Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/RWE60Ns1mQje11llf2ihFVQVFic.roa
File: RWE60Ns1mQje11llf2ihFVQVFic.roa (raw, json)
Hash identifier: DmwyemnAa+wXP/+CS2xNccyTOXtBd2D9MzdHPDGZd3A=
Subject key identifier: 45:61:3A:D0:DB:35:99:08:DE:D7:59:65:7F:68:A1:15:54:15:16:27
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01962EB77EDCF5158941D760A13639E64D41
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/RWE60Ns1mQje11llf2ihFVQVFic.roa
Signing time: Sun 13 Apr 2025 10:34:59 +0000
ROA not before: Sun 13 Apr 2025 10:34:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 45.159.149.0/24 maxlen: 24
45.159.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:b7:7e:dc:f5:15:89:41:d7:60:a1:36:39:e6:4d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Apr 13 10:34:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45613ad0db359908ded759657f68a11554151627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:a3:53:35:3c:94:c6:e2:cd:bb:12:cc:51:
6a:5a:1d:ea:dd:d0:84:f9:ac:ce:1b:93:38:16:46:
5e:69:1b:6f:47:16:bd:b0:28:34:85:ff:49:21:9d:
97:d8:c3:69:e5:da:c1:8e:4e:e7:11:6f:19:a0:08:
aa:3e:d4:f3:14:58:23:ef:5c:4e:e5:b8:1c:5a:d8:
65:e0:e0:99:64:91:dd:9a:77:d4:c5:d6:f1:bb:9a:
03:65:33:79:42:4a:9e:20:4e:bb:21:1d:1b:f1:0d:
93:41:4c:8a:3a:81:a8:b6:9c:32:44:15:3c:4e:5c:
b4:fe:7d:27:40:8e:55:3a:a0:65:8d:86:bf:3a:47:
59:c7:0a:2a:4e:07:3f:39:5d:b1:ba:50:08:88:1b:
e5:a7:9a:73:25:c6:f2:a1:b1:13:ef:d3:80:61:03:
a6:42:d0:2a:6e:7a:63:ef:6d:7e:18:ed:58:69:fb:
c5:0f:1c:5b:cf:bb:ce:c8:a5:80:f5:26:ff:b9:04:
d2:7f:6d:45:d9:bb:2d:fd:54:a1:3c:c3:ab:de:0f:
4a:97:be:d0:c5:32:cd:b9:37:7b:b7:36:43:2d:34:
a6:31:b6:f7:35:4d:9b:d3:43:f3:ec:fd:d8:34:2c:
e7:03:27:5a:43:32:31:29:a6:02:0d:f6:63:3c:43:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:61:3A:D0:DB:35:99:08:DE:D7:59:65:7F:68:A1:15:54:15:16:27
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/RWE60Ns1mQje11llf2ihFVQVFic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.149.0-45.159.150.255
Signature Algorithm: sha256WithRSAEncryption
03:b9:f6:62:92:13:a3:90:fe:d8:f7:0b:98:4d:3b:3d:12:0a:
9d:53:6c:2e:17:65:38:cc:b4:19:65:55:1b:b9:17:88:37:cb:
b2:43:d6:28:8a:06:f3:bd:f6:86:4f:ca:d5:ea:e4:56:7b:87:
6d:7e:f4:94:a8:24:91:9e:87:9d:11:e8:e8:44:9a:af:26:d4:
80:be:86:9b:00:33:0d:b5:c8:5e:36:47:04:3b:19:9b:2b:fb:
77:d2:fd:99:b5:8f:00:2d:62:7e:3d:53:dc:33:9c:e9:55:f7:
94:f9:31:8b:b8:cd:bf:8f:a9:45:b4:cb:ba:8e:73:26:02:8b:
94:41:bc:ce:2f:a5:13:c3:fe:54:bd:d9:90:67:55:49:da:9f:
fc:01:bf:c8:ec:04:6b:f2:a1:ef:e6:d9:a9:b5:3f:81:af:78:
59:e8:c7:d8:8c:18:a4:43:08:f5:1f:54:5b:2d:31:c3:fe:fb:
74:75:5a:15:fb:31:27:d9:9a:12:81:2c:e7:c6:52:b2:f4:92:
18:69:b7:e2:6a:dd:71:93:1c:70:69:e0:ab:34:67:38:bb:7d:
8a:b7:5f:0c:c0:46:c7:83:d1:47:7e:c2:00:b1:68:9d:2c:84:
b5:b5:70:1d:e9:c9:ce:39:37:fb:1c:12:02:75:28:63:b2:51:
09:50:fb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:11 2025 by rpki-client on console.sobornost.net