Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/WWXO1cIKqrOlpl1vfUKI7uc6Arw.roa
File: WWXO1cIKqrOlpl1vfUKI7uc6Arw.roa (raw, json)
Hash identifier: fQJaeX6uWm15mP285eYE/g8ppaT2yr6lqbGwZlaKfJE=
Subject key identifier: 59:65:CE:D5:C2:0A:AA:B3:A5:A6:5D:6F:7D:42:88:EE:E7:3A:02:BC
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 018E13ECACAB909EA62B968C5E1176E93B2E
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/WWXO1cIKqrOlpl1vfUKI7uc6Arw.roa
Signing time: Wed 06 Mar 2024 13:21:01 +0000
ROA not before: Wed 06 Mar 2024 13:21:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215415
IP address blocks: 45.8.176.0/24 maxlen: 24
45.8.178.0/24 maxlen: 24
45.8.179.0/24 maxlen: 24
45.142.0.0/24 maxlen: 24
45.148.147.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:13:ec:ac:ab:90:9e:a6:2b:96:8c:5e:11:76:e9:3b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Mar 6 13:21:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5965ced5c20aaab3a5a65d6f7d4288eee73a02bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:98:f5:a3:bf:8a:83:df:d1:f3:d0:c2:6e:
ad:8f:85:b6:d1:bd:9c:1a:e7:c3:60:63:a1:27:7a:
36:9c:95:51:8f:5f:34:8e:85:0e:fb:15:cc:f6:56:
17:5e:85:58:6b:54:38:b2:bf:5c:33:8e:b4:db:71:
0c:55:81:3a:76:57:ac:f4:42:66:a1:39:35:ce:2c:
34:7d:f8:41:c6:37:3a:95:eb:2f:74:07:32:3e:54:
11:ad:5c:8f:df:ec:58:2c:fe:f5:c6:97:89:a6:20:
02:01:ef:ed:e0:34:be:34:eb:af:4b:1e:12:50:6b:
02:4c:d6:8c:67:5e:67:0c:44:bd:e2:e4:12:f8:6f:
2a:8d:62:67:f2:be:7b:1b:bb:4b:4a:75:c0:92:a0:
a5:21:68:cb:ed:cc:de:73:e2:ac:17:b8:d0:72:0f:
c4:36:ad:19:70:0d:a4:54:2d:1d:06:a0:8e:71:13:
49:6b:07:30:09:a6:b9:d4:ee:60:97:26:5b:a0:fd:
a6:1d:d8:1d:c3:a9:a5:10:04:43:c5:6a:b1:8a:7f:
4f:70:de:55:cf:eb:68:05:9d:9c:99:32:fe:03:3b:
9d:63:3d:7d:6e:d5:41:e9:d1:94:a3:c6:c9:3d:2c:
df:6f:f6:17:84:3c:d9:e1:ce:b3:ba:5a:ff:44:af:
03:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:CE:D5:C2:0A:AA:B3:A5:A6:5D:6F:7D:42:88:EE:E7:3A:02:BC
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/WWXO1cIKqrOlpl1vfUKI7uc6Arw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.176.0/24
45.8.178.0/23
45.142.0.0/24
45.148.147.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:1b:11:f8:84:02:1a:13:93:72:41:0e:de:12:f1:a5:93:05:
62:13:cd:b4:6b:f0:a1:ef:4a:8a:ac:61:d5:91:e7:ad:2e:73:
cb:8d:72:f3:6d:43:c4:85:c6:c9:c3:33:02:f0:55:a5:36:45:
de:ae:fc:08:6d:ce:be:36:04:ec:b6:5f:68:27:f9:dc:8a:26:
cb:9a:99:83:2e:72:7b:b1:95:5a:81:89:e6:af:ab:d9:c5:47:
a7:33:da:b4:77:9a:2a:3f:1c:ec:ce:27:d4:21:b9:ef:7e:cc:
10:9b:e2:b1:a6:c5:46:7e:37:f9:14:70:2a:4d:ad:a9:24:47:
e0:03:99:84:39:6c:f2:f9:64:d3:72:c0:10:aa:4a:3f:4b:4b:
92:af:9a:40:92:10:ee:cf:12:fd:cc:da:5a:aa:f2:db:f4:92:
1b:a8:4a:a5:70:10:3b:3f:9e:7d:0d:81:ee:47:17:6b:a6:fc:
8b:9d:f4:4f:97:92:ad:d2:96:65:be:88:42:b3:c5:93:90:8d:
06:81:9a:02:cc:bc:e0:b6:7d:03:98:86:1d:91:25:16:c1:a5:
06:26:ba:90:66:94:d5:75:98:33:87:a8:f2:a3:e5:d6:77:e6:
a9:5d:4e:11:5f:b1:09:0f:d8:ac:50:84:ec:57:6c:15:44:b4:
ea:55:96:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 18:05:12 2024 by rpki-client on console.sobornost.net