Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/exwzKOhnHIPFwPG91NtFPOKPunQ.roa
File: exwzKOhnHIPFwPG91NtFPOKPunQ.roa (raw, json)
Hash identifier: wdDxwaGjTdjgb/zMTwgf9XmrV1cK0szsqyWQKZxKJ+o=
Subject key identifier: 7B:1C:33:28:E8:67:1C:83:C5:C0:F1:BD:D4:DB:45:3C:E2:8F:BA:74
Certificate issuer: /CN=74774b7b530edacf8fa73353a9014a5638949bfb
Certificate serial: 018E379BF7B22D4A85BD94DC2B0E294AE9E5
Authority key identifier: 74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/exwzKOhnHIPFwPG91NtFPOKPunQ.roa
Signing time: Wed 13 Mar 2024 11:39:12 +0000
ROA not before: Wed 13 Mar 2024 11:39:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201162
IP address blocks: 45.87.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:9b:f7:b2:2d:4a:85:bd:94:dc:2b:0e:29:4a:e9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74774b7b530edacf8fa73353a9014a5638949bfb
Validity
Not Before: Mar 13 11:39:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b1c3328e8671c83c5c0f1bdd4db453ce28fba74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:7f:f6:ab:51:d5:94:fe:49:dc:3f:45:90:
71:14:10:9e:70:7c:d3:55:84:df:f8:24:9d:ce:c2:
f4:13:b6:b1:fc:51:81:62:24:6f:d4:62:0c:77:d1:
9a:f4:7f:7d:ae:0f:d6:55:7a:8a:15:b0:61:bd:11:
46:ec:cd:53:54:c6:25:b3:a7:af:fc:6c:9f:f8:0b:
67:e9:ec:eb:cc:f4:52:70:13:c1:f3:4a:c2:04:00:
8b:e2:15:d1:0f:8d:1b:f0:b6:a3:f8:a8:af:c6:d5:
d6:40:55:d5:e1:b1:ac:ce:76:7a:f6:d2:b8:ce:b1:
9c:49:94:c1:73:73:32:80:87:29:c9:40:0a:3d:51:
95:40:f1:8e:2d:e9:d9:7e:47:71:d6:61:ec:d5:ae:
bf:8e:45:f6:d9:85:17:88:1c:7b:15:43:67:52:b5:
0d:e8:d8:a9:c7:d5:fc:82:05:83:22:a8:fc:45:eb:
90:bb:29:14:1b:60:55:3f:ff:f7:36:04:4b:e7:87:
00:5f:02:16:f6:65:41:85:52:31:89:d2:e0:52:bc:
33:e9:00:22:20:dc:8a:56:b1:f7:07:08:b6:c0:2a:
a5:6f:83:4a:62:a4:4b:56:6a:90:ef:b5:e0:46:b1:
ad:36:a5:60:44:08:e1:05:bf:1e:ea:2f:64:8a:03:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1C:33:28:E8:67:1C:83:C5:C0:F1:BD:D4:DB:45:3C:E2:8F:BA:74
X509v3 Authority Key Identifier:
keyid:74:77:4B:7B:53:0E:DA:CF:8F:A7:33:53:A9:01:4A:56:38:94:9B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHdLe1MO2s-PpzNTqQFKVjiUm_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/exwzKOhnHIPFwPG91NtFPOKPunQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0fb69d-cefc-46ec-be39-85bd34bd4e5a/1/dHdLe1MO2s-PpzNTqQFKVjiUm_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.123.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:e4:80:c2:3a:3e:07:fc:da:40:f5:44:3f:8e:eb:c5:be:10:
61:6f:23:19:2b:20:ba:fd:e3:6e:48:66:b1:67:d8:63:cd:d4:
19:85:0e:f5:99:fa:bd:67:ab:1b:39:53:e9:37:ce:53:3b:21:
c7:85:a6:af:16:1a:5e:29:59:dc:81:35:ea:6c:b0:f3:69:a8:
58:08:f7:b5:b4:ce:0e:cb:17:c6:9f:88:31:d0:82:c2:bc:2e:
15:cf:4f:3f:cf:92:b9:0f:fe:e4:05:8a:fd:e4:ce:b9:5f:a8:
d8:df:70:3e:a0:bc:26:31:67:ba:d4:fa:15:ba:f7:b6:36:d9:
94:92:45:ed:94:13:b5:84:72:26:f3:7d:48:81:87:40:e4:fc:
7a:ba:47:6d:aa:0d:83:b1:60:35:45:ab:34:6f:99:83:e0:38:
83:a9:b9:cb:f3:89:43:56:66:73:6a:77:14:e3:35:49:a6:90:
df:b2:d5:2d:c7:3c:58:d7:03:37:dc:33:50:a4:66:2f:9e:0e:
0a:25:d8:11:a8:33:26:f7:81:88:b2:5f:95:f9:43:2e:e4:06:
a2:2d:9b:c5:b6:b6:2c:c8:99:11:68:89:d5:17:6d:2b:ca:cc:
a1:2f:c4:c8:77:3c:f3:21:81:cf:d8:b1:74:96:de:c8:22:a4:
f9:96:5d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:54 2024 by rpki-client on console.sobornost.net