Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/k8LO5jZKn5_uQ7bTVPViyGXEZxc.roa
File: k8LO5jZKn5_uQ7bTVPViyGXEZxc.roa (raw, json)
Hash identifier: GMIxZTMwvya/J5OBaKh9sjnyajkc8+AWzu9vT2lxSi0=
Subject key identifier: 93:C2:CE:E6:36:4A:9F:9F:EE:43:B6:D3:54:F5:62:C8:65:C4:67:17
Certificate issuer: /CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Certificate serial: 018570CC14C832A5F736A133E8BC598036CF
Authority key identifier: 68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/k8LO5jZKn5_uQ7bTVPViyGXEZxc.roa
Signing time: Mon 02 Jan 2023 04:45:00 +0000
ROA not before: Mon 02 Jan 2023 04:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 45.10.192.0/22 maxlen: 22
45.10.195.0/24 maxlen: 24
45.10.193.0/24 maxlen: 24
45.10.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:14:c8:32:a5:f7:36:a1:33:e8:bc:59:80:36:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68395fb8f4524b8a6f945bbfa938b8f61694052f
Validity
Not Before: Jan 2 04:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93c2cee6364a9f9fee43b6d354f562c865c46717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:48:04:2e:99:db:4f:09:01:6a:fe:b3:8a:
a7:28:7e:ce:96:7b:63:43:02:a5:53:6a:5e:ef:e3:
b4:31:ef:11:42:92:3a:08:7e:73:b6:a8:a0:75:94:
2a:0c:6d:27:97:75:12:56:a9:e2:6b:19:7c:db:c1:
89:bd:a5:59:98:23:f4:88:f8:31:03:9b:89:a3:6a:
f7:09:d5:4c:9b:6c:db:8c:29:8c:70:54:10:64:11:
f8:33:75:0f:1e:b5:dd:b8:5c:b4:bc:a5:77:93:5d:
89:bb:3e:0c:26:b8:f4:e7:2b:11:9f:b4:f7:69:21:
44:d0:1a:39:ef:01:74:ef:33:cc:1a:9a:b0:ca:da:
0f:4c:e6:7a:63:b5:b4:81:11:45:b9:4d:fc:79:77:
f0:41:f0:0e:3c:76:93:3f:ab:99:97:4a:d5:a1:38:
70:f1:e9:ed:af:2e:42:34:85:99:7a:fd:64:87:ab:
85:8d:93:6f:32:2d:4a:52:67:4e:ff:f2:67:81:ef:
ae:be:7f:e2:63:c1:a7:6b:e6:ff:29:74:4b:0e:b6:
e9:2a:d5:ca:a3:41:ff:68:e5:05:ac:bf:0f:d3:fa:
33:c6:dd:a8:11:1e:46:d4:6d:da:c0:8b:0f:b9:26:
79:06:48:3b:5e:75:0d:53:60:00:f9:63:3b:c8:ad:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C2:CE:E6:36:4A:9F:9F:EE:43:B6:D3:54:F5:62:C8:65:C4:67:17
X509v3 Authority Key Identifier:
keyid:68:39:5F:B8:F4:52:4B:8A:6F:94:5B:BF:A9:38:B8:F6:16:94:05:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDlfuPRSS4pvlFu_qTi49haUBS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/k8LO5jZKn5_uQ7bTVPViyGXEZxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1a3d5c-e49a-4d4d-a70d-b6d427a3b106/1/aDlfuPRSS4pvlFu_qTi49haUBS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.192.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:16:31:59:1c:37:79:b8:19:03:86:68:d0:94:2e:a1:ee:7a:
3e:8e:c4:84:30:a1:82:d3:87:6b:43:ad:33:1c:8a:cb:01:24:
40:a0:79:ff:28:0a:0c:8e:66:ee:00:2f:5c:97:86:a6:3d:93:
56:10:81:ab:f5:6a:b0:d2:1a:29:11:a1:f7:26:41:e3:a0:80:
6f:92:89:ad:b8:6d:c3:c5:99:be:4e:c9:d3:a7:ce:4a:66:30:
39:a5:73:16:8d:12:97:75:9d:dc:15:4a:ca:22:cd:31:44:31:
1c:cf:fe:69:b7:07:ca:b6:a8:13:41:b1:94:b2:83:67:08:e1:
de:bc:af:bd:90:ec:7c:7a:eb:c5:f5:9f:11:c2:a8:61:5f:05:
1a:ab:0a:6f:df:a1:6a:7b:27:a8:f3:7c:04:04:6c:e7:a2:38:
72:9a:15:ea:2a:d3:a7:54:ba:39:e9:47:f8:3e:ea:78:5d:66:
be:6a:43:b8:2c:31:34:13:ef:bb:dd:5d:ec:2a:d2:c3:75:43:
ca:94:47:5a:ea:76:35:1d:65:c7:38:de:c0:2f:d4:bb:56:7e:
66:81:bb:c3:4d:17:5a:57:69:a9:98:4f:2e:01:f2:85:d1:7e:
49:2b:2f:7d:c6:3f:3b:95:49:05:fb:04:4d:cb:a2:52:c9:8b:
e0:cd:ec:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net