Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/766784-6ad0-4a93-8612-e9aba85f41d2/1/XwjPnoUNC6BaqTK2Rji2dz9PuXg.roa
File: XwjPnoUNC6BaqTK2Rji2dz9PuXg.roa (raw, json)
Hash identifier: 3oHwjmMOgTvQBELhNrlT3jBzuZyuJJgdkKO5kIfQfZM=
Subject key identifier: 5F:08:CF:9E:85:0D:0B:A0:5A:A9:32:B6:46:38:B6:77:3F:4F:B9:78
Certificate issuer: /CN=61b429985b5932ab5af3674ba6cb5a27cbd766d4
Certificate serial: 5D23
Authority key identifier: 61:B4:29:98:5B:59:32:AB:5A:F3:67:4B:A6:CB:5A:27:CB:D7:66:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbQpmFtZMqta82dLpstaJ8vXZtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/766784-6ad0-4a93-8612-e9aba85f41d2/1/XwjPnoUNC6BaqTK2Rji2dz9PuXg.roa
Signing time: Thu 10 Feb 2022 16:39:16 +0000
ROA not before: Thu 10 Feb 2022 16:39:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21368
IP address blocks: 45.86.137.0/24 maxlen: 24
45.86.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23843 (0x5d23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b429985b5932ab5af3674ba6cb5a27cbd766d4
Validity
Not Before: Feb 10 16:39:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f08cf9e850d0ba05aa932b64638b6773f4fb978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:3d:c7:b4:8a:13:73:d2:d9:3f:b0:52:9d:
a2:2a:69:03:40:49:48:d5:f7:be:37:c5:1b:4b:8b:
3a:22:ac:9e:0a:e6:0a:27:56:36:6c:eb:0e:5e:55:
8e:1f:f1:f8:e9:46:95:9c:49:dd:28:b0:d5:30:02:
cb:78:e6:ca:ef:1a:21:60:7e:49:b3:1b:4d:82:8c:
bc:d9:6b:53:f7:88:a6:07:50:04:ef:c0:17:16:77:
0a:f9:03:3a:a8:b4:f5:28:ee:72:1f:c9:98:92:29:
06:da:eb:f7:b8:10:11:35:24:51:6c:f4:73:83:3b:
0b:bb:17:bc:72:69:5a:4a:78:74:85:fe:ca:3d:b6:
23:a2:b3:1b:12:0a:eb:a3:ec:a8:da:86:85:3c:94:
b7:f3:94:16:e8:d8:62:f9:57:c3:3d:07:81:00:8a:
cf:3c:3c:64:03:ad:69:bd:e9:77:e9:47:50:ad:75:
27:72:f3:d8:72:82:e8:8a:6d:ec:85:7e:4c:10:9d:
83:22:f8:10:4e:9d:29:25:66:44:8b:6d:81:22:45:
4f:89:74:a8:16:6a:ff:76:94:e8:3c:9d:e0:3d:e0:
02:57:7f:e8:ef:99:70:8c:65:b9:b0:84:01:85:e5:
e1:dd:32:86:1b:2a:e0:78:72:dd:62:ea:b0:f2:25:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:08:CF:9E:85:0D:0B:A0:5A:A9:32:B6:46:38:B6:77:3F:4F:B9:78
X509v3 Authority Key Identifier:
keyid:61:B4:29:98:5B:59:32:AB:5A:F3:67:4B:A6:CB:5A:27:CB:D7:66:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbQpmFtZMqta82dLpstaJ8vXZtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/766784-6ad0-4a93-8612-e9aba85f41d2/1/XwjPnoUNC6BaqTK2Rji2dz9PuXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/766784-6ad0-4a93-8612-e9aba85f41d2/1/YbQpmFtZMqta82dLpstaJ8vXZtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.137.0-45.86.139.255
Signature Algorithm: sha256WithRSAEncryption
31:aa:cf:77:9f:1e:b4:23:ff:55:39:28:ea:f1:63:46:30:41:
10:05:14:60:e9:f8:42:f7:df:e3:6f:7d:8d:32:76:44:fb:e8:
a6:02:56:7a:d1:1a:6d:3d:cf:ad:a3:32:60:1b:b9:54:9d:77:
48:4b:32:1b:93:79:67:3b:a8:ee:dd:f4:61:46:1b:ec:99:08:
6b:96:64:4c:ab:e7:19:fc:2e:23:aa:70:c0:e7:49:97:44:e5:
ed:22:c1:d4:e4:ed:86:77:93:5e:67:0d:75:b4:6c:22:f0:85:
57:a7:03:83:9b:6b:00:a1:dc:49:64:e0:6e:f7:72:15:62:2b:
75:be:73:54:ba:a1:b2:23:ce:1c:38:76:84:00:5e:d4:7c:56:
e0:c5:11:b5:4e:0a:e1:eb:ff:f7:49:d4:ff:7f:3a:69:83:aa:
91:c7:4d:dc:45:f6:89:4a:05:44:c1:c4:16:b9:0e:d9:14:e9:
d3:d8:9b:a6:15:a0:fd:ef:d2:f1:15:c6:6d:d2:2b:39:8b:1c:
b6:12:27:9b:d4:56:86:54:51:df:a6:57:7f:7b:62:43:3d:f7:
8d:bd:ef:b1:4b:4f:87:8b:41:11:4f:b8:95:6d:00:79:c5:53:
61:1d:be:1f:7c:9e:9a:fd:b1:05:82:28:ce:5b:c9:b3:08:61:
04:7b:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:30 2023 by rpki-client on console.sobornost.net