Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/Wy43NPx46KrtXJ-OU3g6bUk6-GY.roa
File: Wy43NPx46KrtXJ-OU3g6bUk6-GY.roa (raw, json)
Hash identifier: d5kZg7V2DVPr6ev9j9q/KxQkffayo1llxtA3rrFh9RQ=
Subject key identifier: 5B:2E:37:34:FC:78:E8:AA:ED:5C:9F:8E:53:78:3A:6D:49:3A:F8:66
Certificate issuer: /CN=210f7948f5e7dccbb62ba8f53c35ba5525631b70
Certificate serial: 018CC64AD2EDFB051B386141FD3204C66AEE
Authority key identifier: 21:0F:79:48:F5:E7:DC:CB:B6:2B:A8:F5:3C:35:BA:55:25:63:1B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/Wy43NPx46KrtXJ-OU3g6bUk6-GY.roa
Signing time: Mon 01 Jan 2024 18:30:41 +0000
ROA not before: Mon 01 Jan 2024 18:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208248
IP address blocks: 45.151.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:d2:ed:fb:05:1b:38:61:41:fd:32:04:c6:6a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210f7948f5e7dccbb62ba8f53c35ba5525631b70
Validity
Not Before: Jan 1 18:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b2e3734fc78e8aaed5c9f8e53783a6d493af866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:ec:ee:f1:f2:93:e1:df:a3:94:58:76:9d:
78:4b:c9:01:90:c9:46:cb:23:12:34:62:b3:1e:d6:
af:bc:6c:6f:5f:f8:1c:97:d6:c8:b3:84:8c:e7:62:
dd:5c:57:6d:69:04:e7:76:60:86:78:91:e5:3f:68:
8d:2c:23:76:47:cf:99:22:6f:25:d3:3d:35:fc:69:
b4:8b:6e:06:7c:91:c5:1c:1a:4f:eb:0f:df:8f:34:
ac:19:a0:fb:b1:e4:3b:41:9e:66:f9:cb:be:5d:38:
b8:45:65:b9:38:d2:b8:ac:77:fc:41:d2:45:4e:ae:
25:ee:37:5b:b9:ca:08:49:d9:58:a4:cf:6d:9d:e8:
30:30:a7:50:cb:7e:47:22:da:3d:e8:70:50:bc:bb:
f3:61:89:03:1a:38:8f:a4:0a:aa:95:97:45:bc:13:
4a:3a:5b:88:30:0b:6c:f7:12:9e:9e:95:4f:47:3e:
78:19:d2:90:4b:3c:92:03:1d:84:b4:ae:02:0e:d7:
5c:b0:24:f6:75:40:d5:df:12:53:b4:16:1e:82:ff:
0d:a7:3b:1a:be:98:0c:bc:18:db:ff:d4:52:98:3b:
5a:cb:58:e3:f0:6c:c2:de:38:29:a9:e2:82:0e:82:
74:55:ed:c8:01:04:eb:05:16:d6:cc:fd:50:76:7f:
b9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2E:37:34:FC:78:E8:AA:ED:5C:9F:8E:53:78:3A:6D:49:3A:F8:66
X509v3 Authority Key Identifier:
keyid:21:0F:79:48:F5:E7:DC:CB:B6:2B:A8:F5:3C:35:BA:55:25:63:1B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/Wy43NPx46KrtXJ-OU3g6bUk6-GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4a7ac-1b5b-4bac-8557-63f6202e4bf4/1/IQ95SPXn3Mu2K6j1PDW6VSVjG3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.48.0/22
Signature Algorithm: sha256WithRSAEncryption
64:40:e8:cc:81:ce:75:08:32:c8:3d:18:5f:d0:36:af:9d:05:
bf:3e:a5:a7:cf:24:41:93:77:fe:69:61:24:b1:6d:08:b7:94:
53:82:c0:01:8f:1f:b9:46:7b:9a:dc:04:b1:ce:1f:bc:b0:43:
83:15:88:57:bb:d0:81:ab:d4:b4:e6:66:a3:0c:b6:91:4c:37:
ed:a0:dd:de:81:f0:e7:2b:2b:6f:24:21:ec:e7:49:09:8a:73:
7c:a7:2b:68:80:44:e8:ac:66:3d:41:9e:05:78:dd:6d:e4:0d:
e9:ba:6f:9d:02:0e:15:43:4a:ad:d7:25:67:25:1a:ae:a2:cc:
35:4b:9b:48:99:5f:1a:77:53:d3:2b:af:2c:26:d6:e1:4d:66:
92:d5:eb:3e:2e:c8:ba:d7:60:dd:63:ee:5c:8c:77:9c:90:fa:
8a:a4:56:73:91:12:26:7b:fe:7c:37:a8:c0:de:22:35:f3:a6:
fb:91:b7:48:57:90:bf:3c:50:94:f3:2f:43:c4:64:85:65:3c:
d5:16:1e:fd:85:44:87:3f:94:37:16:36:2f:74:a8:bb:c6:8b:
f6:41:c7:ad:b3:0a:f0:e0:3d:73:bc:f1:1d:b9:5a:31:fe:67:
79:aa:45:a4:23:57:54:49:e7:68:8e:12:5b:11:27:b3:ec:ff:
65:68:c7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 15:08:25 2024 by rpki-client on console.sobornost.net