Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/oVwhqIA9VszsBaWKC5n0lXHJ27E.roa
File: oVwhqIA9VszsBaWKC5n0lXHJ27E.roa (raw, json)
Hash identifier: zUp5WS8pYLqYW7Zt6F9VrltSuy9XbV11f/6ytaDjQY0=
Subject key identifier: A1:5C:21:A8:80:3D:56:CC:EC:05:A5:8A:0B:99:F4:95:71:C9:DB:B1
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01936E841588CFEE4C56CAD67EF515202C28
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/oVwhqIA9VszsBaWKC5n0lXHJ27E.roa
Signing time: Wed 27 Nov 2024 16:46:09 +0000
ROA not before: Wed 27 Nov 2024 16:46:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 45.150.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:84:15:88:cf:ee:4c:56:ca:d6:7e:f5:15:20:2c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 27 16:46:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a15c21a8803d56ccec05a58a0b99f49571c9dbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:ef:8c:e4:29:c2:57:9c:2a:15:cd:5e:fe:
7c:5c:0d:02:fb:c4:45:21:76:f8:e0:41:25:37:cf:
d8:54:37:f2:e3:9c:d0:10:ba:6c:0e:51:8c:a0:ae:
d3:d3:07:ca:cb:40:fc:ff:28:73:b9:68:2a:a1:e3:
90:52:2e:dc:2d:63:5a:89:7e:6d:de:2c:06:17:f0:
2e:2b:d1:90:fe:43:04:9e:ae:e0:a7:4c:77:cd:fd:
85:51:68:16:04:1e:55:65:d3:0a:9d:44:51:68:d5:
dd:24:f7:fc:77:3e:66:32:32:b4:7a:23:1c:3a:8a:
37:82:ea:5d:0b:70:b8:cb:24:bf:7a:4d:ad:ad:19:
93:ef:4e:91:a7:32:5c:7e:d7:08:ba:98:71:ba:ab:
a7:6c:cb:05:fa:c2:98:5a:55:5f:ec:7e:67:d9:86:
d3:d6:ea:f2:9c:72:5f:31:f0:34:e5:35:8c:03:e3:
db:27:7f:f7:a1:43:19:a2:5c:8d:d0:56:ff:b3:0a:
ae:c3:31:8b:71:bd:93:26:71:58:9a:85:6c:12:4c:
00:ae:3b:5f:1c:77:5d:d3:39:46:68:df:f0:d5:7e:
ee:89:ca:44:ff:2e:c9:b1:28:be:0c:2f:56:ab:ec:
23:17:a8:60:28:7c:46:cf:e0:41:4d:02:5f:3d:89:
ce:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5C:21:A8:80:3D:56:CC:EC:05:A5:8A:0B:99:F4:95:71:C9:DB:B1
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/oVwhqIA9VszsBaWKC5n0lXHJ27E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.35.0/24
Signature Algorithm: sha256WithRSAEncryption
67:df:91:5b:f1:b0:fc:8f:ca:45:c8:3b:5e:36:b6:a8:d1:98:
ca:51:20:7c:9b:62:63:f8:c5:32:a1:7b:09:d7:f6:3f:5d:d0:
3c:3c:e7:44:0f:ce:62:4b:fd:b3:20:45:18:3d:84:62:ac:d6:
80:bb:63:cd:fd:9a:4f:0a:a6:35:0d:31:67:df:7e:4c:e6:c4:
8c:51:0e:88:3c:60:90:44:3d:a2:71:92:95:ab:96:84:85:bf:
b7:96:ad:80:88:5a:de:70:ec:be:92:62:c8:d5:bf:13:07:4b:
ae:21:34:df:51:5e:b7:37:57:3d:d4:d9:f3:0a:05:99:f5:c2:
6b:e3:50:3d:ef:58:0d:b2:36:39:33:39:c5:9d:7f:63:b6:99:
fe:68:91:60:15:14:2d:fb:fa:2c:d4:94:9b:fb:17:68:08:fb:
2d:61:0e:07:bd:7c:39:35:19:8b:88:80:93:4e:ed:70:32:a3:
23:ad:c5:99:63:56:c5:69:e1:16:ff:0d:d9:36:6e:cb:ca:40:
32:69:40:d1:5d:c7:61:9f:60:b1:c9:38:e3:10:88:91:08:f9:
6c:4d:75:d8:f3:a8:b0:53:54:94:0f:83:03:72:0c:9d:e0:57:
38:1c:d0:57:2d:68:e1:b5:4f:d0:f6:f6:79:5e:f2:4c:f4:fb:
bd:e8:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:42 2024 by rpki-client on console.sobornost.net