Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/rXbiu1MD5PJ5spMbXCOr3tUPMTc.roa
File: rXbiu1MD5PJ5spMbXCOr3tUPMTc.roa (raw, json)
Hash identifier: gijy68kazBpQTXWXgdWfNE+xW8kdu0W7p7+cdjN9QL8=
Subject key identifier: AD:76:E2:BB:53:03:E4:F2:79:B2:93:1B:5C:23:AB:DE:D5:0F:31:37
Certificate issuer: /CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Certificate serial: 0186DF0B6F06AB437DFD9ED92D97A8B36382
Authority key identifier: 9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/rXbiu1MD5PJ5spMbXCOr3tUPMTc.roa
Signing time: Tue 14 Mar 2023 07:35:13 +0000
ROA not before: Tue 14 Mar 2023 07:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 45.91.88.0/22 maxlen: 32
45.131.92.0/22 maxlen: 32
45.149.20.0/22 maxlen: 24
45.83.224.0/22 maxlen: 32
45.134.104.0/22 maxlen: 32
45.158.212.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:0b:6f:06:ab:43:7d:fd:9e:d9:2d:97:a8:b3:63:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Validity
Not Before: Mar 14 07:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad76e2bb5303e4f279b2931b5c23abded50f3137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2e:f5:7f:3e:8a:09:22:df:47:c5:92:b5:2c:
4b:6f:9c:e1:08:7d:b4:89:52:da:f5:d0:b7:b7:65:
9f:68:d7:57:45:ca:f2:e6:b4:7c:c8:00:d4:b5:fd:
2b:9e:c0:c5:09:13:db:29:fa:ff:25:f9:20:f9:6e:
13:08:5d:d1:fb:ab:08:14:47:78:06:43:00:f9:e6:
02:d3:43:83:cb:20:ce:47:82:72:68:ee:49:6a:9b:
15:00:bd:4d:ae:ef:ab:f2:a8:50:17:c4:b2:7d:2d:
72:6f:27:81:09:27:0e:eb:ac:d0:22:3f:b5:03:39:
1e:4a:65:df:17:6e:cb:6a:e3:ab:8c:30:64:4b:3c:
fa:94:89:b8:78:77:1f:18:aa:7c:43:ba:42:56:ac:
f8:3d:2f:af:23:ac:d3:cb:32:a5:87:e8:9d:7f:56:
1b:49:81:fb:b2:05:b8:fd:3d:72:01:04:57:29:81:
22:c6:28:7b:f4:66:ae:ae:a6:71:ed:dc:7e:61:dc:
60:3e:a7:21:0a:92:23:bd:c2:b1:b1:b5:c0:a1:d2:
18:d6:ad:4a:1f:ca:ea:8b:24:43:a4:b6:1f:26:6b:
ca:48:5d:e4:0a:99:81:68:6c:93:19:9f:3e:3f:f1:
24:33:0a:a6:df:9a:f8:16:1e:6b:c0:90:ef:3f:42:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:76:E2:BB:53:03:E4:F2:79:B2:93:1B:5C:23:AB:DE:D5:0F:31:37
X509v3 Authority Key Identifier:
keyid:9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/rXbiu1MD5PJ5spMbXCOr3tUPMTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.224.0/22
45.91.88.0/22
45.131.92.0/22
45.134.104.0/22
45.149.20.0/22
45.158.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:15:4c:0c:6a:d1:0c:2a:8c:1a:d9:0f:f5:fa:ee:08:82:55:
bf:0e:47:4b:20:ee:61:84:33:71:83:7d:44:7c:a8:de:42:2f:
f2:8f:f2:2f:2c:8c:54:e6:7f:8c:df:f0:db:76:c7:52:f7:f6:
c1:c6:29:b0:55:91:9c:c7:39:09:58:03:4c:b2:cc:79:8b:a7:
c7:77:07:8b:f7:dd:06:2f:61:69:ad:cc:7a:4d:d3:bd:3c:b4:
2c:49:cf:44:e7:a3:3e:88:58:ff:b5:8c:29:bd:b5:e5:7f:48:
ff:d9:9d:62:95:84:77:86:55:31:08:62:f9:ee:e5:a4:6c:bb:
89:44:9e:86:50:57:1a:23:a3:e6:3c:5c:35:9f:77:77:1e:1c:
a2:fc:70:c5:22:44:05:78:0f:31:f4:41:07:ef:c9:2a:73:31:
ec:74:88:14:89:47:c4:9e:6f:f2:b0:06:b4:c7:07:58:bc:3a:
7b:26:30:19:1e:02:a6:fa:63:1f:c7:a7:61:84:5f:49:d8:42:
6f:e9:b3:48:09:2b:79:3f:87:97:e9:ab:4e:1b:de:96:6c:f3:
4d:f8:25:38:8e:42:ad:5d:5d:81:4c:bb:7e:a3:37:31:bc:1e:
39:eb:b4:23:17:87:d7:51:df:b0:8f:65:48:2e:be:e0:a5:6e:
c9:f0:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:53 2023 by rpki-client on console.sobornost.net