Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/S-LwtSAniV3-J5L4ShD5Cv5IuJM.roa
File: S-LwtSAniV3-J5L4ShD5Cv5IuJM.roa (raw, json)
Hash identifier: iYLgowTkQGBZSDAI/q8Vyt5sI7MQ5lgXWvf8Moh+maY=
Subject key identifier: 4B:E2:F0:B5:20:27:89:5D:FE:27:92:F8:4A:10:F9:0A:FE:48:B8:93
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 018CC3B6F321655A0A1FD9E0DA2D7DDAD614
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/S-LwtSAniV3-J5L4ShD5Cv5IuJM.roa
Signing time: Mon 01 Jan 2024 06:29:56 +0000
ROA not before: Mon 01 Jan 2024 06:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198789
IP address blocks: 45.8.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f3:21:65:5a:0a:1f:d9:e0:da:2d:7d:da:d6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 1 06:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4be2f0b52027895dfe2792f84a10f90afe48b893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:ff:88:91:91:00:a4:19:48:28:d1:7f:1a:
4d:80:17:e9:5d:3e:1f:67:0b:34:e3:cd:75:5b:f9:
a5:7d:3f:52:bf:ab:86:8c:0b:3c:c5:28:46:55:6d:
ae:db:90:e0:b4:2c:f5:1e:b7:00:6f:a1:a9:31:24:
40:c9:7f:5e:73:47:5e:3e:51:63:f9:81:00:dd:54:
bb:62:8b:7d:8c:d2:b5:52:f2:cd:40:07:29:0b:31:
6c:6f:7c:38:2c:47:9d:c6:5f:5b:7e:d0:a5:7b:17:
75:84:e0:9c:7f:51:be:48:23:69:b7:49:84:26:5e:
f1:cc:f2:a9:97:24:4f:e0:0c:95:2d:78:f5:23:20:
fe:44:c1:57:c0:a8:2b:b7:27:4a:30:82:16:b0:8a:
a0:40:67:19:8a:f4:64:f8:13:0e:a1:bc:a2:82:6a:
57:97:23:0a:68:c7:1d:37:32:13:ed:88:57:a2:f0:
dd:2d:2b:e5:5a:a7:33:d7:0f:f6:3b:72:1b:45:7b:
4c:13:35:85:c3:98:e1:73:3e:52:38:a6:9c:f2:46:
54:21:72:62:89:c9:be:cc:20:b1:2b:87:f3:d6:cb:
d3:c0:a1:cc:fa:ac:96:72:f9:11:c9:d7:1d:87:1f:
58:75:3f:ec:b5:69:a2:bd:8e:44:64:f9:01:d3:2e:
8c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E2:F0:B5:20:27:89:5D:FE:27:92:F8:4A:10:F9:0A:FE:48:B8:93
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/S-LwtSAniV3-J5L4ShD5Cv5IuJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.177.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:54:8d:d8:c0:06:7a:ec:cc:65:39:17:ab:f9:33:18:ec:98:
b6:14:f2:c1:17:e9:af:cc:f3:23:8d:4a:90:72:23:e6:21:82:
c1:a4:73:00:e9:66:ec:2f:27:0e:95:25:55:07:cc:13:78:8b:
bf:4f:91:4b:31:c0:9f:3b:0c:b5:ba:b6:b0:14:0e:cc:0a:33:
7a:cc:a0:e3:bd:8b:57:22:27:15:91:af:38:75:cb:66:7c:c3:
1e:c1:97:96:62:58:7d:0d:6a:5c:2b:3d:9d:8d:54:e0:35:38:
1a:26:68:2c:3b:a9:7f:22:b1:09:cd:a4:01:c5:4e:a6:65:aa:
f8:90:11:03:fb:58:5e:fa:2d:0f:85:55:c6:82:5f:8c:d0:c6:
9e:83:cc:45:84:2a:13:fa:fd:c2:10:77:93:cc:d6:d2:a4:1e:
66:52:84:65:4a:2e:a0:cf:aa:ae:fc:4d:03:e8:4e:c9:15:e6:
05:9c:64:6e:ca:91:49:c7:30:e6:aa:11:dd:5d:d6:2d:7e:a8:
a7:ea:b9:93:2e:6b:3e:7e:5d:1c:95:03:b0:15:6c:a8:5b:99:
42:38:db:3a:a0:16:0f:13:7f:fe:9c:e9:00:ee:03:eb:6b:3c:
fc:8e:76:b0:b0:29:08:53:51:85:11:ba:b1:5e:b3:d0:43:08:
3f:ef:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:28 2024 by rpki-client on console.sobornost.net