Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/eHKwir3tRScU2l5YJygovbUtM60.roa
File: eHKwir3tRScU2l5YJygovbUtM60.roa (raw, json)
Hash identifier: f54bXhuoZx5fJ4vdHPkJriyvzNbBvm0ze/yUg9S4ZX8=
Subject key identifier: 78:72:B0:8A:BD:ED:45:27:14:DA:5E:58:27:28:28:BD:B5:2D:33:AD
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 018CC56E158E19839D7DA9803CE8BFC6F021
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/eHKwir3tRScU2l5YJygovbUtM60.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44938
IP address blocks: 45.14.129.0/24 maxlen: 24
45.14.130.0/24 maxlen: 24
45.14.131.0/24 maxlen: 24
45.14.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:15:8e:19:83:9d:7d:a9:80:3c:e8:bf:c6:f0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7872b08abded452714da5e58272828bdb52d33ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:37:a0:c9:0a:ab:cd:8b:3f:6f:cc:57:5b:
ee:c5:10:08:13:c1:95:54:13:45:17:11:c7:5d:36:
bb:4e:77:87:ad:f8:8b:8e:07:04:82:45:71:e4:7e:
6e:a1:c7:5e:bb:c0:b4:47:bc:33:38:b7:d2:82:f1:
b3:e5:5e:f1:b2:1e:24:95:0b:f7:e6:b4:e8:61:03:
33:13:b2:f9:1b:a2:0c:3a:58:80:2d:45:62:0e:9c:
d7:d9:2d:f5:95:1f:00:43:29:66:da:77:d2:44:bd:
f3:ae:25:57:ea:d8:eb:13:65:a1:b3:de:bf:a6:08:
a0:9a:79:2c:81:a2:b0:67:25:87:6e:d6:7e:83:db:
6a:da:86:e8:1c:67:dd:99:98:41:87:9a:51:b4:d9:
18:38:15:64:f7:8f:00:d9:38:2c:9c:5d:a6:3e:8e:
89:59:46:a6:f8:19:ff:da:94:1b:db:a8:98:17:19:
af:c0:16:23:72:b6:66:98:4b:1d:ac:fe:93:07:80:
16:44:b4:ba:de:5a:11:14:89:d6:16:2a:21:f6:03:
8e:36:f5:c3:dd:3c:38:10:fd:6e:a8:d3:e6:fa:20:
cd:dd:f2:4a:30:63:a1:ed:1c:b4:b0:bc:90:f1:b3:
4f:f7:19:c6:6e:74:59:57:74:2b:e5:4b:2c:60:f8:
d9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:72:B0:8A:BD:ED:45:27:14:DA:5E:58:27:28:28:BD:B5:2D:33:AD
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/eHKwir3tRScU2l5YJygovbUtM60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.128.0/22
Signature Algorithm: sha256WithRSAEncryption
23:96:c0:62:b1:93:8b:16:8e:a3:c3:08:d3:90:4d:55:f6:eb:
eb:46:05:79:74:96:33:5d:4b:cf:90:79:5b:e3:f6:a0:ec:5b:
f0:69:e6:ca:26:55:44:e5:d3:9a:a8:96:a0:57:ba:4e:5e:ef:
7f:7b:73:0f:af:cf:43:51:8f:1e:53:52:5f:9f:82:bd:5f:b9:
22:33:70:9d:a1:25:3c:94:f1:87:96:bb:68:2f:67:e6:c3:4d:
98:e5:2f:47:9c:97:29:5e:e7:a3:a6:df:66:6f:c2:1e:c4:6a:
14:ec:5f:55:cc:f8:6a:ce:58:6b:15:fd:d1:3b:97:e0:18:55:
7d:0d:37:54:58:25:a2:c0:bd:84:db:a6:6e:0f:e6:a1:a9:d8:
53:87:a0:3c:53:30:15:cc:c3:4c:1f:76:6c:73:92:e8:16:30:
75:60:23:57:c7:26:36:8f:45:11:8c:cb:ff:91:67:c5:fe:12:
3b:85:fd:ad:1c:06:1a:5d:96:0b:99:3d:ab:b8:14:88:c1:6d:
85:20:cd:bc:7a:40:df:c4:e0:b3:7d:05:83:02:94:c0:85:7c:
81:92:3a:b2:24:39:9c:1b:e8:ac:8e:22:be:c3:f8:99:90:fc:
5e:08:05:85:3d:0a:8a:c6:c0:1d:fc:aa:0d:c3:a8:ec:30:43:
e1:ef:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:01 2024 by rpki-client on console.sobornost.net