Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/_ub8FQvYvWDgIcIpEi0WpVvn6GA.roa
File: _ub8FQvYvWDgIcIpEi0WpVvn6GA.roa (raw, json)
Hash identifier: lfnqdgtnwiKCs2CKG4OD1cX2YMhqvK74DIf1VlwcIMo=
Subject key identifier: FE:E6:FC:15:0B:D8:BD:60:E0:21:C2:29:12:2D:16:A5:5B:E7:E8:60
Certificate issuer: /CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Certificate serial: 0193CEA027A306FD3C0852C879EBDF0D240B
Authority key identifier: 4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/_ub8FQvYvWDgIcIpEi0WpVvn6GA.roa
Signing time: Mon 16 Dec 2024 08:40:22 +0000
ROA not before: Mon 16 Dec 2024 08:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47169
IP address blocks: 45.10.92.0/23 maxlen: 23
185.143.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:a0:27:a3:06:fd:3c:08:52:c8:79:eb:df:0d:24:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eca105ce4af6c21cd429e992d06ea7d06d8a56d
Validity
Not Before: Dec 16 08:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fee6fc150bd8bd60e021c229122d16a55be7e860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:40:3d:1a:8a:d9:e0:cd:4b:c7:55:15:5c:
96:8b:1c:f4:40:32:91:3d:fc:ef:51:9d:9f:96:c1:
b5:fb:3b:46:e1:b5:26:7c:d9:36:9e:d7:c9:5d:44:
62:10:f9:e4:e8:b7:9a:0a:91:1e:fc:86:36:be:76:
45:64:cb:da:38:d1:b5:67:8e:09:57:d0:2c:7a:6b:
db:7f:18:4c:5b:93:dc:98:85:af:67:98:91:c0:2c:
c6:4a:e9:ae:a6:68:57:d5:8f:6d:3d:03:e9:67:ff:
02:1d:26:29:dc:7a:29:e0:09:fa:d2:61:4a:b6:f4:
aa:9a:94:53:75:9c:5e:36:63:0f:65:04:c6:7c:60:
88:86:03:37:0b:54:4d:99:91:93:18:6c:56:44:3a:
e3:a8:99:0f:a3:4a:fd:df:5d:84:e9:ba:75:0f:23:
a6:d7:fb:e9:e2:24:64:f7:da:e8:46:6b:ff:aa:28:
e2:df:9e:b8:51:11:54:38:32:47:d8:ad:34:f1:3b:
72:d1:f2:10:c7:ac:04:db:cb:19:d8:9b:05:5d:48:
91:26:a6:74:41:c2:59:e0:8f:d5:0f:03:a1:ac:ce:
be:f6:65:d6:9e:47:b9:bd:06:7e:e9:b8:32:51:d3:
74:99:1c:02:23:75:8f:e7:a9:56:2c:99:24:fb:41:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E6:FC:15:0B:D8:BD:60:E0:21:C2:29:12:2D:16:A5:5B:E7:E8:60
X509v3 Authority Key Identifier:
keyid:4E:CA:10:5C:E4:AF:6C:21:CD:42:9E:99:2D:06:EA:7D:06:D8:A5:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/_ub8FQvYvWDgIcIpEi0WpVvn6GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c3a85d-9d0b-4562-9238-46ee0cd7fcba/1/TsoQXOSvbCHNQp6ZLQbqfQbYpW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.92.0/23
185.143.200.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:ed:7b:6d:b9:ee:bd:14:1e:e8:e8:9e:a0:fa:22:14:0e:df:
0f:39:4d:0f:ac:be:85:05:14:96:1b:a2:3e:5a:c4:af:0f:9e:
c8:74:8d:99:2d:2e:4b:31:50:00:d9:c2:87:ad:e5:53:01:ff:
69:ce:37:08:51:9b:20:be:05:df:f7:26:2d:69:b7:71:9b:22:
df:d9:88:c9:33:7b:22:1a:d8:4b:05:b8:26:74:fb:97:e1:f0:
8a:b5:60:d2:ce:30:ff:45:86:db:dd:3a:64:37:63:fb:ca:70:
a5:31:eb:36:23:e0:5f:54:8c:b8:6a:af:2c:20:31:f2:7f:c1:
21:49:41:a9:7f:eb:ff:a4:9e:af:9d:cf:11:86:02:24:4e:04:
a0:a8:9a:b5:1b:00:33:48:a9:5f:bf:68:81:ed:52:0b:24:b5:
e5:b2:91:0a:87:5e:6b:dd:4a:bb:85:4b:4f:82:59:9e:c8:2c:
42:b9:fa:5e:87:be:6c:3e:b1:ab:d7:cd:ef:c0:cb:39:e7:56:
7c:f9:91:9e:13:5d:66:42:d8:a6:f5:c3:81:56:ab:07:40:b1:
6f:19:61:48:52:d3:e6:74:38:f5:43:3c:5e:65:2b:19:95:1f:
e7:8c:8c:be:b8:44:58:e8:fa:5d:c4:10:46:e7:1b:c0:55:22:
6b:0f:2c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:59 2024 by rpki-client on console.sobornost.net