Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ScWgddm0j4cCLqQeadmUfSa9_Ek.roa
File: ScWgddm0j4cCLqQeadmUfSa9_Ek.roa (raw, json)
Hash identifier: MpHMBAXPqWwgQK54PRPiNGX642v7X1pekwN6nv+rIv8=
Subject key identifier: 49:C5:A0:75:D9:B4:8F:87:02:2E:A4:1E:69:D9:94:7D:26:BD:FC:49
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01867EE49ECAA852CABF703496B32C7D9392
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ScWgddm0j4cCLqQeadmUfSa9_Ek.roa
Signing time: Thu 23 Feb 2023 15:29:17 +0000
ROA not before: Thu 23 Feb 2023 15:29:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.66.148.0/22 maxlen: 24
45.13.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7e:e4:9e:ca:a8:52:ca:bf:70:34:96:b3:2c:7d:93:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Feb 23 15:29:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49c5a075d9b48f87022ea41e69d9947d26bdfc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:91:2d:6e:18:a8:b8:ca:18:77:6b:3c:cc:
b1:5c:fb:b2:6e:89:27:6b:66:27:29:0c:d8:a7:5a:
a8:a8:ac:27:29:34:0a:ed:e3:af:72:70:c4:08:40:
26:bf:c5:0c:60:b0:2a:22:d0:8b:4e:47:a9:5d:16:
36:ce:7f:a7:9a:48:ec:8c:0e:df:79:b3:d3:96:e1:
33:b2:1c:0d:eb:2a:01:f6:cf:85:43:d9:fa:7e:4e:
c9:82:72:76:86:46:80:15:42:66:22:73:04:08:e9:
8b:67:e3:49:da:59:58:7f:93:14:da:14:ae:56:6b:
93:76:b9:32:ef:dd:ca:d9:fa:8d:df:f5:4c:26:3e:
fc:ae:f4:8d:c5:92:ec:3a:4a:47:b0:f9:81:c1:e5:
66:ab:8a:df:d5:48:63:43:34:32:4a:d0:f5:f9:9f:
1e:33:6c:d3:9e:2b:4d:83:7b:48:1f:ca:e3:64:67:
5d:d8:ee:27:83:a7:cf:63:a7:8a:d1:16:e5:51:82:
b5:2e:0f:df:b4:cd:52:90:70:ab:63:9d:b6:fa:ce:
f6:62:4a:c6:c3:c2:4c:0c:3a:67:1f:c8:e9:b9:c1:
d8:11:fa:15:b3:44:dd:6f:d9:c2:f0:d4:33:72:75:
2d:be:71:6a:72:59:ec:89:61:fc:eb:2d:69:2e:dc:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C5:A0:75:D9:B4:8F:87:02:2E:A4:1E:69:D9:94:7D:26:BD:FC:49
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/ScWgddm0j4cCLqQeadmUfSa9_Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.149.0/24
45.66.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:7a:ca:50:d2:e6:e1:ff:79:c6:44:a9:6b:4e:7e:75:e2:9a:
88:aa:27:29:62:9d:4c:b7:0e:76:03:67:ee:d1:e1:61:08:73:
38:17:69:b4:b6:42:37:e7:8a:ac:72:d4:c0:5c:0b:13:2e:d6:
68:ad:4f:1b:47:b0:db:9a:4e:ba:75:c5:84:2b:86:9c:ba:bc:
c1:06:a0:35:02:1e:57:a5:f9:47:e9:93:de:fe:ef:11:bb:96:
44:d5:fa:41:c1:97:0d:a5:c6:91:b1:d5:ca:5d:9e:2b:f1:30:
8d:1c:38:b4:71:ce:64:6d:2f:45:8a:9a:8a:52:da:89:91:05:
98:16:d2:30:93:1e:4c:77:d4:e2:f9:b6:df:74:44:75:f3:89:
5f:55:02:5a:30:89:8f:2a:9a:b2:ef:8a:2a:05:7d:3a:bf:d9:
38:94:32:e8:64:7f:1c:03:50:12:a1:85:e4:66:f2:0b:c7:d8:
45:f9:00:5a:ed:e7:d0:e6:33:6c:76:74:5c:c2:c7:b3:c1:c6:
8a:17:55:96:db:e1:c7:60:2d:2f:40:55:fb:7d:be:28:cb:b1:
b0:be:b7:b2:5a:e4:5b:39:ee:e1:ec:16:54:7d:b0:e1:52:1d:
cb:6a:9b:88:72:54:af:01:da:e2:e4:1d:21:35:a7:19:2a:75:
a4:85:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:38 2025 by rpki-client