Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-_fx9HsRfwgNn-MMsPO9YLYf78w.roa
File: 1-_fx9HsRfwgNn-MMsPO9YLYf78w.roa (raw, json)
Hash identifier: Ep7zq1oBBL2N2xhxuViiocgV8KccAh8Z3P5yId+6Oas=
Subject key identifier: FB:F7:F1:F4:7B:11:7F:08:0D:9F:E3:0C:B0:F3:BD:60:B6:1F:EF:CC
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 040EE75B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-_fx9HsRfwgNn-MMsPO9YLYf78w.roa
Signing time: Tue 29 Mar 2022 08:16:23 +0000
ROA not before: Tue 29 Mar 2022 08:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 45.152.242.0/23 maxlen: 23
194.113.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68085595 (0x40ee75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 29 08:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbf7f1f47b117f080d9fe30cb0f3bd60b61fefcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:c9:53:e6:c1:2e:1e:d3:cc:55:48:4b:95:
cc:66:43:b5:04:27:aa:86:ee:3d:13:04:fd:0c:ec:
c1:c9:ee:c1:c7:70:1d:41:8e:c5:b1:35:57:e7:a4:
e0:7a:4b:fb:26:e2:c1:59:7d:c7:51:bf:95:0c:50:
5f:03:86:4e:fb:32:2d:bf:3d:59:7f:09:2e:3e:fe:
1b:34:98:a9:37:3f:19:3c:92:b9:96:cc:f7:95:7c:
47:54:bc:02:ee:6a:8a:b4:9a:c3:e4:0f:50:54:b1:
6e:0d:e7:20:ea:06:47:28:f4:cc:06:ce:ed:7b:ef:
65:fd:b5:db:0b:7f:ba:7e:6c:61:c4:23:6e:99:75:
db:fb:e8:a8:6b:03:82:f1:84:82:51:fc:42:28:a0:
71:48:e2:7a:75:fd:9b:df:db:06:9b:a5:f3:d4:86:
a7:22:88:13:6d:c0:31:46:86:ca:38:40:23:08:25:
5f:7b:e8:26:53:3a:8b:27:e8:9f:04:64:79:f6:72:
68:ac:57:2b:33:df:b3:4b:40:0d:33:24:47:56:bd:
6d:6f:14:dd:5b:a2:e8:26:c8:2c:ca:e0:6d:8b:2e:
4b:d5:14:41:7f:cb:af:81:f3:cf:21:0d:91:e9:78:
b9:6c:a1:3a:b6:fa:08:c5:4b:59:d5:3f:9c:9b:40:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F7:F1:F4:7B:11:7F:08:0D:9F:E3:0C:B0:F3:BD:60:B6:1F:EF:CC
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-_fx9HsRfwgNn-MMsPO9YLYf78w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.242.0/23
194.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
67:03:1a:a8:16:43:be:45:e5:9e:5b:09:e3:b4:9d:f5:19:b1:
e1:f1:a9:2f:0c:eb:a1:82:a8:10:67:a3:6e:24:6a:b2:76:57:
7e:cf:d2:d1:f2:30:81:e8:b2:2d:de:01:50:2f:2d:44:09:fb:
ee:1f:72:a2:87:cf:e7:e7:42:43:98:15:ed:8e:e4:b0:de:91:
6f:0f:0c:bf:4d:8d:af:15:c4:2d:fb:81:16:d8:bb:e8:d0:56:
90:d1:91:b3:b3:33:81:60:04:17:51:df:f5:fd:53:e6:b1:e8:
ae:ac:07:1f:40:63:e7:27:e9:32:e7:ab:0d:d6:c4:cd:84:96:
9b:e2:7c:7a:51:40:f5:11:6c:65:95:e7:14:cb:af:e2:2b:bc:
78:c9:8f:74:57:16:c5:00:0d:01:7a:53:19:5b:2c:53:95:bd:
83:94:79:73:ca:b8:88:6f:8c:5f:c3:e2:d4:23:80:75:15:a8:
cd:16:90:ac:32:13:5e:be:3a:15:7c:32:48:e2:09:40:ef:9b:
43:79:7c:82:39:b2:56:e5:71:da:2d:2b:73:c3:3d:1e:b7:21:
f6:03:8d:f2:9f:27:a5:e1:1d:05:98:db:b0:94:94:dc:a7:6b:
e6:39:3f:50:3d:7e:dc:43:b1:3d:93:63:6c:55:4e:a1:2a:7e:
94:e4:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:41 2023 by rpki-client on console.sobornost.net