af:23:45:01:6f:7f:d4:a8:3b:c1:61:
ae:f2:09:d3:3f:93:ae:23:0c:0c:f4:4b:24:f1:44:e6:82:0b:
72:af:8f:76:6a:7e:43:94:11:ce:10:95:ca:a9:bd:49:54:18:
51:8e:0c:8f:c5:32:3e:48:32:33:65:dc:6e:47:2b:93:7f:4d:
68:fb:6f:6e:b9:5c:14:e4:f4:84:c6:52:4c:44:a0:0d:c8:b1:
08:cb:75:26:4e:a7:6b:12:79:a6:2d:c1:2b:b3:c8:4c:24:a1:
17:2b:5c:fb:7a:cc:77:58:15:9b:2d:f6:ed:b7:cb:4e:a9:ff:
62:92:89:7c:f2:f6:96:10:3a:07:b4:0d:71:42:4d:1e:7e:9c:
36:1d:49:88:39:34:4e:90:2b:9e:7c:fb:06:81:c1:d5:90:72:
82:9b:4a:68:06:26:99:41:e5:d6:2b:10:bd:0d:6b:cb:a0:1a:
1e:76:7d:cb:46:09:f6:93:d3:79:d7:f8:ac:c1:86:3a:8b:bc:
98:eb:e8:81:a4:0a:43:43:fa:07:45:4b:89:d1:68:94:3e:89:
50:31:fe:c1:2e:d2:44:e1:35:87:e4:0f:cc:59:95:63:59:9c:
c6:de:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:45 2025 by rpki-client