Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/WrJoTgRd27qdDOXrlq0-kj9cBUs.roa
File: WrJoTgRd27qdDOXrlq0-kj9cBUs.roa (raw, json)
Hash identifier: bPsup+crcphb2JiYa44MkqypgJSAGQk0PVhsZS3P3Ts=
Subject key identifier: 5A:B2:68:4E:04:5D:DB:BA:9D:0C:E5:EB:96:AD:3E:92:3F:5C:05:4B
Certificate issuer: /CN=0a71234f2566349a2bdf17f892f8d4710bbff812
Certificate serial: 01856F38F8CDE1E583A86C9627B47976209D
Authority key identifier: 0A:71:23:4F:25:66:34:9A:2B:DF:17:F8:92:F8:D4:71:0B:BF:F8:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnEjTyVmNJor3xf4kvjUcQu_-BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/WrJoTgRd27qdDOXrlq0-kj9cBUs.roa
Signing time: Sun 01 Jan 2023 21:24:42 +0000
ROA not before: Sun 01 Jan 2023 21:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201746
IP address blocks: 45.141.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:38:f8:cd:e1:e5:83:a8:6c:96:27:b4:79:76:20:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a71234f2566349a2bdf17f892f8d4710bbff812
Validity
Not Before: Jan 1 21:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ab2684e045ddbba9d0ce5eb96ad3e923f5c054b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:67:3a:6a:78:4b:98:2b:4d:c8:cb:9b:d2:22:
ea:12:98:49:d0:c2:12:08:64:cb:1f:b2:b8:b2:72:
48:ed:3a:a8:1f:02:67:66:1a:bf:f2:eb:10:a4:f5:
53:7a:b6:83:25:87:2a:32:86:75:f1:45:fa:aa:fd:
27:2d:d7:fd:65:d4:5c:4f:2a:0e:2c:89:1e:ec:f1:
c4:ab:74:1e:63:c9:1c:a3:cc:61:77:88:b2:f6:81:
03:be:8f:52:d4:55:5f:2c:99:cd:6b:f8:56:0d:bc:
f7:b5:c0:fe:45:25:51:ce:f2:9f:4f:09:27:6f:8b:
be:31:ab:3f:0e:eb:17:c4:5e:54:cb:2a:0f:6a:d3:
8a:76:f4:df:6a:04:28:64:a4:c4:0a:13:7e:63:8f:
a4:bc:8a:20:2b:95:db:b8:b3:6d:66:00:f8:ca:cc:
43:81:f1:80:9f:b7:32:03:60:e7:f2:00:f4:ab:a5:
26:c3:68:c6:96:7e:0f:91:c5:a9:f3:5b:7b:1d:43:
bb:b0:5f:29:0d:b2:71:1f:84:d7:f9:01:a2:2f:11:
95:71:c1:d0:cb:12:0d:76:53:07:8c:01:a1:49:aa:
b5:3b:dd:81:27:7a:83:66:28:58:38:fc:85:b4:57:
f2:59:29:09:3a:a0:06:72:4a:4f:b8:50:b8:dd:2f:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B2:68:4E:04:5D:DB:BA:9D:0C:E5:EB:96:AD:3E:92:3F:5C:05:4B
X509v3 Authority Key Identifier:
keyid:0A:71:23:4F:25:66:34:9A:2B:DF:17:F8:92:F8:D4:71:0B:BF:F8:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnEjTyVmNJor3xf4kvjUcQu_-BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/WrJoTgRd27qdDOXrlq0-kj9cBUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a5512-64c7-4f14-a2f0-55f6e25b5adb/1/CnEjTyVmNJor3xf4kvjUcQu_-BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.192.0/22
Signature Algorithm: sha256WithRSAEncryption
02:c9:a2:7e:c6:74:ea:70:63:0a:ea:52:ab:53:73:b4:ce:f7:
b3:e0:d0:0e:f6:1d:c6:af:1b:a6:09:46:5f:3f:fa:5b:70:00:
94:a5:82:78:77:0b:2d:fb:f9:da:67:bd:6a:16:c6:5c:99:74:
7a:60:a1:fa:e6:e3:4a:5d:88:a9:a2:1a:84:95:eb:67:91:01:
7e:d9:2d:cb:a3:57:1b:47:fb:40:2b:e1:99:2b:4a:24:4c:0c:
6b:cd:f5:e3:a8:5d:ad:c0:9c:62:2d:fc:57:17:79:67:9b:4b:
10:d0:09:a9:1f:33:bf:0e:27:e8:e9:c6:fc:d6:06:53:87:8c:
ad:c0:33:6b:4a:56:8d:31:ca:9f:43:fc:52:a4:ad:c1:a5:ae:
7c:4d:7c:15:59:ab:03:32:ed:9c:21:27:9d:f4:08:a4:c7:be:
cc:16:21:70:fe:e3:d0:23:e2:43:12:99:40:b7:a4:a4:a3:6c:
06:7c:89:eb:3d:f3:98:d7:5b:f3:e0:b3:b2:a8:30:9d:be:30:
f1:5d:45:78:ef:05:63:c4:cc:0d:84:8f:11:e6:27:7d:5f:00:
12:f0:cc:9e:d4:e4:74:57:6b:08:64:01:05:7b:eb:62:b2:55:
75:fa:b7:fc:da:ac:0b:08:fa:bc:b6:39:64:82:2b:df:5c:df:
2c:80:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:34 2023 by rpki-client on console.sobornost.net