Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/55936f-b503-4bf4-a1a7-9843159a9b84/1/ZSK0VY9QWEMRQ6J5eNoiACVCoLM.roa
File: ZSK0VY9QWEMRQ6J5eNoiACVCoLM.roa (raw, json)
Hash identifier: R98zTr/Ww9YygIZgGC8mSu0yVRCUgqdi2HhFKl4a6ag=
Subject key identifier: 65:22:B4:55:8F:50:58:43:11:43:A2:79:78:DA:22:00:25:42:A0:B3
Certificate issuer: /CN=3fdbc9160e92d967a91b42c4192c8a810f246d59
Certificate serial: 018570D54B248132CD678EC108F841B452D2
Authority key identifier: 3F:DB:C9:16:0E:92:D9:67:A9:1B:42:C4:19:2C:8A:81:0F:24:6D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9vJFg6S2WepG0LEGSyKgQ8kbVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/55936f-b503-4bf4-a1a7-9843159a9b84/1/ZSK0VY9QWEMRQ6J5eNoiACVCoLM.roa
Signing time: Mon 02 Jan 2023 04:55:04 +0000
ROA not before: Mon 02 Jan 2023 04:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48518
IP address blocks: 45.129.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:4b:24:81:32:cd:67:8e:c1:08:f8:41:b4:52:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdbc9160e92d967a91b42c4192c8a810f246d59
Validity
Not Before: Jan 2 04:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6522b4558f5058431143a27978da22002542a0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:59:af:13:18:f8:1c:e6:94:73:c8:81:d0:
48:fe:76:26:8e:e7:56:1f:4f:5b:d3:95:ec:9b:d5:
e7:37:d4:5e:f7:05:1a:5e:aa:99:a6:9c:78:b3:f4:
0c:1d:5a:be:a3:ef:01:a2:6b:b3:1c:45:d6:ba:d2:
b1:2c:c4:15:ec:0d:d1:e2:ec:44:b2:cd:fc:42:b0:
1f:2b:be:f6:c5:10:b4:1c:47:83:97:79:d1:d7:e8:
84:91:6c:b5:f5:72:a2:55:d6:e2:31:d1:af:0c:1c:
b5:8a:68:e9:fe:c8:d7:6c:73:ab:2f:f5:94:6f:cf:
59:51:47:c9:aa:3e:35:ad:1a:f2:72:25:7b:86:cc:
a0:78:b6:48:a6:d6:ec:b0:b5:bf:f2:47:a6:a5:2e:
42:20:8c:9b:62:45:3c:72:74:ee:ef:54:cd:bb:d8:
a4:23:4e:f8:42:35:ba:4f:7c:92:21:c7:a0:dd:d0:
f6:53:f9:32:17:f8:cf:3a:32:b6:ac:13:74:d3:5e:
cc:f5:f1:3b:90:6c:b5:0f:e0:cb:af:f3:c3:02:2a:
7f:d8:bf:62:83:41:c4:b8:f9:fb:f5:a0:66:4c:b6:
cd:bf:5f:9c:d3:b6:71:ff:a2:2b:a3:ee:97:21:67:
5e:83:f3:4d:f0:4e:af:19:b4:c8:89:7f:ff:1f:ec:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:22:B4:55:8F:50:58:43:11:43:A2:79:78:DA:22:00:25:42:A0:B3
X509v3 Authority Key Identifier:
keyid:3F:DB:C9:16:0E:92:D9:67:A9:1B:42:C4:19:2C:8A:81:0F:24:6D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9vJFg6S2WepG0LEGSyKgQ8kbVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/55936f-b503-4bf4-a1a7-9843159a9b84/1/ZSK0VY9QWEMRQ6J5eNoiACVCoLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/55936f-b503-4bf4-a1a7-9843159a9b84/1/P9vJFg6S2WepG0LEGSyKgQ8kbVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:8e:8d:89:36:77:a6:4e:e1:1c:89:07:ec:f1:ad:c0:11:2f:
68:34:cf:89:6a:61:ff:d7:81:06:c1:46:b2:38:da:55:b5:16:
67:e8:82:19:e1:e5:90:24:c2:9c:5f:21:0b:15:77:bd:5b:4b:
3b:48:a8:88:cd:03:82:20:e8:07:e0:70:98:8a:ac:7f:2e:5c:
db:6b:64:5f:70:3a:ba:4a:db:1c:65:eb:0b:ca:f0:d0:a9:34:
77:ad:c7:37:09:b3:73:1d:c5:f6:c8:ce:d9:82:12:86:48:12:
30:ba:84:0d:c9:95:a5:4b:ce:f8:14:6e:c3:74:5b:1f:2a:75:
84:0e:64:01:20:05:c6:60:46:7e:8d:29:3a:af:76:ea:03:11:
47:0e:e1:7a:25:80:8d:52:87:ef:2f:ee:71:33:d0:9f:a8:23:
34:cb:19:64:73:34:59:26:af:d0:1c:ab:18:c6:1d:a1:be:f8:
36:ec:7e:2a:a3:74:a9:f1:2e:02:8f:ec:8c:83:0f:97:6d:fa:
9b:fe:c4:86:22:4f:0c:6e:06:62:bf:ab:08:83:2a:2c:62:63:
a9:7e:c1:03:e5:7b:05:49:f3:cd:f3:7b:66:26:7e:75:7c:fb:
7a:9a:07:f9:93:ad:79:df:4f:7b:20:07:27:0b:4b:65:7a:b4:
2d:50:11:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:12 2023 by rpki-client on console.sobornost.net