Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/xo8WuETiwxfSGGci2QD9uDp88hk.roa
File: xo8WuETiwxfSGGci2QD9uDp88hk.roa (raw, json)
Hash identifier: RkrShRXQ77op0GXZOkIV7YPlwEK2PjspCExK9EfUGtU=
Subject key identifier: C6:8F:16:B8:44:E2:C3:17:D2:18:67:22:D9:00:FD:B8:3A:7C:F2:19
Certificate issuer: /CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Certificate serial: 0193EE6C11B627451DE43CA083E97C193AB6
Authority key identifier: C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/xo8WuETiwxfSGGci2QD9uDp88hk.roa
Signing time: Sun 22 Dec 2024 12:51:20 +0000
ROA not before: Sun 22 Dec 2024 12:51:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214570
IP address blocks: 45.137.19.0/24 maxlen: 24
185.254.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ee:6c:11:b6:27:45:1d:e4:3c:a0:83:e9:7c:19:3a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9a3a5e411deaf2284ffd01530bfb41f816cbba3
Validity
Not Before: Dec 22 12:51:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c68f16b844e2c317d2186722d900fdb83a7cf219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:95:fd:ff:57:c4:85:4b:66:f4:3d:ef:86:ed:
4c:fa:f7:20:4e:d7:68:3c:d2:51:e8:f7:c8:2c:00:
e3:c1:22:08:fc:d5:11:b8:3e:ea:66:07:85:2e:ee:
f6:45:8d:aa:12:8d:0c:20:39:46:72:cb:32:b2:a3:
0c:9c:bc:ff:e1:56:c5:d0:9e:1c:1c:46:d1:5b:00:
c2:40:b9:23:2e:3f:65:44:f1:c8:ab:3a:60:e5:69:
35:e3:73:98:45:63:a6:e8:eb:b9:0e:0e:96:cd:8b:
c7:c1:14:f8:4d:35:72:5c:9e:f1:6f:8f:fa:72:58:
a3:32:84:3a:43:32:f8:35:7a:5e:55:48:fb:7a:4f:
6a:83:f4:1a:19:08:24:a1:af:4c:44:1d:f3:fe:0f:
21:ab:21:88:46:b3:f1:59:05:6d:d4:12:b8:bf:07:
37:9a:85:bf:75:66:5e:43:43:6b:1e:f5:49:15:96:
b0:64:0a:ab:92:48:1c:59:29:3b:60:ee:1d:7f:68:
c9:6a:86:b4:d6:54:e2:c7:25:66:a5:4e:ba:43:a2:
b1:fd:8f:4f:78:ee:a1:67:6d:5d:25:6b:e9:8a:3a:
b8:51:67:b0:48:ba:4d:30:b6:f6:58:c2:97:db:47:
49:48:b9:57:69:2d:e0:75:e2:a2:fc:04:ee:f8:bf:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8F:16:B8:44:E2:C3:17:D2:18:67:22:D9:00:FD:B8:3A:7C:F2:19
X509v3 Authority Key Identifier:
keyid:C9:A3:A5:E4:11:DE:AF:22:84:FF:D0:15:30:BF:B4:1F:81:6C:BB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yaOl5BHeryKE_9AVML-0H4Fsu6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/xo8WuETiwxfSGGci2QD9uDp88hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b8ea83-4765-43a6-a54f-20d24900130a/1/yaOl5BHeryKE_9AVML-0H4Fsu6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.19.0/24
185.254.165.0/24
Signature Algorithm: sha256WithRSAEncryption
83:57:ac:64:bc:f3:ee:d0:88:c9:ec:4c:47:49:70:5e:be:f3:
a1:0f:52:78:12:0a:84:ef:06:f7:e5:92:01:21:0f:e1:00:35:
04:dd:58:0e:fd:02:8a:73:23:3d:59:e7:18:89:84:bc:b6:ef:
91:22:f9:dd:5f:9f:5e:4b:5c:3f:de:d3:38:c8:ec:e5:55:36:
96:8a:74:86:10:4d:b7:eb:93:03:e6:27:74:9d:03:99:27:5e:
19:5a:bc:c6:2f:ec:9c:e4:02:16:3e:4c:d7:59:d0:87:d4:4a:
e3:be:ac:4b:55:86:3c:61:29:0c:54:9b:d8:89:3d:fe:b3:66:
34:0f:ce:41:1c:56:d6:15:00:71:87:f0:0d:21:cb:3b:a3:40:
04:04:53:ab:b1:f4:b4:b0:66:28:3a:c1:a1:bf:6d:59:1c:f8:
36:e8:9f:62:d6:6f:8f:4e:05:e2:8b:07:92:8d:eb:73:91:02:
23:27:9c:70:9c:f3:b3:7d:8e:14:5a:ae:70:da:15:e0:0d:d4:
63:4a:53:78:47:42:9b:54:38:86:cd:42:56:00:76:c0:1f:88:
60:21:9d:06:a7:42:d1:2e:5c:4d:db:d3:9e:49:e8:c9:d4:4d:
e3:4e:ba:23:60:a5:66:47:99:40:20:90:13:09:e1:96:66:bc:
39:55:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:48 2024 by rpki-client on console.sobornost.net