Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/729ae7-f675-4916-836c-39e761a930d6/1/Mlusevht4hMkEpStZeJqIBuq7EA.roa
File: Mlusevht4hMkEpStZeJqIBuq7EA.roa (raw, json)
Hash identifier: uyyQyVYPpWcwN8cm7Ih/sIfnPabnpj8CS86rgK5pDnc=
Subject key identifier: 32:5B:AC:7A:F8:6D:E2:13:24:12:94:AD:65:E2:6A:20:1B:AA:EC:40
Certificate issuer: /CN=1e483524d8cab334d366de09736782385b8be948
Certificate serial: 04A6C35E
Authority key identifier: 1E:48:35:24:D8:CA:B3:34:D3:66:DE:09:73:67:82:38:5B:8B:E9:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hkg1JNjKszTTZt4Jc2eCOFuL6Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/729ae7-f675-4916-836c-39e761a930d6/1/Mlusevht4hMkEpStZeJqIBuq7EA.roa
Signing time: Sat 01 Jan 2022 00:54:54 +0000
ROA not before: Sat 01 Jan 2022 00:54:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28701
IP address blocks: 45.156.109.0/24 maxlen: 24
45.156.108.0/22 maxlen: 22
45.156.108.0/24 maxlen: 24
45.156.111.0/24 maxlen: 24
45.156.110.0/24 maxlen: 24
2a10:4000::/29 maxlen: 29
2a10:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78037854 (0x4a6c35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e483524d8cab334d366de09736782385b8be948
Validity
Not Before: Jan 1 00:54:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=325bac7af86de213241294ad65e26a201baaec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:d5:f6:73:98:b3:c8:79:65:99:f2:61:49:
6c:38:33:43:5c:83:2a:10:55:a5:63:50:63:10:1f:
3d:68:2c:3b:01:55:a0:6d:3b:e4:e2:37:19:35:b7:
fc:43:9c:ab:c0:77:ac:3e:ae:c9:4a:e6:bc:24:38:
6b:45:f4:bd:d8:e7:60:1c:70:e6:cb:0c:70:dd:b8:
44:ce:2c:eb:e0:19:78:20:6b:4a:b7:1e:04:44:3f:
8c:c6:21:32:bd:38:cb:b7:63:6a:db:a4:b4:3f:76:
0a:e6:77:1e:2b:28:21:a0:ca:d7:7b:78:f6:4f:c0:
a3:83:02:40:bd:ce:57:60:61:d5:80:ff:9b:60:f6:
6e:da:56:06:a5:67:de:a6:0e:d7:6c:45:10:3e:2a:
9e:18:bc:aa:01:d0:3f:a2:26:1f:9c:03:c6:30:d9:
76:15:21:1a:89:a5:7c:59:db:26:a2:6a:2d:64:cd:
ce:23:32:60:6d:e0:87:7b:a4:ad:6b:66:47:cf:7e:
a8:59:48:5a:02:ac:05:29:bc:9d:d1:1b:a1:19:86:
12:95:f5:af:06:8b:e8:d9:5f:89:de:1e:2d:21:24:
97:a8:4a:22:cb:08:a1:03:28:09:27:e3:20:22:e6:
22:40:f4:64:c1:ae:16:4f:cf:7e:81:44:9e:35:8e:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5B:AC:7A:F8:6D:E2:13:24:12:94:AD:65:E2:6A:20:1B:AA:EC:40
X509v3 Authority Key Identifier:
keyid:1E:48:35:24:D8:CA:B3:34:D3:66:DE:09:73:67:82:38:5B:8B:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hkg1JNjKszTTZt4Jc2eCOFuL6Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/729ae7-f675-4916-836c-39e761a930d6/1/Mlusevht4hMkEpStZeJqIBuq7EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/729ae7-f675-4916-836c-39e761a930d6/1/Hkg1JNjKszTTZt4Jc2eCOFuL6Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.108.0/22
IPv6:
2a10:4000::/29
Signature Algorithm: sha256WithRSAEncryption
5a:2b:a9:37:15:19:43:dc:62:0a:4f:05:2f:c7:95:1f:f6:8e:
5d:2d:9d:6b:2b:c5:83:5a:e8:da:be:75:6e:7f:be:8a:74:57:
1d:2e:f2:90:2f:e9:9a:b6:2f:28:08:6c:64:a4:99:96:45:b1:
9b:dc:68:75:ca:e7:de:e9:46:da:3a:25:09:c7:25:5c:b7:d2:
32:45:47:1c:78:bf:8a:a5:37:8b:6d:27:ac:b3:83:98:dd:0a:
09:59:0a:11:c6:d8:89:0d:7d:83:eb:e1:27:eb:a7:65:33:f3:
d9:1d:dc:cb:0c:f1:7c:59:70:d4:be:17:ec:82:13:09:48:d5:
c6:f8:03:1a:ed:2f:e1:38:5a:8c:68:33:6b:09:1c:67:8b:c3:
a1:94:89:07:cb:5f:1d:3f:1d:3b:7a:03:3a:bf:f2:6d:f8:ad:
39:03:1f:4e:02:3a:f6:dd:c7:6a:eb:3a:e1:31:ff:04:7a:a8:
5c:e8:c7:69:d5:8a:1c:da:0a:a1:f5:92:45:78:10:79:19:aa:
fb:81:f9:a9:e5:bb:22:01:f8:bb:b0:81:b1:a2:64:37:6c:71:
2d:b9:70:a1:23:e7:6d:23:ac:50:17:0a:a2:c9:11:d5:87:d0:
78:dd:54:17:88:4f:f3:10:0e:01:90:64:97:16:5b:46:70:f9:
e5:d8:51:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:54 2023 by rpki-client on console.sobornost.net