Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/OCIV-_Hl8DOur-uT5_7RHl6qb6k.roa
File: OCIV-_Hl8DOur-uT5_7RHl6qb6k.roa (raw, json)
Hash identifier: cI36xYbB4eYIRX16C1QIY6L8Xv9buJduttk3r2tnCU4=
Subject key identifier: 38:22:15:FB:F1:E5:F0:33:AE:AF:EB:93:E7:FE:D1:1E:5E:AA:6F:A9
Certificate issuer: /CN=b50be8bc92bf6b429d9818ad655cc2398fdfbf86
Certificate serial: 056A18BB
Authority key identifier: B5:0B:E8:BC:92:BF:6B:42:9D:98:18:AD:65:5C:C2:39:8F:DF:BF:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQvovJK_a0KdmBitZVzCOY_fv4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/OCIV-_Hl8DOur-uT5_7RHl6qb6k.roa
Signing time: Sat 01 Jan 2022 01:01:19 +0000
ROA not before: Sat 01 Jan 2022 01:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204451
IP address blocks: 45.14.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90839227 (0x56a18bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50be8bc92bf6b429d9818ad655cc2398fdfbf86
Validity
Not Before: Jan 1 01:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=382215fbf1e5f033aeafeb93e7fed11e5eaa6fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:6c:8a:2c:e9:39:bf:e9:c5:4f:ec:29:de:
86:cf:cf:eb:c4:b0:3a:fc:62:39:09:4d:a2:cc:15:
78:3d:c7:9f:67:64:94:4e:e9:60:0a:62:ee:e6:4a:
7e:6a:42:a3:40:78:ad:27:98:91:27:7e:93:4d:02:
68:47:cf:65:dd:24:fa:0a:96:bf:45:d6:2a:43:a2:
46:84:37:d0:03:14:52:e3:38:cc:0e:bb:70:2e:33:
0d:4a:20:d8:74:b9:10:c3:f4:ea:1b:bd:79:cb:7c:
43:7d:1c:f4:19:12:cf:15:79:bd:74:94:2e:e8:9e:
19:50:1c:a8:bd:57:14:6e:46:35:8c:0a:7d:e6:a0:
61:68:5a:23:5d:18:5d:cc:c8:9b:78:2d:81:86:36:
a0:f4:ec:b1:8d:51:92:50:b0:81:91:41:76:be:2a:
f9:b1:a1:42:23:42:31:fb:16:fa:39:75:bc:55:9a:
db:43:08:5d:bd:11:1b:98:68:f5:e9:2e:52:08:bf:
42:50:af:90:5e:f7:fc:6b:32:7a:d7:4f:b6:a5:10:
82:5f:1a:2f:79:5c:5a:db:0b:81:16:4d:4b:28:61:
c0:89:9d:30:46:65:41:2c:d7:5d:d8:32:ad:db:db:
04:43:c1:13:90:02:c0:bf:21:a5:a3:a2:d4:d0:5e:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:22:15:FB:F1:E5:F0:33:AE:AF:EB:93:E7:FE:D1:1E:5E:AA:6F:A9
X509v3 Authority Key Identifier:
keyid:B5:0B:E8:BC:92:BF:6B:42:9D:98:18:AD:65:5C:C2:39:8F:DF:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQvovJK_a0KdmBitZVzCOY_fv4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/OCIV-_Hl8DOur-uT5_7RHl6qb6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/tQvovJK_a0KdmBitZVzCOY_fv4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.175.0/24
Signature Algorithm: sha256WithRSAEncryption
77:05:a7:de:fd:16:39:86:12:35:8e:7a:1c:9d:71:03:76:71:
ef:02:73:95:39:1e:bb:5d:56:c5:98:1c:3e:dc:cc:1f:cc:c1:
d2:a3:57:d7:ea:ff:38:ef:1d:4d:f5:15:1c:d2:7b:e8:fa:1b:
43:5e:75:2e:bb:5d:af:06:d6:3b:01:4f:06:0f:a2:00:71:f5:
ed:26:29:6d:14:da:7d:ba:b2:b0:d0:49:7a:86:08:eb:74:2d:
93:16:b2:eb:e5:2d:28:0b:be:ed:dd:d9:7a:83:e2:9a:5b:be:
5a:8e:a5:17:84:72:a8:a2:ac:90:ef:06:12:38:bb:de:05:f2:
12:43:be:56:73:c9:7f:aa:c3:8b:93:da:a3:b7:30:2a:0b:77:
af:68:8a:57:98:5a:42:3a:fb:b3:87:ab:f8:e1:5e:94:94:b7:
d9:c8:78:8d:9e:fd:8b:41:f4:43:2f:ee:b6:c3:b5:62:79:5f:
eb:a9:c0:c4:d1:b9:c0:0a:8b:39:67:78:03:de:36:23:89:1f:
97:0b:5c:63:5d:d3:26:b2:b0:c0:d5:83:3c:a4:b8:df:4d:3e:
5d:30:b1:76:08:6b:5d:ca:a1:e2:83:0c:c5:62:74:d4:73:70:
d2:40:f5:44:85:52:ea:9b:84:a1:f5:e6:9b:71:bd:67:e0:dd:
2c:3f:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net