Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/NYhPs1QRitz7Bu8CfjaaYxZo-4M.roa
File: NYhPs1QRitz7Bu8CfjaaYxZo-4M.roa (raw, json)
Hash identifier: tvBGxNMBvzCStAgU/+/EKvlm38bg83swpNCdyVmGBfA=
Subject key identifier: 35:88:4F:B3:54:11:8A:DC:FB:06:EF:02:7E:36:9A:63:16:68:FB:83
Certificate issuer: /CN=10cd087a66e70fef42916cd9867501aa1d49c2cc
Certificate serial: 018D877123D156F4CFB974ABA604303A0A33
Authority key identifier: 10:CD:08:7A:66:E7:0F:EF:42:91:6C:D9:86:75:01:AA:1D:49:C2:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EM0IembnD-9CkWzZhnUBqh1Jwsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/NYhPs1QRitz7Bu8CfjaaYxZo-4M.roa
Signing time: Thu 08 Feb 2024 06:39:15 +0000
ROA not before: Thu 08 Feb 2024 06:39:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205285
IP address blocks: 45.14.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:71:23:d1:56:f4:cf:b9:74:ab:a6:04:30:3a:0a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10cd087a66e70fef42916cd9867501aa1d49c2cc
Validity
Not Before: Feb 8 06:39:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35884fb354118adcfb06ef027e369a631668fb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:1d:f7:e6:21:2d:2a:7a:1c:a7:28:56:95:
75:60:9d:69:56:54:a5:1c:f9:33:32:01:20:01:5c:
97:d2:7a:87:05:6c:57:84:6b:21:dd:ba:6b:1d:99:
72:5c:00:e6:b1:06:7d:6f:06:0e:0c:d8:58:cd:48:
6c:24:04:53:67:5c:4f:ff:67:7d:33:2e:69:c6:e8:
4d:94:25:ae:5a:3d:e1:85:bb:7e:4e:1f:17:40:65:
5b:bd:52:0b:b7:bd:cd:71:a5:db:9d:89:c5:d3:e3:
9f:78:94:7e:dc:88:d3:56:20:a2:44:3a:2e:a1:4d:
c9:80:f8:d9:5a:d8:34:df:6d:39:6e:11:b9:85:ae:
3e:4e:92:9d:51:12:31:c2:fd:47:d1:20:f2:9f:93:
79:df:76:83:f0:63:02:79:e7:0b:b7:23:88:76:1c:
97:fc:7c:41:db:26:fd:0d:c9:19:d9:28:99:c7:b4:
c9:c2:e2:ae:26:a6:65:93:3e:16:aa:47:ec:36:a5:
38:1d:31:eb:1a:3e:14:5e:89:36:d7:8f:d7:52:bb:
94:c4:ec:38:3f:8a:8c:39:97:f3:b9:f4:ec:70:26:
cf:12:32:8e:c9:a7:db:68:2c:99:21:7b:c6:04:84:
da:5b:ac:ca:af:e2:fe:59:b8:02:58:3d:8d:6a:98:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:88:4F:B3:54:11:8A:DC:FB:06:EF:02:7E:36:9A:63:16:68:FB:83
X509v3 Authority Key Identifier:
keyid:10:CD:08:7A:66:E7:0F:EF:42:91:6C:D9:86:75:01:AA:1D:49:C2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EM0IembnD-9CkWzZhnUBqh1Jwsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/NYhPs1QRitz7Bu8CfjaaYxZo-4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/EM0IembnD-9CkWzZhnUBqh1Jwsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.136.0/22
Signature Algorithm: sha256WithRSAEncryption
86:75:98:51:6e:a7:5f:1d:89:a1:b8:a4:b9:f3:ec:3d:0c:e2:
85:99:de:e6:9a:d2:ec:a9:f3:21:70:12:3d:78:aa:fb:52:6d:
4f:ea:5e:61:88:d1:ec:92:b3:5f:08:34:65:22:af:1a:70:5d:
98:92:1a:64:61:db:d1:77:a0:6d:35:8c:53:02:98:e0:48:3c:
1d:60:09:46:e9:ea:d9:95:f3:d1:69:a1:4f:76:9c:bc:a4:af:
64:56:9d:c8:60:4c:39:6a:43:5e:fd:51:13:80:bc:40:df:4e:
a1:b2:81:4f:fd:2b:39:75:ef:24:ae:4d:00:27:9b:a8:42:df:
29:5c:f7:23:2c:78:c9:33:03:1b:7c:bf:49:7b:cd:d1:fc:71:
dc:ce:a0:a4:72:fe:c3:d1:52:87:f8:f7:a9:26:13:6e:28:40:
d5:5b:e5:0b:97:b8:bb:12:80:db:75:35:69:a8:3b:c4:10:19:
21:d9:2e:ea:1b:47:d1:6f:47:f6:dc:29:07:26:b8:1d:fc:e5:
de:20:8d:21:dd:50:f7:cf:d5:16:cb:ad:71:7f:83:6b:61:f2:
d2:3f:fb:e7:ad:55:f7:49:43:ff:e7:71:0a:23:86:b2:15:0a:
9b:b7:ce:8e:f5:80:d2:1d:04:3c:3a:dc:59:09:10:1b:21:a2:
b1:41:00:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 16:39:48 2024 by rpki-client on console.sobornost.net