Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/UbKhYb_UNZnRJA3B48CwSZypRRs.roa
File: UbKhYb_UNZnRJA3B48CwSZypRRs.roa (raw, json)
Hash identifier: 6gmejMeYsh6OPabBdkxhvKbgZm0V7338s7eLjsOjHKQ=
Subject key identifier: 51:B2:A1:61:BF:D4:35:99:D1:24:0D:C1:E3:C0:B0:49:9C:A9:45:1B
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 01855ECEAEFADF567F64119A2C7396F2200D
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/UbKhYb_UNZnRJA3B48CwSZypRRs.roa
Signing time: Thu 29 Dec 2022 16:54:41 +0000
ROA not before: Thu 29 Dec 2022 16:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212335
IP address blocks: 45.143.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5e:ce:ae:fa:df:56:7f:64:11:9a:2c:73:96:f2:20:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Dec 29 16:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51b2a161bfd43599d1240dc1e3c0b0499ca9451b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:25:76:ba:9a:26:4d:25:2c:b4:1b:80:ef:
c3:e8:ae:8c:51:d7:0b:90:12:55:69:a8:af:19:1f:
cc:3b:58:a7:f0:89:b6:3c:b0:2f:ef:4b:f9:54:96:
c0:6f:d9:6a:99:ad:09:4a:b8:d8:32:f6:e4:31:68:
69:22:cf:56:35:97:76:9a:5e:cb:35:41:75:14:a4:
5f:98:a6:ab:9e:90:24:9d:d3:6f:d2:50:69:bf:06:
fd:0f:28:ec:f7:23:5b:37:b6:12:d9:d6:a6:36:64:
c0:70:89:1c:41:22:86:52:04:fc:41:dd:0c:f6:1e:
cd:a9:a8:fe:0b:12:df:e5:85:76:2e:c6:0c:50:7b:
8c:c3:aa:05:0b:54:93:88:ed:97:29:8a:14:7e:21:
4b:99:25:f9:99:e7:fc:36:5a:f1:6f:75:b0:2f:14:
b9:ff:1a:aa:92:81:38:da:2b:4f:d2:46:a5:75:73:
ff:b0:fb:48:cf:f9:73:21:54:8c:ee:d1:9e:e2:3a:
7c:65:a8:27:4c:31:ab:d1:68:ff:8e:17:9e:1c:55:
c1:0f:95:93:ff:9d:d9:f4:b6:ab:ec:62:b8:ba:e3:
fc:73:e5:6a:dd:05:3b:22:45:bd:27:71:91:f5:f2:
82:33:ae:84:17:28:b3:b3:03:c5:ff:ab:16:ed:4e:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B2:A1:61:BF:D4:35:99:D1:24:0D:C1:E3:C0:B0:49:9C:A9:45:1B
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/UbKhYb_UNZnRJA3B48CwSZypRRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.7.0/24
Signature Algorithm: sha256WithRSAEncryption
83:95:31:cc:09:79:cb:9d:40:c3:62:47:c5:21:dd:0e:02:4f:
96:c0:a0:5a:c9:e6:ca:21:77:24:e5:cc:87:2e:79:2b:83:cd:
59:0b:0b:f8:f5:88:f9:43:2b:2a:14:47:95:6b:21:44:ab:21:
81:6c:6a:b3:a1:e9:b7:80:2f:2a:71:79:c9:60:10:81:2f:90:
af:02:65:80:8e:91:6b:aa:50:d5:ac:d0:c4:8f:3a:34:95:ef:
10:3f:c3:6a:47:c8:c2:18:eb:ea:85:d2:23:41:89:a8:c9:31:
3c:d9:ab:d9:b8:bb:21:06:15:0b:c6:f8:9b:46:31:4c:41:9d:
b3:9b:ff:c9:28:6d:dd:09:41:55:c4:ca:2f:3c:13:ea:0f:51:
c5:74:51:ca:51:43:0f:14:c5:13:e5:11:a4:87:a1:9c:50:4e:
c9:35:cc:56:c0:13:47:e5:8e:43:c0:4a:ae:c2:a5:c1:79:1a:
a8:a6:49:1a:fd:6a:fd:f7:0e:21:56:d7:90:2f:44:40:79:fe:
5a:da:59:ec:58:78:4b:e0:a7:3b:80:49:39:2f:35:6a:48:45:
5c:6a:bc:07:c7:53:c7:66:d6:7f:f8:3e:f4:fb:63:c4:20:93:
2b:35:c9:a3:2f:ed:26:29:af:72:7a:98:e3:2e:c3:ae:11:65:
40:a5:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:46 2023 by rpki-client on console.sobornost.net