Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/9gSwmfmsHTEU6DYLnUBOxdBAZNg.roa
File: 9gSwmfmsHTEU6DYLnUBOxdBAZNg.roa (raw, json)
Hash identifier: MYLAZCSd16cUJSQdK9M8H52b4DoN7RL0YCXwGWmYbOA=
Subject key identifier: F6:04:B0:99:F9:AC:1D:31:14:E8:36:0B:9D:40:4E:C5:D0:40:64:D8
Certificate issuer: /CN=1643543a4f2617274b60419908944dd7d2084be4
Certificate serial: 506865
Authority key identifier: 16:43:54:3A:4F:26:17:27:4B:60:41:99:08:94:4D:D7:D2:08:4B:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkNUOk8mFydLYEGZCJRN19IIS-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/9gSwmfmsHTEU6DYLnUBOxdBAZNg.roa
Signing time: Sat 01 Jan 2022 01:58:37 +0000
ROA not before: Sat 01 Jan 2022 01:58:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 45.141.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5269605 (0x506865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1643543a4f2617274b60419908944dd7d2084be4
Validity
Not Before: Jan 1 01:58:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f604b099f9ac1d3114e8360b9d404ec5d04064d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:23:da:aa:52:b2:bc:78:dc:d5:15:0d:94:
b3:87:23:79:7e:c4:7e:21:ce:a0:07:2b:ba:15:d4:
cd:ee:60:bc:16:de:c9:ba:b8:25:9b:79:c7:48:81:
b0:af:e5:5e:ba:14:4d:36:fe:4a:7e:9e:63:34:cb:
95:e7:a2:89:17:a4:1e:f6:3a:5c:2d:a6:18:19:ef:
f6:ee:39:87:ab:5d:16:80:9f:44:16:bb:60:b1:57:
a9:7a:aa:a1:34:45:13:3a:d7:cd:5b:59:b2:1c:d5:
05:7d:00:5d:b3:34:5e:f0:17:7a:e1:0a:0d:12:ca:
5c:06:0f:ca:a7:10:01:5f:26:5e:29:ec:12:2f:88:
01:0f:10:8f:0f:83:62:84:72:b9:f7:95:29:50:2f:
f8:a0:7e:2f:26:8a:91:e4:30:d9:46:63:bb:e1:e8:
c4:c3:e3:f4:ef:f9:e0:f2:cc:d6:62:06:8f:49:b9:
5e:9d:09:d6:b5:04:e9:da:a5:e2:e4:f4:0f:cc:71:
38:bd:9e:d0:ad:58:7b:95:98:ed:fc:5b:fc:18:a2:
09:44:9b:a6:14:47:b3:28:ec:30:55:83:4b:86:08:
84:02:0e:49:99:d3:a4:b3:a6:a6:29:20:4f:4e:80:
a6:b4:61:01:22:ad:96:57:98:2d:ab:43:2d:00:79:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:04:B0:99:F9:AC:1D:31:14:E8:36:0B:9D:40:4E:C5:D0:40:64:D8
X509v3 Authority Key Identifier:
keyid:16:43:54:3A:4F:26:17:27:4B:60:41:99:08:94:4D:D7:D2:08:4B:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkNUOk8mFydLYEGZCJRN19IIS-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/9gSwmfmsHTEU6DYLnUBOxdBAZNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/FkNUOk8mFydLYEGZCJRN19IIS-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.4.0/22
Signature Algorithm: sha256WithRSAEncryption
88:16:d2:06:40:51:c1:6d:98:27:ff:cf:9d:7c:08:3f:59:14:
f5:94:71:b4:fc:0d:a5:06:b5:34:98:60:2b:6e:34:77:68:65:
6c:7c:e3:89:19:68:40:68:c2:e4:08:c9:75:2a:36:9f:4b:09:
38:c4:3b:59:be:8f:8f:e8:24:d3:0e:af:2d:c9:03:d0:82:3d:
ca:c8:5a:c8:f7:58:eb:05:da:27:0d:ff:d2:58:62:c0:b1:45:
65:7b:26:da:bf:e7:9a:16:2a:71:90:be:a5:3a:57:b3:37:f8:
db:23:f3:91:be:22:e0:b6:55:d4:d3:ad:38:9a:dc:35:cb:2c:
50:5f:3a:a4:95:06:ba:12:75:18:84:cb:e5:2b:9c:67:ba:e0:
50:fc:f6:b2:6f:6f:71:1d:bb:21:b9:e8:f8:b4:51:1b:d7:3f:
f8:6b:14:36:3f:65:b5:57:0b:47:63:9b:6d:b0:cc:18:3b:e2:
88:5b:be:b7:f5:b6:39:53:f3:b5:d1:4b:70:27:02:1c:a6:48:
96:0d:41:83:d3:b6:1d:b0:75:22:9d:52:47:e4:95:c0:b9:09:
86:6f:01:95:91:01:29:33:78:0a:59:01:d8:f4:3c:03:17:de:
75:43:f4:41:ea:24:ff:3b:08:66:d4:ad:85:bd:a6:e9:44:be:
2b:51:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net