Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Wv9uHpcZClxNY3xdHcD97KaFsCE.roa
File: Wv9uHpcZClxNY3xdHcD97KaFsCE.roa (raw, json)
Hash identifier: O/ibmdB4PR96BtEyaFnPnwGsfAdv6k7W3kqo6CfhCrQ=
Subject key identifier: 5A:FF:6E:1E:97:19:0A:5C:4D:63:7C:5D:1D:C0:FD:EC:A6:85:B0:21
Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial: 01924E0C67CD8CAEB812FBBB7009363C81C2
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Wv9uHpcZClxNY3xdHcD97KaFsCE.roa
Signing time: Wed 02 Oct 2024 16:24:48 +0000
ROA not before: Wed 02 Oct 2024 16:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211680
IP address blocks: 45.156.128.0/24 maxlen: 24
45.156.129.0/24 maxlen: 24
45.156.130.0/24 maxlen: 24
185.180.140.0/24 maxlen: 24
185.180.143.0/24 maxlen: 24
185.226.196.0/24 maxlen: 24
185.226.197.0/24 maxlen: 24
2a10:3c0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4e:0c:67:cd:8c:ae:b8:12:fb:bb:70:09:36:3c:81:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Validity
Not Before: Oct 2 16:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aff6e1e97190a5c4d637c5d1dc0fdeca685b021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7d:a8:f1:38:f0:33:86:41:45:43:d5:94:c3:
fe:36:7d:ed:27:97:d7:40:68:6a:44:79:d5:29:1d:
21:f0:34:71:16:a4:cc:fc:06:e4:52:5d:bb:b1:44:
78:1f:d9:db:35:96:0f:11:6c:84:33:f2:e9:c7:7f:
08:73:77:4f:a6:4f:20:7a:65:5f:17:c2:22:c7:db:
24:7e:e6:e5:71:1e:2a:01:f7:51:f6:c5:d9:88:7c:
71:0e:15:03:82:85:b9:7c:4b:f9:d7:a0:36:20:62:
7f:31:d2:7f:54:d3:37:ca:3a:f5:5c:4f:b5:d5:f5:
69:32:5b:7a:88:05:31:30:a5:9a:e1:1c:46:32:75:
ea:39:2f:63:ba:6a:30:c0:db:ab:21:d5:91:67:7f:
7d:a9:f0:9d:4c:b5:df:cd:46:94:cd:26:61:cc:cc:
19:b1:9c:58:33:5a:27:27:33:a0:19:fc:0e:ce:7e:
30:30:d5:83:be:09:27:7d:79:27:ed:23:c3:5d:fe:
55:d6:b0:8b:75:3f:47:5a:ee:24:83:82:37:23:4d:
c3:04:61:fd:2e:4c:63:09:74:68:93:75:c0:8a:82:
ee:a1:2b:a5:2c:a5:db:42:48:4b:2d:9d:23:24:29:
92:d4:bf:fd:3f:48:3f:4b:fe:79:44:95:81:99:c0:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:6E:1E:97:19:0A:5C:4D:63:7C:5D:1D:C0:FD:EC:A6:85:B0:21
X509v3 Authority Key Identifier:
keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Wv9uHpcZClxNY3xdHcD97KaFsCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.128.0-45.156.130.255
185.180.140.0/24
185.180.143.0/24
185.226.196.0/23
IPv6:
2a10:3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
59:4a:6f:26:87:42:54:5f:b9:9a:d9:d3:f5:90:50:9c:0c:45:
1f:e3:08:d0:55:eb:f2:d3:0f:d0:ef:0f:df:a6:28:88:a9:c1:
84:68:40:c2:a9:dd:6f:c0:ed:92:c0:95:53:52:06:01:bb:f0:
fe:89:7f:81:f5:f8:0b:14:99:f2:c5:69:46:74:5b:3e:4a:1e:
10:c0:cc:b9:90:02:0e:98:a6:e7:2b:e9:2b:88:4f:a2:10:9f:
91:69:2b:38:c9:6c:9c:ec:85:bf:7d:37:34:ed:78:6c:ed:c7:
9c:fe:99:2a:ee:1a:ac:0d:61:c5:c0:c5:92:66:0b:21:3c:b0:
0b:2a:c1:82:e4:e5:b3:ca:f1:8a:98:05:47:a3:a3:d4:6e:05:
88:01:aa:ed:fe:83:9f:39:34:61:7d:0e:75:1b:c6:10:29:03:
44:f0:47:bd:40:d3:98:c8:f5:34:86:6e:32:e9:13:76:a1:11:
98:92:c7:00:34:c7:15:27:70:6d:28:f1:d0:cc:8d:5e:d1:28:
aa:5c:5e:73:98:7e:cd:b6:8f:ee:b6:25:ae:6e:0b:65:f4:32:
ed:a8:18:8a:a4:21:9a:c7:cb:39:88:53:8a:4c:66:43:f7:11:
df:4c:49:66:1b:5f:e4:2f:4a:a2:39:b1:fb:01:47:36:f8:6b:
02:73:06:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:39 2025 by rpki-client