Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa
File: WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa (raw, json)
Hash identifier: wNgkpDpelkaLW9cw3ktDA884g92/B+HsSMkXWMNF8/4=
Subject key identifier: 5A:33:A6:2D:03:68:5C:81:8A:42:09:CD:44:CB:EC:06:D4:A5:DA:B8
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 0194266A53BEE8BAB321B3CD4A00809985C9
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa
Signing time: Thu 02 Jan 2025 09:48:09 +0000
ROA not before: Thu 02 Jan 2025 09:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208815
IP address blocks: 45.84.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:53:be:e8:ba:b3:21:b3:cd:4a:00:80:99:85:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Jan 2 09:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a33a62d03685c818a4209cd44cbec06d4a5dab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:c4:cc:ce:26:c1:dd:11:19:46:03:2d:d2:
83:eb:dc:3d:81:f2:d3:6b:ff:e1:8b:89:76:4f:98:
d4:85:e5:be:dc:e7:6f:6c:0c:91:73:7c:bc:fa:91:
f1:dd:fb:d8:91:ce:75:9b:ba:a1:6d:d6:de:84:9a:
9e:e5:9d:ca:4d:84:be:f2:3d:20:9b:9a:63:26:02:
1f:3a:cc:f8:42:8a:d0:c2:db:a4:5e:04:2a:8e:00:
e6:5d:56:9c:57:09:c0:3c:5f:d0:8b:52:5b:ed:78:
48:22:d5:08:c8:4b:e8:9f:b5:02:01:97:bb:59:de:
a7:7e:29:bb:a0:20:c6:fb:74:74:e4:ed:84:dc:8c:
1f:16:f0:26:78:0d:84:81:23:69:d6:85:b3:cd:2b:
24:91:71:09:f3:c2:a6:df:b4:6a:2c:71:25:62:b9:
b5:a8:60:66:e8:47:02:d7:90:d6:48:41:e8:a9:1d:
33:a3:e0:01:e7:3e:e7:c6:ed:34:f9:cf:b6:42:68:
6d:14:eb:c7:8d:35:c0:e0:85:48:56:40:00:d0:f8:
bf:83:26:69:c7:b3:79:e2:b2:3e:3c:20:b9:ec:20:
08:18:5f:54:12:8d:2e:55:f6:3b:67:e1:a4:50:25:
04:61:2c:fc:c5:cd:c7:cc:dc:1c:90:ee:93:9f:6b:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:33:A6:2D:03:68:5C:81:8A:42:09:CD:44:CB:EC:06:D4:A5:DA:B8
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/WjOmLQNoXIGKQgnNRMvsBtSl2rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.36.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e2:18:17:28:30:d6:3f:08:b3:43:7d:b2:07:fe:2e:8c:0a:
2a:99:b9:85:ea:aa:bc:08:99:17:2f:f1:45:8f:1b:ff:4f:c6:
b9:6e:1f:c9:62:16:2b:2f:cb:7d:dc:e1:ba:56:1c:77:20:b4:
6e:87:c2:1f:96:53:ba:e0:f5:0c:51:ce:30:5e:d9:8e:68:58:
12:92:6d:eb:f6:be:3e:17:a4:14:43:6f:b2:cb:09:2b:db:91:
d2:13:6d:0c:78:7a:fa:23:c5:f2:84:82:cc:e0:5c:75:b5:7c:
2c:45:35:6c:c5:a0:d4:0f:74:5e:61:d2:6b:de:1d:de:51:9a:
74:c5:7c:2c:fe:70:85:a4:7b:9d:37:13:6d:a8:d7:4e:85:d2:
89:13:67:d4:66:06:f8:c6:88:b1:ac:cf:a1:db:c8:ce:11:7e:
50:50:83:73:cb:a4:09:ae:52:46:e2:9c:39:71:20:3d:d7:84:
e9:35:b1:b8:fd:77:85:da:5c:f1:bb:0c:49:ea:b7:bd:2f:dc:
e7:21:e3:99:10:cc:63:fd:9d:e8:ac:6b:58:52:75:e6:17:dd:
8b:cc:16:e0:6c:de:cd:ed:64:b8:c5:2c:6c:cd:18:c4:6b:81:
59:2b:48:3f:a7:af:24:f3:bc:5b:ea:ab:dc:f6:b4:55:d4:34:
39:aa:a2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:54 2025 by rpki-client