Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/XbCvPHVOYBsq9QHxHsf_bTN5_CA.roa
File: XbCvPHVOYBsq9QHxHsf_bTN5_CA.roa (raw, json)
Hash identifier: L3f/rqKrNU8g9/7zdbP/C5u2D1jRWssrr1jzCXU2Rgw=
Subject key identifier: 5D:B0:AF:3C:75:4E:60:1B:2A:F5:01:F1:1E:C7:FF:6D:33:79:FC:20
Certificate issuer: /CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
Certificate serial: 01826DF229763C40FA9164FB590B4EC8E096
Authority key identifier: 10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/XbCvPHVOYBsq9QHxHsf_bTN5_CA.roa
Signing time: Fri 05 Aug 2022 12:19:23 +0000
ROA not before: Fri 05 Aug 2022 12:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.149.233.0/24 maxlen: 24
45.149.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:f2:29:76:3c:40:fa:91:64:fb:59:0b:4e:c8:e0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c06ca931cb67464e76fbefb3db68f3f12acd41
Validity
Not Before: Aug 5 12:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5db0af3c754e601b2af501f11ec7ff6d3379fc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:d7:08:bf:b2:ef:9b:08:68:05:32:9e:ed:
2a:6c:2e:1a:6c:0a:fd:51:30:04:29:e7:cd:45:87:
09:89:51:82:04:2d:ae:84:e0:dd:36:7d:e9:36:e9:
f0:f0:b0:3a:b1:23:b6:3a:50:33:bc:52:0b:d8:d9:
53:7b:74:72:88:58:65:b2:25:f9:41:39:39:01:58:
a4:cf:e1:d0:da:99:cf:17:60:39:00:14:84:52:9a:
58:ec:16:05:12:fa:5d:f4:44:29:66:e1:37:fc:30:
6d:c4:99:39:2a:f9:ab:9d:f2:f4:91:7e:34:8f:8b:
b0:a5:12:b2:c4:14:94:0d:1e:2c:c0:fd:1d:8b:67:
43:13:45:d3:d7:12:7a:a3:35:90:26:5f:28:29:5f:
c3:83:46:be:89:b6:f5:d2:4b:26:ac:4f:9f:20:56:
18:0a:c2:9f:4b:45:15:c6:a0:b7:31:e3:c4:7e:78:
91:6c:23:94:e4:eb:d5:c8:07:ed:79:52:1b:30:7c:
06:cc:78:ef:d5:e9:83:cd:7d:14:e9:24:63:de:3c:
2d:2c:79:ea:c2:1c:ed:8b:b6:19:26:9d:63:1f:1f:
05:ad:a4:b5:e6:7b:d1:08:98:33:e9:bc:c9:f5:07:
de:61:52:a3:cf:64:16:e4:9a:57:2b:64:ee:05:06:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B0:AF:3C:75:4E:60:1B:2A:F5:01:F1:1E:C7:FF:6D:33:79:FC:20
X509v3 Authority Key Identifier:
keyid:10:C0:6C:A9:31:CB:67:46:4E:76:FB:EF:B3:DB:68:F3:F1:2A:CD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/XbCvPHVOYBsq9QHxHsf_bTN5_CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ce7f6c-06a6-481f-87f9-6021aa334fa5/1/EMBsqTHLZ0ZOdvvvs9to8_EqzUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.233.0/24
45.149.235.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c2:44:2b:d1:c5:6f:f5:3b:88:10:25:56:74:b1:93:2b:39:
f5:80:40:f1:56:e6:5c:ff:9c:6b:48:cb:2e:d2:3d:11:9f:5b:
5e:55:ed:ad:af:e0:b9:bf:a2:f6:9a:86:18:c3:08:a4:c0:09:
fd:f5:13:78:ea:d1:58:29:e7:45:ba:eb:ee:08:73:4b:11:91:
7e:ab:a7:fe:28:f9:cd:61:a8:8a:ea:6c:fd:3d:8d:21:61:53:
85:2a:84:7c:9e:8a:b1:3e:4e:c4:f1:f0:04:1e:1e:5f:b4:94:
e7:c7:26:12:23:14:81:94:2b:e6:aa:33:c9:4b:b1:9a:98:b5:
51:cc:af:1e:2a:b8:96:5e:2e:17:2b:9e:87:7e:01:68:56:d6:
1b:9e:b3:dc:68:bf:d1:dd:98:e8:6f:e7:ee:51:6f:3d:3b:e5:
5b:41:3e:8d:88:6c:ac:92:6d:25:e4:8d:d0:ea:eb:67:90:40:
46:ae:b6:88:08:fa:c5:54:12:60:19:d9:26:16:7e:56:f3:6e:
0a:ca:77:a6:45:da:2e:55:88:af:21:6e:01:50:7a:d9:63:78:
05:a9:7d:7b:52:49:ba:8b:50:96:f0:33:b8:3c:38:1d:8a:0f:
13:79:89:91:44:43:9c:78:a8:c8:d4:4b:6d:33:f2:e6:bc:54:
74:78:b6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net