Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/bqKatFZcdEgE0rfrZkKNASzqBps.roa
File: bqKatFZcdEgE0rfrZkKNASzqBps.roa (raw, json)
Hash identifier: JSxSglVwicfiTwsAIxMk3H//eXH0jCS4RtFA4RYAAvw=
Subject key identifier: 6E:A2:9A:B4:56:5C:74:48:04:D2:B7:EB:66:42:8D:01:2C:EA:06:9B
Certificate issuer: /CN=b50be8bc92bf6b429d9818ad655cc2398fdfbf86
Certificate serial: 06C21F0A
Authority key identifier: B5:0B:E8:BC:92:BF:6B:42:9D:98:18:AD:65:5C:C2:39:8F:DF:BF:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQvovJK_a0KdmBitZVzCOY_fv4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/bqKatFZcdEgE0rfrZkKNASzqBps.roa
Signing time: Tue 31 May 2022 14:09:14 +0000
ROA not before: Tue 31 May 2022 14:09:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 45.14.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113385226 (0x6c21f0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50be8bc92bf6b429d9818ad655cc2398fdfbf86
Validity
Not Before: May 31 14:09:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ea29ab4565c744804d2b7eb66428d012cea069b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:85:28:1d:b1:2f:99:97:fb:f9:d9:44:c6:
7e:b1:3c:0c:1b:da:33:2e:e1:f3:34:51:4d:23:72:
00:e1:39:74:8d:cc:1e:79:a6:30:70:9b:08:53:8a:
22:ee:f9:3f:4b:06:c9:5d:e6:dd:f4:de:f3:a6:fc:
08:2b:db:cd:f6:6d:69:8b:f3:12:b2:43:17:5c:37:
8a:93:ba:12:8e:fb:2f:54:4c:6e:b2:3d:06:23:d4:
a0:e5:e7:83:df:28:60:dd:af:ec:3c:db:80:70:47:
56:58:e5:ae:c0:b1:38:5a:d7:6a:f5:6c:01:c5:7d:
5d:14:d5:aa:99:8c:1e:3d:d8:0e:b8:42:17:c0:51:
55:cf:10:ec:f4:25:c1:50:d4:45:b7:1c:18:d7:ed:
67:be:d0:bc:f7:ba:25:25:af:90:e9:62:07:72:71:
d6:17:98:54:ea:f2:3d:6b:7e:79:43:4b:15:e6:88:
d8:0c:e1:7a:16:b0:c5:5a:c0:ee:97:a6:ce:0d:7f:
25:01:5e:44:d5:72:72:10:d9:bd:60:25:d6:03:5c:
52:54:4c:91:4b:98:a2:ba:ca:ce:74:c9:9d:d6:a8:
77:b2:23:6c:61:52:ad:96:cf:b8:f1:2a:5b:7a:3a:
4e:b1:23:a4:a9:91:1b:f5:95:b6:ae:49:ea:d9:ce:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A2:9A:B4:56:5C:74:48:04:D2:B7:EB:66:42:8D:01:2C:EA:06:9B
X509v3 Authority Key Identifier:
keyid:B5:0B:E8:BC:92:BF:6B:42:9D:98:18:AD:65:5C:C2:39:8F:DF:BF:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQvovJK_a0KdmBitZVzCOY_fv4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/bqKatFZcdEgE0rfrZkKNASzqBps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/34221a-fb7e-4a76-b9d7-2075cd31ff93/1/tQvovJK_a0KdmBitZVzCOY_fv4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.174.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:91:59:ec:70:7d:55:ae:0f:65:b5:1e:d9:1c:ab:ad:16:fe:
00:38:39:41:9a:e3:7d:d4:c9:7c:9e:59:93:b0:64:34:09:ef:
7d:fe:c6:64:38:25:ee:e6:85:74:44:15:cd:8d:be:ec:9b:e3:
0c:bf:14:46:85:e1:8c:a6:ec:38:e2:01:6a:14:31:9b:8d:1e:
8c:b7:08:e5:b9:9b:df:ac:5e:06:0a:ae:19:2c:25:d5:f7:1a:
17:66:ec:c4:40:e5:03:1b:ec:2a:4f:96:c9:e7:30:6d:d0:db:
05:89:b5:01:5a:4f:d3:6f:5b:99:e2:90:95:4e:38:1e:41:05:
e4:9f:3e:95:ba:c8:81:3f:d1:64:df:b8:b8:b5:a6:c8:d7:65:
b6:75:15:51:91:9e:a0:c1:1f:2c:97:03:e1:12:1c:8f:09:2d:
58:24:63:63:2c:ad:60:86:31:21:b4:4b:d5:9c:b5:55:16:f7:
49:10:0b:a3:15:81:ce:ce:1e:a0:88:de:07:c7:03:e0:9d:5b:
bc:8a:78:81:4b:8c:ce:9e:83:ca:36:59:10:3f:22:2a:b2:99:
8f:3d:04:bd:3a:69:4b:92:a8:e7:08:9b:3b:27:f6:23:ba:41:
16:e2:35:fa:48:d3:c8:15:c9:53:2f:99:67:fe:b4:dc:3c:df:
8c:e1:ec:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:02 2023 by rpki-client on console.sobornost.net