Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/12zlYP4_CU9FkSRulpwwqjuvTXI.roa
File: 12zlYP4_CU9FkSRulpwwqjuvTXI.roa (raw, json)
Hash identifier: LePTB7I1GV+VSPAJLGg1OfdXXV5VMnYj4luAmf64c3Q=
Subject key identifier: D7:6C:E5:60:FE:3F:09:4F:45:91:24:6E:96:9C:30:AA:3B:AF:4D:72
Certificate issuer: /CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
Certificate serial: 0182B0D116B65AF9320985D19DB02E375B0D
Authority key identifier: 10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/12zlYP4_CU9FkSRulpwwqjuvTXI.roa
Signing time: Thu 18 Aug 2022 11:57:49 +0000
ROA not before: Thu 18 Aug 2022 11:57:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.149.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:d1:16:b6:5a:f9:32:09:85:d1:9d:b0:2e:37:5b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
Validity
Not Before: Aug 18 11:57:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d76ce560fe3f094f4591246e969c30aa3baf4d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:fb:12:86:44:2e:cd:a0:4a:92:e9:c3:b8:
4b:9d:86:0f:65:c8:fe:ce:2b:3f:26:b2:ac:5a:80:
3a:c1:3f:cb:95:df:d3:74:1f:5f:63:51:aa:e1:95:
88:3b:5a:d7:b6:76:69:55:5f:36:24:4d:88:fe:d8:
f3:fe:b4:03:03:74:45:a8:a0:1f:56:f2:61:01:97:
c0:bd:31:7e:4e:c0:ad:22:eb:fb:e0:e5:68:ea:bd:
7d:a2:37:eb:9b:d8:0e:92:3d:86:f7:ed:1b:da:3e:
81:d1:f5:74:00:5d:d6:6d:b8:69:dc:48:93:90:c5:
a2:fc:28:e9:11:8a:90:f1:59:3c:6d:07:b0:dd:9d:
d7:c3:62:b9:4b:b3:ae:ad:aa:18:c7:9f:03:71:d5:
4e:ac:73:64:9f:4f:36:94:c7:43:81:c5:2d:ec:fd:
6b:a8:26:71:e4:3d:c8:c8:f0:7f:ad:aa:28:f7:6b:
b4:1d:6c:2d:64:30:a7:c7:32:77:82:c1:51:09:86:
e2:7d:69:30:f5:70:57:3e:e8:05:15:5a:80:20:31:
ca:93:3c:ac:46:77:2e:d3:53:7a:1f:71:66:20:30:
f4:f6:5c:f5:9e:71:85:ef:10:6b:e3:ed:2b:62:87:
d8:5d:92:c2:aa:60:80:88:85:29:5a:f2:c4:9d:2f:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6C:E5:60:FE:3F:09:4F:45:91:24:6E:96:9C:30:AA:3B:AF:4D:72
X509v3 Authority Key Identifier:
keyid:10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/12zlYP4_CU9FkSRulpwwqjuvTXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.233.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:90:c8:30:ab:0a:41:14:fb:23:39:47:29:60:3e:55:d7:69:
d5:29:4b:85:a6:65:40:82:b6:08:a7:61:87:03:77:15:79:3a:
e2:2c:c8:78:37:f3:39:ce:f5:b5:8b:fd:10:72:1d:db:e6:58:
05:a0:6e:49:45:48:80:5f:7b:2d:1b:19:2f:53:bb:3c:e4:3a:
b4:9b:38:d7:14:cf:6d:7d:48:af:dd:f3:44:5b:5c:cd:a8:9c:
f6:db:51:3f:ce:ac:da:85:46:4e:fb:e5:0e:42:18:78:83:74:
1b:08:69:a2:56:fb:c6:96:7d:68:bd:9a:71:c9:d8:98:c5:79:
78:0d:1a:47:46:a7:78:8e:30:39:32:87:27:e3:a6:60:a5:52:
e2:17:28:39:0c:78:cd:51:9f:5b:9e:3f:0b:b0:61:a5:c7:d4:
9b:d6:dc:ee:3a:10:ab:06:00:f8:cb:9a:03:bf:a6:f5:7c:7a:
b3:3e:e4:0d:2b:41:09:bb:61:27:22:d3:70:b2:be:ce:3e:96:
f2:dc:d6:1d:71:c8:41:80:4b:a7:8a:95:d0:b0:36:fa:65:5c:
1d:82:30:ec:80:a2:b7:94:a9:b7:46:ad:57:ef:48:5f:cd:7f:
af:b2:65:73:78:e8:25:99:aa:ea:d9:b7:d4:a2:d3:11:5b:65:
fa:c0:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net