Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c68d8d-484a-44cb-a433-79fb1dd14f62/1/cmHcPT8HUYa_1MMvKj7JwG4SS5E.roa
File: cmHcPT8HUYa_1MMvKj7JwG4SS5E.roa (raw, json)
Hash identifier: Dg4Q87bH+EYH/2V5go+0CVsVX9LFTcUJsiB0WPiEMeM=
Subject key identifier: 72:61:DC:3D:3F:07:51:86:BF:D4:C3:2F:2A:3E:C9:C0:6E:12:4B:91
Certificate issuer: /CN=64301525ae08507041da7da8f3a3dd118979fb47
Certificate serial: 0869ED8C
Authority key identifier: 64:30:15:25:AE:08:50:70:41:DA:7D:A8:F3:A3:DD:11:89:79:FB:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDAVJa4IUHBB2n2o86PdEYl5-0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c68d8d-484a-44cb-a433-79fb1dd14f62/1/cmHcPT8HUYa_1MMvKj7JwG4SS5E.roa
Signing time: Sun 05 Jun 2022 15:22:20 +0000
ROA not before: Sun 05 Jun 2022 15:22:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208183
IP address blocks: 45.152.229.0/24 maxlen: 24
45.152.228.0/22 maxlen: 22
45.152.228.0/24 maxlen: 24
2a0f:6500:1000::/36 maxlen: 36
2a0f:6500::/36 maxlen: 36
2a0f:6500:2000::/36 maxlen: 36
2a0f:6500:3000::/36 maxlen: 36
2a0f:6500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141159820 (0x869ed8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64301525ae08507041da7da8f3a3dd118979fb47
Validity
Not Before: Jun 5 15:22:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7261dc3d3f075186bfd4c32f2a3ec9c06e124b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:52:7c:1f:97:92:58:2b:db:62:5a:84:1b:
15:8e:ac:30:84:33:cf:00:2c:f1:58:43:41:46:c8:
3f:22:8c:9d:43:b1:3e:4c:f4:e5:71:e7:ac:19:64:
fa:94:3a:63:99:49:91:bb:91:12:35:b0:81:03:05:
b8:5a:e6:f2:b9:68:20:1c:91:f5:ad:15:e3:e8:af:
7a:95:1b:c6:52:34:b6:3d:98:b0:48:ba:d4:d8:93:
67:9e:ad:74:99:0f:24:18:0a:1b:93:99:4a:f2:8b:
9b:c7:3f:5d:60:a6:0e:9d:5c:58:d9:34:f9:18:0f:
10:09:25:d0:96:41:2c:92:50:74:8f:c2:4e:1f:39:
70:23:c8:8e:49:b8:b4:96:3f:22:62:92:ed:e1:59:
b1:70:46:42:9e:c5:f5:21:e7:8e:c7:59:cc:26:90:
92:dd:e7:0a:73:48:85:04:4f:d1:56:46:5e:99:c9:
0c:e6:fb:ed:ba:f0:fb:4e:42:62:c3:e6:12:b7:94:
47:4b:5a:83:01:ba:db:29:45:b9:f0:4b:b5:55:e9:
d1:20:25:d6:6a:37:01:68:d1:eb:b9:16:eb:b1:0f:
fd:7b:e7:00:3d:b9:b9:2d:a4:28:9f:c3:0a:42:8b:
83:e2:6d:f3:ee:b8:3c:a2:0c:9b:ce:1e:f4:80:1e:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:61:DC:3D:3F:07:51:86:BF:D4:C3:2F:2A:3E:C9:C0:6E:12:4B:91
X509v3 Authority Key Identifier:
keyid:64:30:15:25:AE:08:50:70:41:DA:7D:A8:F3:A3:DD:11:89:79:FB:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDAVJa4IUHBB2n2o86PdEYl5-0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c68d8d-484a-44cb-a433-79fb1dd14f62/1/cmHcPT8HUYa_1MMvKj7JwG4SS5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c68d8d-484a-44cb-a433-79fb1dd14f62/1/ZDAVJa4IUHBB2n2o86PdEYl5-0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.228.0/22
IPv6:
2a0f:6500::/32
Signature Algorithm: sha256WithRSAEncryption
11:df:ab:22:ee:65:bc:69:2f:de:b8:99:26:b4:ce:5d:bb:5e:
9b:4a:49:23:26:2d:f0:8d:5a:d5:85:ee:f3:d8:ec:cd:17:ec:
0a:ce:64:b8:94:30:16:d6:36:f8:b5:9d:b8:a0:6a:f6:d0:34:
bc:ff:4b:8b:90:d8:fa:bc:cc:f2:3e:ab:51:68:e5:ed:61:c0:
91:24:1c:3f:35:ef:b5:69:ce:aa:7e:ec:4f:b9:69:56:c2:53:
7b:cc:67:7b:d1:3e:25:a7:56:73:b1:a7:b3:84:a8:13:c9:d8:
76:97:b8:f5:61:c2:11:21:48:fe:e4:c8:1a:fb:4e:99:b0:42:
81:17:20:33:26:34:d1:4b:50:71:eb:db:c3:e7:71:a6:9a:46:
2d:09:39:5e:cc:b6:d1:7c:8d:b5:f5:cd:74:e9:a0:b4:06:bc:
7e:57:93:b5:88:27:8a:8d:7c:9b:ea:a1:11:09:0c:ca:17:74:
77:14:41:7a:c1:b5:2a:f9:fb:d2:11:a9:d2:c8:3c:14:5a:79:
f2:9f:c9:7d:2a:de:bc:e7:ff:c9:24:8c:42:5a:14:b3:c4:21:
6b:c7:ac:27:1b:26:1e:d7:93:dc:8f:a8:e2:e8:e8:bc:d0:51:
25:f9:13:01:5b:83:f2:20:c2:2b:14:ed:d2:10:96:32:3d:2c:
9b:27:92:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:20 2023 by rpki-client on console.sobornost.net