Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/WVyEjuo3Pcswg76TNVE71cRw5Qc.roa
File: WVyEjuo3Pcswg76TNVE71cRw5Qc.roa (raw, json)
Hash identifier: JRWUHipuHwDMuj4Bw6dq/IvRe2t2Vulvh7gOCgXk2cU=
Subject key identifier: 59:5C:84:8E:EA:37:3D:CB:30:83:BE:93:35:51:3B:D5:C4:70:E5:07
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 0194221F4B6DF1FA6CBB63FB711FAA643697
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/WVyEjuo3Pcswg76TNVE71cRw5Qc.roa
Signing time: Wed 01 Jan 2025 13:47:43 +0000
ROA not before: Wed 01 Jan 2025 13:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48806
IP address blocks: 45.93.149.0/24 maxlen: 24
91.212.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:4b:6d:f1:fa:6c:bb:63:fb:71:1f:aa:64:36:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 13:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=595c848eea373dcb3083be9335513bd5c470e507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:ca:70:ca:94:25:87:0a:91:61:2b:7c:12:
5c:95:99:37:cf:38:39:60:f8:fe:f0:66:58:92:86:
0c:bd:01:2a:2d:2c:0a:f2:e3:8f:c2:63:64:7d:57:
61:e8:86:d7:c1:bd:c0:f7:5d:76:1b:cb:f6:cc:5a:
54:fc:d7:f7:48:19:07:5e:0f:0e:b5:af:4e:db:f1:
7c:5e:0f:09:94:bc:65:c1:af:6b:75:fb:b2:14:8c:
f6:8b:d1:ae:39:e4:9e:55:cb:1d:db:ce:ce:c0:e6:
08:34:1e:12:f3:5b:51:c3:11:d9:0b:8a:ba:68:93:
83:c5:0a:4a:17:f9:6d:dd:65:61:31:7e:14:b8:a7:
a8:d3:74:87:24:e3:ec:8c:13:e1:81:8a:cc:e7:16:
56:10:be:ae:61:bd:46:e2:50:8f:ee:59:c1:43:aa:
fc:97:8b:d6:b5:fd:1d:d5:66:d5:1c:92:13:f9:30:
fd:d4:cb:69:88:78:ac:55:93:73:d1:15:d3:5b:d3:
8b:af:a4:1b:dc:56:b0:f1:85:3d:d2:ea:cd:3e:0e:
42:1e:73:dc:a7:7e:17:6c:ce:cd:c9:f3:05:ea:16:
db:c6:e2:f7:b0:14:d5:c0:c7:33:0a:c0:1d:8a:bc:
f9:ac:22:28:ee:42:a4:fa:8e:d6:da:29:23:d3:45:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5C:84:8E:EA:37:3D:CB:30:83:BE:93:35:51:3B:D5:C4:70:E5:07
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/WVyEjuo3Pcswg76TNVE71cRw5Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.149.0/24
91.212.38.0/24
Signature Algorithm: sha256WithRSAEncryption
18:41:7f:94:c3:e3:a7:38:18:18:18:5d:39:ba:ef:3f:c1:2a:
11:65:e6:cd:c4:c9:79:46:55:3b:df:46:c0:4b:4c:e8:34:8f:
3e:9b:6b:cf:ba:c2:05:05:5f:4a:d7:e4:3a:31:da:d6:17:99:
dd:44:b4:a9:1e:d7:ae:84:bb:52:bc:a8:1a:7f:da:16:b5:c6:
3d:45:53:90:89:97:82:84:95:80:14:19:ff:3c:4c:47:4a:4d:
6b:08:d0:b5:3d:b7:da:46:81:0b:8b:64:a1:24:98:fa:50:9d:
7d:21:c4:a5:92:dc:1a:af:0c:6e:3a:27:07:86:09:75:73:78:
77:0e:b2:bb:87:aa:a2:99:22:d7:45:40:65:63:44:cf:3e:a6:
3c:92:ae:70:ec:75:af:91:ef:20:60:97:59:57:13:f0:65:8e:
15:40:63:47:42:2c:bf:42:27:7f:b8:13:d3:6d:51:f7:f2:0a:
a4:04:c7:c4:98:c9:10:e1:2d:27:2b:16:f4:68:e0:b8:e0:b0:
54:00:c3:31:33:13:99:8f:2d:f6:13:1e:0e:f1:09:fc:a9:8e:
cf:fa:fb:02:18:25:d5:b1:b1:ce:cc:82:2c:88:47:4d:96:2c:
5c:bc:bc:45:cb:86:da:27:d8:61:8c:de:e7:f9:00:18:6f:f2:
f0:cc:3f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:58:16 2025 by rpki-client