Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/W-a7ajICdBE5w5U304U-J8ukB_Q.roa
File: W-a7ajICdBE5w5U304U-J8ukB_Q.roa (raw, json)
Hash identifier: j2GQXZFBGeGPDk7Zp0B95ZdWyn8E2lJqEdXmcRt9OwE=
Subject key identifier: 5B:E6:BB:6A:32:02:74:11:39:C3:95:37:D3:85:3E:27:CB:A4:07:F4
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01877FEF992C44C0AE0B83BE1A65660FC79A
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/W-a7ajICdBE5w5U304U-J8ukB_Q.roa
Signing time: Fri 14 Apr 2023 13:23:41 +0000
ROA not before: Fri 14 Apr 2023 13:23:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.156.144.0/24 maxlen: 24
45.156.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:ef:99:2c:44:c0:ae:0b:83:be:1a:65:66:0f:c7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Apr 14 13:23:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5be6bb6a3202741139c39537d3853e27cba407f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:26:3d:b5:c2:85:10:1a:d8:fb:8c:69:91:ed:
64:e0:81:72:db:6a:d2:5e:6b:53:41:49:df:e7:39:
21:af:08:4e:7f:dd:c2:bb:5e:53:8e:26:97:ca:73:
f1:bd:21:1e:ce:19:e7:3c:07:5f:c4:ca:d2:61:c4:
b1:01:84:ce:75:ac:f6:9d:56:9d:1f:df:2f:6d:9f:
86:35:0c:65:ff:eb:f4:63:12:34:89:10:8c:f0:55:
27:4f:17:8e:48:fd:c1:b5:f0:4b:74:aa:94:2d:e3:
e2:7f:b9:96:14:ba:9c:d0:1b:a1:03:4b:44:3b:85:
83:58:15:f1:51:08:f1:f3:48:3f:bf:31:73:f5:6a:
62:ab:56:94:59:a8:f1:79:28:21:d0:a4:b3:8a:1d:
37:17:6b:12:1f:fe:da:25:47:01:89:28:eb:d3:62:
ce:94:f4:e2:a1:9a:25:d0:04:f3:fb:5e:61:34:46:
6b:01:68:14:0b:ca:66:11:72:f9:57:a6:be:85:fd:
78:17:89:c0:db:34:56:0e:55:bb:1e:82:0f:0b:79:
81:03:71:64:9f:80:c4:8c:0f:99:09:0a:5d:63:3a:
c5:76:95:85:19:8b:17:a0:e2:3f:36:ff:50:1d:23:
64:d8:96:2a:69:95:75:c8:80:ed:8e:4d:df:6c:a5:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E6:BB:6A:32:02:74:11:39:C3:95:37:D3:85:3E:27:CB:A4:07:F4
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/W-a7ajICdBE5w5U304U-J8ukB_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.144.0/24
45.156.147.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c4:60:4c:c8:10:b2:ca:0d:d3:d2:84:c4:e4:33:bd:26:7d:
f9:3f:d0:da:64:d7:c2:ab:6a:ea:53:9a:ce:00:7d:7f:60:7b:
c6:2c:d5:e5:23:89:30:f8:ab:d9:8f:90:45:ec:da:2c:99:e5:
0f:22:67:16:3f:c3:6c:85:42:66:d6:ac:c3:c9:e8:cd:16:90:
11:5a:ae:89:36:76:57:81:c8:f0:0d:03:06:76:7f:c8:6d:33:
f6:84:a5:3f:81:d4:05:64:c0:08:c8:d8:43:cb:b4:84:6b:b8:
4c:c9:45:ca:18:b2:26:6f:b2:1a:4c:e4:09:9a:eb:ab:fd:90:
28:ad:79:1f:49:2f:d1:d1:75:8a:5d:3b:26:3e:42:f6:1c:e0:
9e:19:21:f6:d8:53:e7:6d:45:52:1a:45:46:ac:3b:52:f4:8a:
d6:ab:6d:6c:72:36:ac:7c:97:18:37:28:22:17:69:0c:29:22:
19:fa:c7:37:dc:cb:82:75:11:30:90:ab:7d:ae:47:dd:c2:5b:
45:7c:60:a6:d0:73:c0:5b:c8:66:2a:02:bd:89:a3:86:fe:7c:
0a:87:37:eb:d4:37:72:aa:f9:94:28:3a:6f:62:d8:7b:b9:c9:
47:81:a4:ed:90:cc:08:f9:28:2a:15:bb:ca:c0:7e:50:5f:bf:
68:b1:dd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:06 2025 by rpki-client