Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/8wRwksgEoG333HypQIIwjmT0nX4.roa
File: 8wRwksgEoG333HypQIIwjmT0nX4.roa (raw, json)
Hash identifier: HiR8D2zkzsAnyOZuw2MTERQhKjFGkf9qzkInu3daTko=
Subject key identifier: F3:04:70:92:C8:04:A0:6D:F7:DC:7C:A9:40:82:30:8E:64:F4:9D:7E
Certificate issuer: /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial: 0194266AADE6C4AC2611C56886F2393856B8
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/8wRwksgEoG333HypQIIwjmT0nX4.roa
Signing time: Thu 02 Jan 2025 09:48:33 +0000
ROA not before: Thu 02 Jan 2025 09:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205986
IP address blocks: 45.155.180.0/22 maxlen: 22
45.155.180.0/24 maxlen: 24
45.155.181.0/24 maxlen: 24
45.155.182.0/24 maxlen: 24
45.155.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:ad:e6:c4:ac:26:11:c5:68:86:f2:39:38:56:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Validity
Not Before: Jan 2 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3047092c804a06df7dc7ca94082308e64f49d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:b8:dd:58:47:14:7b:a2:cf:15:c0:a8:69:
90:c7:2d:8e:5d:1f:16:63:ad:b7:72:30:b2:ba:53:
09:7a:ea:3b:65:91:dd:54:9e:2b:8f:10:b6:59:8a:
93:13:aa:c6:23:e8:3f:1a:2b:69:c1:c7:6e:ed:35:
49:20:65:6b:b4:9e:64:b5:8c:6d:3e:1d:4a:88:68:
27:7a:2c:7b:10:ca:b4:b1:79:af:f2:41:58:2e:4a:
bb:e3:3c:b2:4b:77:cb:4e:1b:a4:f8:63:99:5a:d9:
ea:e6:32:5b:12:b7:58:67:78:75:9c:9e:de:98:72:
21:07:85:7a:23:af:31:7c:68:57:d4:41:bb:2e:ef:
34:3d:c3:57:4a:17:e0:c1:b6:f1:99:2d:12:cb:80:
92:88:8a:7b:d9:dd:10:5d:0f:17:1f:f6:45:8a:c4:
e0:70:b1:d4:81:e0:a1:4b:54:91:cc:83:f6:4e:61:
5f:0e:43:38:73:59:ce:f1:2a:3a:29:63:0f:dd:18:
cb:15:9b:04:c7:85:7f:09:17:e7:89:1d:d5:ab:14:
7a:04:db:a0:98:11:42:d4:8d:3b:8c:ba:3d:9b:e5:
80:84:37:6a:4a:fb:c2:23:ec:97:21:2e:e8:7b:91:
f6:b2:17:93:f3:80:09:ed:22:5f:46:94:da:15:33:
42:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:70:92:C8:04:A0:6D:F7:DC:7C:A9:40:82:30:8E:64:F4:9D:7E
X509v3 Authority Key Identifier:
keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/8wRwksgEoG333HypQIIwjmT0nX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.180.0/22
Signature Algorithm: sha256WithRSAEncryption
84:7f:ee:84:b8:ec:6c:68:cf:18:5d:4a:0b:58:e2:32:09:28:
13:ab:e9:f0:a4:ae:b0:20:a4:9d:5e:11:85:11:de:2d:3a:0f:
04:a7:e1:89:28:a2:ab:fa:7b:f5:6c:e8:3a:cf:92:47:8a:27:
a7:0d:86:a9:ed:5d:fb:21:46:d8:a0:f4:83:d6:f0:54:56:65:
93:64:f7:3a:25:21:77:ad:cc:9f:10:bf:4c:03:48:ca:90:a6:
97:17:65:ae:ab:06:87:6b:37:4f:b4:7a:86:54:9c:37:64:8d:
5f:c4:bb:56:7a:89:95:82:7c:4b:44:11:77:df:6e:f1:13:35:
cf:bb:e3:e7:4e:62:37:e8:c1:17:2f:22:89:9c:46:95:15:93:
58:81:45:61:1d:88:21:fc:92:06:f5:4f:98:df:2b:86:8a:0f:
a1:be:f1:0d:a6:ad:48:90:fa:b7:84:70:b0:28:0f:7d:80:d1:
6c:e5:b2:c8:c6:87:a2:54:ad:29:93:8b:56:2a:46:bb:b5:7e:
2a:9f:15:91:72:54:90:09:59:ed:93:c8:96:6c:96:5b:46:6e:
10:c9:66:0f:96:49:d5:67:3f:5d:96:ad:0b:6b:4a:0e:42:c5:
aa:9f:cc:12:8d:08:9a:62:df:f5:25:fc:03:cc:59:e3:4d:82:
8a:e8:f5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:05 2025 by rpki-client