Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/gUDNgNG2WorFb9uVay9HZztnHs4.roa
File: gUDNgNG2WorFb9uVay9HZztnHs4.roa (raw, json)
Hash identifier: f6oXHxmUfmGLAEy5RQ/ndtXmYNNf58yN9UVRdQBALhk=
Subject key identifier: 81:40:CD:80:D1:B6:5A:8A:C5:6F:DB:95:6B:2F:47:67:3B:67:1E:CE
Certificate issuer: /CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Certificate serial: 018570D52AF6E55AF5FB5B7DFA74CD0FDA3F
Authority key identifier: FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/gUDNgNG2WorFb9uVay9HZztnHs4.roa
Signing time: Mon 02 Jan 2023 04:54:56 +0000
ROA not before: Mon 02 Jan 2023 04:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56529
IP address blocks: 45.148.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:2a:f6:e5:5a:f5:fb:5b:7d:fa:74:cd:0f:da:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc8569520e0da7d87aa682124a2774d63666b5e8
Validity
Not Before: Jan 2 04:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8140cd80d1b65a8ac56fdb956b2f47673b671ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:1f:19:a5:99:b7:65:8f:3b:86:79:af:b2:
9f:11:3e:e3:06:e7:1f:04:4c:23:05:17:ba:78:f0:
0d:eb:f6:ef:53:3c:5e:cb:2a:a8:5a:3f:99:75:e0:
58:b7:02:c1:de:0d:1d:01:ac:71:dd:9d:04:e9:79:
5d:57:c7:13:5d:99:9a:d7:ed:8c:df:88:7c:6d:29:
95:7e:ea:a9:23:c9:5b:5e:49:0f:a2:38:81:35:81:
92:97:60:d6:06:a5:c3:df:04:b7:31:ea:06:3f:66:
80:e2:38:a3:c8:e6:1b:43:a2:b3:57:91:4c:f7:3e:
41:b1:b8:6e:bb:f8:90:1e:b4:a1:fe:b3:62:7b:db:
41:42:b2:77:bd:e6:50:b6:73:51:e0:a8:4e:af:4d:
ca:e7:94:24:6b:a9:d8:40:cc:be:d4:c7:e2:81:b2:
26:70:d6:ee:06:58:7b:4e:e5:36:6e:93:05:30:f2:
19:11:1a:fa:0e:7e:da:2d:30:73:dd:04:18:e4:e8:
1e:c4:cd:39:43:db:10:0a:0f:cc:0a:ef:c1:9c:db:
78:1d:78:d9:6b:d5:d3:27:93:74:97:3f:5e:16:b4:
53:19:83:5e:66:6e:0a:73:5f:a2:1c:48:eb:f3:ab:
81:ae:63:75:04:f3:0a:9f:ec:76:f3:42:82:60:09:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:40:CD:80:D1:B6:5A:8A:C5:6F:DB:95:6B:2F:47:67:3B:67:1E:CE
X509v3 Authority Key Identifier:
keyid:FC:85:69:52:0E:0D:A7:D8:7A:A6:82:12:4A:27:74:D6:36:66:B5:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_IVpUg4Np9h6poISSid01jZmteg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/gUDNgNG2WorFb9uVay9HZztnHs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3b1313-72e2-4c45-8568-ba2d1a0ac42d/1/_IVpUg4Np9h6poISSid01jZmteg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c6:a5:a8:74:c1:3d:8d:8b:08:db:51:95:91:79:17:ba:80:
65:be:7e:69:df:3c:c2:ff:f3:21:6a:e2:a5:73:b8:09:05:10:
20:1d:81:5a:de:a3:e5:2b:14:53:7a:79:7d:cb:ef:79:0e:15:
b5:86:7f:f5:8f:d9:52:3a:6b:b1:e0:8d:28:76:db:f4:77:d6:
0e:9f:30:e3:30:f6:f2:5a:65:82:da:18:56:15:fe:79:23:23:
5d:b8:a7:06:a8:49:26:bd:a0:da:64:01:70:ab:f3:91:5b:a0:
d5:d8:6d:e9:cd:eb:ce:d1:11:5b:42:91:7f:61:3b:62:5e:8a:
a2:e0:c5:69:5b:ef:3e:c8:52:b6:3c:c7:83:b8:47:b7:8a:db:
8f:bd:e1:f5:de:62:9b:92:fb:27:03:c4:fc:6e:3c:f1:be:b8:
13:26:f9:87:90:0d:4c:73:ed:ee:10:55:15:39:2c:52:81:15:
20:8e:b9:0d:9f:12:d1:0b:39:80:50:37:d5:55:09:e0:bb:77:
f3:9b:75:ef:88:6b:83:07:b5:4c:7c:88:04:60:f5:50:49:73:
4c:8b:0f:32:10:e1:55:f4:b7:6b:73:1f:de:b1:19:b4:16:61:
ac:d5:f2:68:1a:c3:ed:07:8c:24:ab:00:6f:1c:21:5e:49:a3:
d9:69:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:48 2023 by rpki-client on console.sobornost.net