Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/awH1vGfPnPxA9N50cVyXGiIG4OE.roa
File: awH1vGfPnPxA9N50cVyXGiIG4OE.roa (raw, json)
Hash identifier: LFyUWUFz//5pOIP1kd2IdIl5nBOW01mAXaJAiQLihH4=
Subject key identifier: 6B:01:F5:BC:67:CF:9C:FC:40:F4:DE:74:71:5C:97:1A:22:06:E0:E1
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 01909CB87F3FB079E699B0768891D49A4A6B
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/awH1vGfPnPxA9N50cVyXGiIG4OE.roa
Signing time: Wed 10 Jul 2024 12:57:35 +0000
ROA not before: Wed 10 Jul 2024 12:57:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61367
IP address blocks: 45.132.160.0/23 maxlen: 23
45.132.162.0/23 maxlen: 23
45.141.248.0/23 maxlen: 23
45.141.250.0/23 maxlen: 23
45.143.240.0/23 maxlen: 23
45.143.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:b8:7f:3f:b0:79:e6:99:b0:76:88:91:d4:9a:4a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jul 10 12:57:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b01f5bc67cf9cfc40f4de74715c971a2206e0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bf:b1:47:59:50:dd:90:b3:af:7c:1c:03:e8:
28:ec:ae:d0:65:cf:9a:c9:ce:d1:69:b1:f2:6d:b1:
1d:8e:39:4f:42:fa:2e:c7:a3:07:5c:ac:ac:e6:9c:
f2:b9:be:cd:6d:59:ea:a1:19:aa:94:f7:9b:95:a9:
ec:95:ed:87:5c:90:6b:7d:bb:a0:dd:1f:2e:11:a9:
8c:88:3b:b8:77:87:75:ce:43:74:f7:15:89:36:9a:
77:9e:c7:c0:7e:52:1d:af:1a:d1:fe:f7:40:b7:7d:
25:74:22:af:8d:cb:d2:34:06:f4:67:8e:52:73:16:
93:37:43:35:0d:6e:c0:66:fe:c4:b0:80:ea:97:9c:
f1:87:12:34:8a:59:a1:a2:7e:78:c1:66:7e:17:bb:
44:63:a2:45:f6:2e:61:18:b3:d3:e7:ca:c9:59:6c:
64:5a:eb:99:05:d5:8a:7a:e4:2e:6b:cf:cc:f8:d2:
67:08:22:62:c4:fc:c2:af:5c:62:29:39:d1:bf:5c:
07:4b:73:e8:d1:35:57:47:73:55:e7:18:15:2f:d4:
9b:39:67:10:1a:d8:44:1c:92:9a:c2:d7:0a:a8:07:
bc:92:c6:12:a4:a4:7c:69:5f:ee:b5:5d:56:0e:8f:
3e:78:11:f4:cf:50:1e:6f:d0:5b:3b:50:2a:d3:38:
ef:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:01:F5:BC:67:CF:9C:FC:40:F4:DE:74:71:5C:97:1A:22:06:E0:E1
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/awH1vGfPnPxA9N50cVyXGiIG4OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.160.0/22
45.141.248.0/22
45.143.240.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:17:f6:28:af:be:c9:d2:09:10:58:db:f8:58:78:7a:8c:a8:
77:3c:02:55:de:0c:a2:98:9f:70:76:52:90:16:ea:60:7e:be:
f6:57:49:5a:92:11:38:28:fe:5f:ea:9b:98:df:e8:fe:9e:3a:
5b:01:40:93:34:0c:c4:b1:2d:0f:b9:12:1b:94:54:0d:53:2b:
9b:31:9d:2a:c7:3a:97:f0:9d:2f:b3:d0:03:bb:ae:ab:27:6e:
d3:a8:14:f1:c6:fc:a9:c4:a9:8a:f6:4c:ca:09:2c:b4:14:b5:
5a:91:af:67:13:b3:ba:ea:e9:9f:da:0c:30:54:62:9c:86:7e:
01:a7:a9:8e:2b:b1:e3:3e:8d:99:95:91:32:bf:44:6d:6d:09:
d6:9b:a4:bf:5f:9a:6d:3a:8f:57:f9:32:ef:c4:5e:b7:8f:65:
b5:e4:76:c8:c8:89:5d:4f:c6:bf:3c:c4:de:9c:bc:d6:3d:46:
78:e1:10:fd:bb:d3:0f:4d:a1:26:bb:c3:05:0e:dc:25:0f:80:
d7:76:3d:ae:4f:29:c1:eb:62:d9:6d:ec:d9:51:6a:e4:10:b9:
a6:12:ff:02:d6:d5:57:df:ad:7b:0b:cf:49:a4:9f:81:9d:01:
23:7d:c3:19:ab:7e:8b:27:99:cf:d1:74:18:fb:12:c4:b8:5b:
c4:39:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:21 2024 by rpki-client on console.sobornost.net