Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wwFX4PAqfUeMNXpGS3KNseh4ppg.roa
File: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (raw, json)
Hash identifier: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=
Subject key identifier: C3:01:57:E0:F0:2A:7D:47:8C:35:7A:46:4B:72:8D:B1:E8:78:A6:98
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 0195DCAEFC78127E6ECA8DF712FCF64A395F
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wwFX4PAqfUeMNXpGS3KNseh4ppg.roa
Signing time: Fri 28 Mar 2025 12:16:50 +0000
ROA not before: Fri 28 Mar 2025 12:16:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 45.132.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:ae:fc:78:12:7e:6e:ca:8d:f7:12:fc:f6:4a:39:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Mar 28 12:16:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c30157e0f02a7d478c357a464b728db1e878a698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:93:44:77:d5:b7:17:27:ea:ef:06:c1:c2:
5a:90:b4:7c:b0:6a:2f:76:a6:76:73:f7:ea:70:a3:
b9:b3:c1:d5:ee:66:a5:01:13:79:4b:2b:3a:ae:42:
75:4a:ef:5f:38:3d:0d:42:c6:5e:5b:5a:86:8d:5c:
2e:eb:16:6f:de:d6:5c:cc:75:92:9c:75:04:01:b9:
6e:8c:05:e5:41:dd:56:ea:bb:dd:73:e2:9e:52:7c:
2f:82:06:6b:74:3c:e3:1b:54:8c:23:c0:2c:34:c7:
b0:75:b2:18:fe:b6:59:33:6e:bf:d6:23:76:ff:42:
4d:e7:7d:36:2b:df:3d:15:2d:7d:dd:f9:7e:fb:02:
32:cf:bc:b4:41:ac:7a:c9:0c:7a:6d:8d:2f:3e:49:
aa:e2:57:d3:bc:da:bb:54:1a:1c:58:b4:56:b5:d8:
5d:d0:bc:ca:14:8a:a7:e2:4e:4e:fb:e6:98:31:6a:
1f:ce:ef:98:e2:92:88:9c:c4:94:43:b4:9e:14:bd:
18:34:0c:b5:a3:8d:ef:46:11:c1:fc:f4:83:fb:94:
84:ff:b5:e0:75:1f:0a:19:a6:a9:73:e3:bd:f9:91:
96:41:1e:76:29:5c:2f:76:a4:7d:3c:6e:b7:8b:d5:
9b:e5:3a:71:80:81:2a:5a:81:28:e5:c3:3a:06:4a:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:01:57:E0:F0:2A:7D:47:8C:35:7A:46:4B:72:8D:B1:E8:78:A6:98
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wwFX4PAqfUeMNXpGS3KNseh4ppg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.115.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a5:2e:58:32:01:b7:ca:66:eb:1c:57:4a:f1:4a:a6:ee:64:
43:be:18:a7:7d:86:d9:65:f2:74:b9:39:5c:da:a7:00:c4:40:
82:b0:17:98:3d:04:1c:29:b2:f7:05:b9:f6:ea:af:08:05:28:
07:1a:d4:38:2b:59:63:ed:8c:a0:8a:8c:59:0a:7c:ad:81:77:
d4:af:7c:93:82:c9:ce:83:c9:20:9b:b0:d0:4a:2e:ba:f2:8f:
3d:56:35:98:e1:5a:18:af:42:79:70:e9:ef:69:de:30:90:50:
3c:23:8c:ab:f4:8e:b5:92:47:85:65:8a:55:c5:13:7c:75:3d:
05:fc:2d:9e:fa:a4:38:74:d0:63:e6:be:64:ef:0a:9e:46:9f:
14:a7:13:fe:2b:cd:7b:c4:e9:b2:60:0b:d6:58:40:ff:fd:f6:
75:ca:d6:88:e2:98:30:e4:26:63:6d:f6:18:1c:e6:03:cd:f7:
87:47:54:d3:d4:19:e5:a5:cb:83:c7:e2:17:9f:82:aa:32:63:
78:9d:b5:62:a9:36:d1:1a:65:ec:39:60:00:17:bd:48:b9:1e:
6a:0d:47:67:2b:46:29:3c:3b:2c:b8:85:9c:3d:f9:90:8d:d8:
77:7e:e8:e7:f2:3b:77:a0:e3:a3:d0:1a:69:82:04:3a:5e:66:
2a:12:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:18 2025 by rpki-client on console.sobornost.net