Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/MWdJxENRzVO9xNbUJQDoIfam-1k.roa
File: MWdJxENRzVO9xNbUJQDoIfam-1k.roa (raw, json)
Hash identifier: 5kmWl3u/LXYadHEL/yh4+CTEnqPXBTTi7rLx6s3woUo=
Subject key identifier: 31:67:49:C4:43:51:CD:53:BD:C4:D6:D4:25:00:E8:21:F6:A6:FB:59
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 0193BB01926DB935E9F0C9195D64CDA05BFD
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/MWdJxENRzVO9xNbUJQDoIfam-1k.roa
Signing time: Thu 12 Dec 2024 13:14:22 +0000
ROA not before: Thu 12 Dec 2024 13:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204582
IP address blocks: 45.144.44.0/29 maxlen: 29
45.144.44.0/30 maxlen: 30
2a0e:eac0:2000::/44 maxlen: 48
2a0e:eac0:2010::/44 maxlen: 48
2a0e:eac0:2100::/44 maxlen: 48
2a0e:eac0:2101::/48 maxlen: 48
2a0e:eac0:2110::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bb:01:92:6d:b9:35:e9:f0:c9:19:5d:64:cd:a0:5b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: Dec 12 13:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=316749c44351cd53bdc4d6d42500e821f6a6fb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:e7:a3:36:32:32:58:5f:72:36:6c:3f:a7:
83:a8:10:bc:37:ed:7c:c4:2b:b0:16:ed:a1:6d:ae:
ac:fa:99:62:5a:9e:c9:c0:53:06:35:d1:6f:41:81:
b6:be:b6:d1:11:39:96:6a:44:46:81:2c:b7:cb:cb:
d4:f6:0d:00:17:b8:5f:1a:22:12:d0:e5:4c:b5:a6:
35:2d:ae:87:f6:71:58:cc:6d:3d:b4:58:6b:d3:48:
15:c2:ee:f6:d6:08:84:a0:cd:96:bd:11:a5:6c:3e:
2e:59:80:09:de:dc:e4:35:eb:ac:07:c8:74:f7:50:
b8:74:b3:a3:94:8a:da:5b:f4:44:82:1d:83:25:02:
36:76:80:83:2b:03:43:3a:68:62:b7:32:eb:5c:08:
67:07:6a:68:ea:95:95:05:de:aa:c1:79:fe:2f:b5:
6d:ca:0b:4b:ad:56:d6:b3:9f:00:6f:e8:22:6f:9e:
f8:b1:07:c3:f0:0e:aa:8d:92:ec:5c:75:3e:44:29:
9d:ac:85:a8:7a:62:4f:ff:a2:51:89:5a:a6:b1:42:
51:cf:e8:df:92:16:a7:0c:5e:8c:db:19:99:e9:85:
35:4c:af:48:1d:1d:4a:66:55:3d:67:e9:4b:58:ab:
26:d1:0a:a2:fc:30:ff:f1:09:9c:97:c3:88:db:d8:
48:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:49:C4:43:51:CD:53:BD:C4:D6:D4:25:00:E8:21:F6:A6:FB:59
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/MWdJxENRzVO9xNbUJQDoIfam-1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.44.0/29
IPv6:
2a0e:eac0:2000::/43
2a0e:eac0:2100::/43
Signature Algorithm: sha256WithRSAEncryption
2f:b2:e4:6e:36:36:c2:d1:eb:28:09:f3:53:a4:34:cc:2a:bd:
cf:2f:08:cb:54:63:5e:09:da:ea:a5:cc:40:b2:ea:1b:ae:60:
44:f5:2f:bc:81:5b:41:6f:65:23:7d:be:ec:07:6e:21:f2:b4:
19:3c:b4:68:58:27:c4:cd:6a:f4:2c:90:f7:b6:2e:e0:88:88:
e8:d8:b6:30:dd:32:ef:78:6c:3d:b0:e5:fe:f2:2f:c9:0b:0f:
8c:b0:ba:61:ae:52:bb:81:2b:4d:f2:7d:f5:68:ef:66:d0:65:
62:f5:4c:19:6a:c3:a6:31:8e:69:e0:ea:9b:43:7b:f7:b5:0c:
c3:f3:2e:91:f0:ab:5a:f0:f1:38:c8:e4:0f:e7:9f:8e:0e:53:
eb:7f:f4:3d:e5:60:fe:62:70:b6:76:ac:4f:cf:d7:38:19:06:
1d:cc:fd:6f:0e:e0:b1:f8:3d:7f:6c:be:5e:57:a7:2a:e9:f6:
68:9c:31:a9:a4:a5:b9:1e:3c:88:8d:f9:dc:87:9f:84:f5:5d:
b4:fd:39:f3:8d:12:9c:0a:e7:8e:4f:cd:00:4a:c4:d3:7e:3c:
82:47:c7:63:87:31:bd:08:c0:73:f0:cb:ec:8e:2a:ac:e8:d9:
04:26:e8:c6:93:9b:8b:30:69:f5:71:4c:a5:8b:89:93:39:71:
d1:d6:36:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:12 2024 by rpki-client on console.sobornost.net