Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/OxOstzY7yh7MsZm6w5Au6TwKyLw.roa
File: OxOstzY7yh7MsZm6w5Au6TwKyLw.roa (raw, json)
Hash identifier: r8YaYsFfZ0FwrwwmLUuQbGCEAL9nFIkH/YuNeyBxC8I=
Subject key identifier: 3B:13:AC:B7:36:3B:CA:1E:CC:B1:99:BA:C3:90:2E:E9:3C:0A:C8:BC
Certificate issuer: /CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Certificate serial: 01874AEA2F8050C0D927118DDBEC8C93E68F
Authority key identifier: 9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/OxOstzY7yh7MsZm6w5Au6TwKyLw.roa
Signing time: Tue 04 Apr 2023 06:17:54 +0000
ROA not before: Tue 04 Apr 2023 06:17:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207990
IP address blocks: 185.211.42.0/24 maxlen: 32
45.13.228.0/22 maxlen: 32
82.115.215.0/24 maxlen: 32
45.158.212.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4a:ea:2f:80:50:c0:d9:27:11:8d:db:ec:8c:93:e6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Validity
Not Before: Apr 4 06:17:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b13acb7363bca1eccb199bac3902ee93c0ac8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:11:89:61:7b:c3:f5:a5:4d:c1:6c:81:3b:
8f:3b:81:4a:fb:a9:4d:70:9e:ca:97:1b:4e:bc:f8:
58:d7:39:fa:60:ab:d1:8c:eb:05:5f:61:1d:97:40:
05:e5:20:ab:e6:9b:6c:8b:73:33:97:a5:90:a6:5f:
08:1b:75:a0:9c:12:7e:c8:6b:36:53:df:b9:15:d2:
81:09:f0:b1:7f:9d:10:51:93:8e:c6:0a:18:ed:ae:
fc:65:ae:fe:63:9f:3b:b4:ba:d0:11:c8:65:86:19:
10:dc:57:6d:3c:8d:ad:dd:d2:10:95:31:52:44:0d:
f3:3a:8a:2e:14:1d:91:9a:b0:5e:55:83:fb:43:37:
36:46:a3:f4:cf:30:a6:ca:61:9a:af:f2:33:6e:8e:
e3:53:27:3d:13:58:ce:75:3e:e6:2b:49:13:fc:9a:
2b:01:32:e1:14:51:e2:41:ed:be:e1:7b:32:40:b9:
78:1b:fc:c3:66:a9:09:5d:c5:a4:c8:b6:4f:12:2d:
3e:d8:9f:66:12:1e:53:22:00:3f:d4:c8:69:3a:ba:
b9:7e:4b:67:13:25:b9:35:eb:1e:da:97:3d:3d:eb:
81:cc:8a:f8:18:52:10:b7:94:0e:fa:ca:71:9f:8c:
1c:a7:65:48:97:5b:90:30:de:5b:06:76:cf:62:6d:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:13:AC:B7:36:3B:CA:1E:CC:B1:99:BA:C3:90:2E:E9:3C:0A:C8:BC
X509v3 Authority Key Identifier:
keyid:9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/OxOstzY7yh7MsZm6w5Au6TwKyLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.228.0/22
45.158.212.0/22
82.115.215.0/24
185.211.42.0/24
Signature Algorithm: sha256WithRSAEncryption
86:90:e0:a4:b9:f3:b3:1a:13:30:3e:04:91:c1:3b:04:94:c8:
d0:8b:f7:3b:08:73:18:73:6a:97:b2:ac:81:ab:c9:83:2c:29:
44:84:16:51:b5:4c:c4:c1:ed:74:65:d4:29:ed:ab:02:46:d8:
28:b1:3c:4c:a5:34:dc:47:47:d3:6b:2c:d3:74:53:1d:ca:08:
48:ba:49:30:ad:dd:e0:ab:01:a9:7b:1b:4e:13:01:99:8e:c1:
8e:b4:62:46:c8:66:48:ff:33:48:86:ee:ba:b4:b4:7d:af:89:
43:df:e4:ea:99:51:5b:7e:d0:c3:c0:4b:fb:e2:04:6f:6b:49:
08:a7:c3:b2:cb:73:b3:d3:fb:c2:95:40:37:0a:70:56:9c:07:
74:9f:47:d7:20:33:fd:0b:31:59:94:45:bf:44:28:57:89:68:
17:ef:1c:e1:13:6e:92:36:dc:ce:a2:13:20:a1:e8:cb:fb:02:
7c:44:c3:0a:8c:91:0d:4b:29:65:22:89:0a:7e:29:a6:73:01:
81:84:fb:ee:f5:c1:f7:f6:74:08:0d:65:c7:7a:43:33:a2:28:
13:81:32:91:4a:9e:95:8e:d4:27:69:90:8d:a8:e7:38:66:83:
1c:3e:80:61:1f:d0:fd:5c:8b:44:73:dd:ff:3e:12:34:3d:45:
07:e2:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:53 2023 by rpki-client on console.sobornost.net