Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/weLtEGqlCAv8WsPukqWenq0XCWY.roa
File: weLtEGqlCAv8WsPukqWenq0XCWY.roa (raw, json)
Hash identifier: 31quYQn+hB8idzqFQFANk+5BUMXekZGvzoKxYJj4Obs=
Subject key identifier: C1:E2:ED:10:6A:A5:08:0B:FC:5A:C3:EE:92:A5:9E:9E:AD:17:09:66
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 0193D51CEB08146D47D4F7B86E173E1B7454
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/weLtEGqlCAv8WsPukqWenq0XCWY.roa
Signing time: Tue 17 Dec 2024 14:54:22 +0000
ROA not before: Tue 17 Dec 2024 14:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214122
IP address blocks: 45.157.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:1c:eb:08:14:6d:47:d4:f7:b8:6e:17:3e:1b:74:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Dec 17 14:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1e2ed106aa5080bfc5ac3ee92a59e9ead170966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:83:05:87:95:7b:41:f5:8b:9c:1f:fc:8a:
b1:8a:27:2d:48:03:8d:8a:df:7e:96:69:48:2b:37:
89:e9:fd:95:e0:4b:01:d3:4a:3d:ff:1b:25:21:c5:
ec:0c:ac:6f:4b:cf:b1:c6:1c:c0:25:f7:4a:ae:1b:
de:bb:45:89:b3:fc:e4:0e:a0:bb:e0:85:e7:2c:f7:
4b:35:6d:ec:7f:c8:54:f0:98:21:c9:41:74:c1:ce:
51:d8:c9:5e:45:61:48:c6:50:96:9a:68:98:93:ae:
64:06:78:7b:7d:c9:91:9f:d2:1b:06:2e:cd:d5:94:
c6:15:55:89:af:ef:1e:fd:6c:cf:77:3b:b4:9f:cd:
82:34:d7:5f:d3:5e:52:87:9b:4e:e4:4a:ff:f1:e6:
14:56:6d:db:99:b4:90:5a:6c:48:a9:c5:fa:f4:bd:
37:d8:b6:72:8a:c0:4d:75:f1:95:b3:7e:40:e9:20:
c0:1c:d2:ff:01:ef:6b:07:37:cb:14:af:4d:ed:38:
81:6c:04:34:25:db:77:b4:03:9c:34:fc:5a:97:c3:
09:c2:d6:51:36:cd:ac:17:6c:ab:90:45:03:b3:ac:
c4:10:05:90:36:0d:4d:c6:e4:8b:fd:f8:46:4a:b3:
1c:6a:9e:dc:d3:cc:9a:d5:db:e3:6f:b5:cc:95:11:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E2:ED:10:6A:A5:08:0B:FC:5A:C3:EE:92:A5:9E:9E:AD:17:09:66
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/weLtEGqlCAv8WsPukqWenq0XCWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:33:e4:89:b6:2f:ba:7f:7c:b4:93:03:a8:66:b6:5b:d5:9c:
33:b7:2d:24:4c:08:d4:6e:44:44:c5:c0:e1:cd:eb:e0:06:1d:
64:c4:91:e2:02:ce:cb:42:e3:a0:b5:1f:36:79:6a:f8:0c:72:
bc:2e:db:05:4b:0c:76:68:02:ae:1c:a9:0d:13:0f:30:07:82:
9d:60:ba:56:80:93:c2:75:1d:24:3e:86:8b:b0:bd:9d:c4:fb:
29:08:0d:f9:37:20:82:2b:3d:6a:b6:98:79:84:80:94:fb:ca:
35:d3:3a:6f:1b:fc:a7:7f:86:db:bc:39:51:9d:00:f6:18:6f:
7a:02:f7:a2:79:3d:9a:3f:1c:4b:43:3d:5e:1f:e2:5d:16:4b:
1b:7a:63:5b:7c:64:10:62:ea:44:f3:e1:22:5b:d1:39:10:9b:
27:68:fe:1f:7f:09:78:42:06:e5:9d:d4:35:66:98:c5:58:18:
ae:44:1a:d8:c7:de:c6:1b:18:70:22:12:b7:60:59:13:d3:5c:
41:29:cd:5a:96:9e:ce:4d:ad:31:8d:e3:5b:92:ea:29:5f:b8:
40:6b:46:90:d3:e0:42:37:db:f9:59:bf:f8:66:31:73:cf:15:
b1:09:2d:9e:d7:94:64:98:96:42:ec:98:09:0e:b5:94:3f:34:
d7:ce:11:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPVHOsIFG1H1Pe4bhc+G3RUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTI0YzcyODRlZjQ4ODdlNDVkNGNjZDliZGU2NzljZDlh
YjRmMDAwHhcNMjQxMjE3MTQ1NDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWUyZWQxMDZhYTUwODBiZmM1YWMzZWU5MmE1OWU5ZWFkMTcwOTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nKDBYeVe0H1i5wf/IqxiictSAON
it9+lmlIKzeJ6f2V4EsB00o9/xslIcXsDKxvS8+xxhzAJfdKrhveu0WJs/zkDqC7
4IXnLPdLNW3sf8hU8JghyUF0wc5R2MleRWFIxlCWmmiYk65kBnh7fcmRn9IbBi7N
1ZTGFVWJr+8e/WzPdzu0n82CNNdf015Sh5tO5Er/8eYUVm3bmbSQWmxIqcX69L03
2LZyisBNdfGVs35A6SDAHNL/Ae9rBzfLFK9N7TiBbAQ0Jdt3tAOcNPxal8MJwtZR
Ns2sF2yrkEUDs6zEEAWQNg1NxuSL/fhGSrMcap7c08ya1dvjb7XMlRGYKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHi7RBqpQgL/FrD7pKlnp6tFwlmMB8GA1UdIwQY
MBaAFGfiTHKE70iH5F1MzZveZ5zZq08AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzct
MDM3NWE5YzMyYjAwLzEvd2VMdEVHcWxDQXY4V3NQdWtxV2VucTBYQ1dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8wMmQzZjYtNDMwMS00YmU1LThjMzctMDM3NWE5YzMyYjAw
LzEvWi1KTWNvVHZTSWZrWFV6Tm05NW5uTm1yVHdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ0DMA0G
CSqGSIb3DQEBCwUAA4IBAQC1M+SJti+6f3y0kwOoZrZb1Zwzty0kTAjUbkRExcDh
zevgBh1kxJHiAs7LQuOgtR82eWr4DHK8LtsFSwx2aAKuHKkNEw8wB4KdYLpWgJPC
dR0kPoaLsL2dxPspCA35NyCCKz1qtph5hICU+8o10zpvG/ynf4bbvDlRnQD2GG96
AveieT2aPxxLQz1eH+JdFksbemNbfGQQYupE8+EiW9E5EJsnaP4ffwl4QgblndQ1
ZpjFWBiuRBrYx97GGxhwIhK3YFkT01xBKc1alp7OTa0xjeNbkuopX7hAa0aQ0+BC
N9v5Wb/4ZjFzzxWxCS2e15RkmJZC7JgJDrWUPzTXzhHD
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net