Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/RTzR6W9r1eeU2sBeOS3yHywEoxc.roa
File: RTzR6W9r1eeU2sBeOS3yHywEoxc.roa (raw, json)
Hash identifier: U9tVIGb5NurpRxMWO42oHLJAjHTJBTjq8aXIXaYzQcg=
Subject key identifier: 45:3C:D1:E9:6F:6B:D5:E7:94:DA:C0:5E:39:2D:F2:1F:2C:04:A3:17
Certificate issuer: /CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Certificate serial: 01828DE7995813F14FCD5F256B9412A0586E
Authority key identifier: B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/RTzR6W9r1eeU2sBeOS3yHywEoxc.roa
Signing time: Thu 11 Aug 2022 17:15:41 +0000
ROA not before: Thu 11 Aug 2022 17:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.156.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8d:e7:99:58:13:f1:4f:cd:5f:25:6b:94:12:a0:58:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Validity
Not Before: Aug 11 17:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=453cd1e96f6bd5e794dac05e392df21f2c04a317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:93:83:be:50:49:ab:0c:72:92:9f:e2:1d:
00:dc:b2:5c:15:2e:2a:10:e0:11:ac:6d:05:1d:95:
c1:3e:da:5a:77:7f:70:55:e8:ce:40:13:0d:e1:4e:
a1:9c:f9:85:95:fd:33:8c:28:ac:e8:c6:94:0d:ae:
d0:1d:73:0f:04:fc:09:48:25:ae:4e:aa:a6:b8:42:
e5:b5:f5:4a:ba:af:bc:2a:9d:91:8a:f2:44:be:90:
52:e5:67:1d:50:53:07:7b:37:5e:55:f2:ce:69:ba:
f7:2d:d8:f9:7c:b5:99:39:8d:7a:ff:b0:d4:bb:6b:
3d:c5:1f:70:c3:49:03:b4:be:91:61:17:32:83:40:
7f:64:e2:b5:cc:b3:e6:fc:00:d6:90:5c:1e:4f:0c:
63:68:58:75:5a:e3:bf:5e:b4:0c:46:23:91:32:c7:
93:39:05:ff:0d:c3:45:f9:52:aa:a5:63:10:5b:d2:
67:64:aa:0a:5f:b9:e7:1a:6c:ce:e7:11:58:58:d7:
f0:5e:48:32:75:6e:1b:e0:f6:bf:ec:b9:c6:4b:a6:
30:d9:0b:a7:d4:c8:01:77:4c:d1:c2:dd:b2:85:11:
8c:21:0b:ac:e0:cc:9f:ac:8e:75:bd:5d:cd:f7:f8:
e5:5b:40:32:e5:e4:01:22:fb:75:ee:82:e1:7e:3c:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3C:D1:E9:6F:6B:D5:E7:94:DA:C0:5E:39:2D:F2:1F:2C:04:A3:17
X509v3 Authority Key Identifier:
keyid:B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/RTzR6W9r1eeU2sBeOS3yHywEoxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.118.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:09:9f:d4:c5:23:fa:38:96:c4:30:db:0e:0c:97:e2:d5:cc:
40:76:3b:74:89:a7:1b:43:2b:59:11:19:7a:20:69:c4:60:9a:
38:2d:6e:68:c7:50:f6:18:1e:ea:a2:30:fe:a4:42:27:97:bc:
42:80:36:65:b1:9e:df:ee:2c:a3:b6:bb:2a:be:88:c1:ad:d1:
40:37:a4:f8:21:6c:51:e4:62:99:c5:c0:7d:06:e0:c9:06:93:
77:3f:41:c6:18:17:87:cf:b6:f3:60:a1:d9:83:d2:ca:82:95:
2c:d5:5c:9f:1d:da:38:ec:80:38:b9:93:9d:a2:48:56:d6:5b:
c5:62:42:8a:49:6b:be:91:bf:5f:5e:26:db:00:5d:0a:c1:e1:
52:79:5f:71:a1:d5:35:a3:50:6f:b7:14:d9:24:a1:c8:91:d3:
81:ce:43:28:4b:f1:ef:69:4b:33:3a:04:5f:f2:ec:44:01:3c:
dc:f3:11:79:80:24:07:2e:6c:f4:fb:01:e8:31:30:28:12:6d:
38:4f:80:f8:b1:64:1a:22:b2:fc:1d:d1:fa:33:9e:69:f9:c4:
4b:a3:4f:dd:57:65:b7:72:af:17:03:4f:f8:90:15:80:ec:9e:
ad:24:d8:a6:8f:f8:94:22:56:15:b3:40:9f:e3:ee:94:b3:5b:
22:e9:5d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:52 2023 by rpki-client on console.sobornost.net