Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/nf8ji60CARWgki4IWMTYoYMcve0.roa
File: nf8ji60CARWgki4IWMTYoYMcve0.roa (raw, json)
Hash identifier: UsxZSDDZETVPOMRIE/VzAeYTr120iKDTZURGGVSi8S4=
Subject key identifier: 9D:FF:23:8B:AD:02:01:15:A0:92:2E:08:58:C4:D8:A1:83:1C:BD:ED
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 0190CF0CC5EF2FC9E64B8D6D09EA7C2A8508
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/nf8ji60CARWgki4IWMTYoYMcve0.roa
Signing time: Sat 20 Jul 2024 07:30:39 +0000
ROA not before: Sat 20 Jul 2024 07:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45009
IP address blocks: 45.150.40.0/22 maxlen: 22
45.150.40.0/24 maxlen: 24
45.150.41.0/24 maxlen: 24
45.150.42.0/24 maxlen: 24
45.150.43.0/24 maxlen: 24
2a0f:9200::/29 maxlen: 29
2a0f:9200::/48 maxlen: 48
2a0f:9201::/48 maxlen: 48
2a0f:9207::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:cf:0c:c5:ef:2f:c9:e6:4b:8d:6d:09:ea:7c:2a:85:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Jul 20 07:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dff238bad020115a0922e0858c4d8a1831cbded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0d:3b:3d:4b:84:ee:0d:85:94:9f:ea:af:c3:
0c:6b:d0:cf:ce:8c:28:bd:aa:44:a7:45:73:93:a6:
55:45:77:d4:45:64:22:fb:f0:c4:b1:61:91:15:05:
30:9f:63:aa:f1:89:1e:2c:56:26:e3:e7:bc:d6:87:
89:a2:3f:17:8d:92:30:72:6f:29:e5:3e:57:b0:15:
16:6f:20:bc:20:c3:a2:7b:90:c7:5b:77:8b:87:6c:
75:5c:e9:ab:71:67:6c:b5:11:77:8e:d7:65:aa:ce:
8d:0a:3c:5d:02:ba:4d:71:a1:79:83:04:86:3a:4c:
14:4d:8a:d6:19:c8:b1:ca:a9:d9:0b:5a:30:79:30:
d5:d9:10:cf:da:7e:64:be:40:b2:a6:2d:20:de:45:
95:f0:de:3b:61:f7:b6:5c:06:71:98:b9:a2:45:19:
2b:a8:9a:0c:95:b3:02:2a:36:82:7e:b0:16:76:08:
bf:84:fc:94:fb:29:36:4c:a4:77:19:55:c2:da:f3:
09:ac:b7:0b:87:a5:34:c1:93:71:0c:09:f6:30:77:
1c:97:60:c2:37:4c:94:fa:28:cc:87:98:c8:e0:f4:
f3:39:d8:77:ee:b8:2e:57:db:55:b1:16:c9:e0:29:
fd:6d:59:7f:55:23:71:6d:df:b5:f8:d3:4e:da:71:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FF:23:8B:AD:02:01:15:A0:92:2E:08:58:C4:D8:A1:83:1C:BD:ED
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/nf8ji60CARWgki4IWMTYoYMcve0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.40.0/22
IPv6:
2a0f:9200::/29
Signature Algorithm: sha256WithRSAEncryption
61:b7:32:fe:5f:0a:50:d0:7b:e0:e9:38:4a:eb:39:ce:8a:d1:
f1:cc:8b:c5:c8:d8:80:0c:ab:7e:ad:65:9d:3c:4a:77:b6:fa:
57:9f:21:6c:7c:a1:32:e5:3a:23:32:d7:2b:21:b0:dc:ed:d2:
74:6d:60:bf:1d:08:38:2e:6a:bc:99:49:49:b7:0b:98:b1:e8:
da:c6:f2:bc:6b:d6:72:c4:7d:53:91:85:a8:2d:01:df:b3:74:
97:bd:22:76:9f:79:32:80:8f:52:c3:3c:4e:78:ec:01:fd:51:
69:1a:c1:98:21:29:f6:b9:0b:e1:93:b7:a3:17:47:4d:7c:7d:
0a:9f:f3:1a:dc:d8:43:3b:90:df:e5:d6:3e:f4:65:2b:8b:1f:
2b:71:1b:eb:3a:a1:2a:07:e8:c2:1b:1d:12:0f:c2:5f:1a:87:
49:3b:c9:56:07:e8:9c:62:ed:3d:5e:17:91:90:01:30:7f:cc:
85:68:b5:66:e9:10:6d:bc:1d:ae:74:6c:56:94:63:e9:ed:3e:
fc:9f:2d:3f:39:6d:7e:40:4a:a6:ab:5a:0e:fd:67:ee:58:f1:
ee:47:f2:8b:5c:cf:4f:00:ab:16:f7:8e:c0:3c:0a:5f:87:ae:
01:28:16:7b:aa:eb:5c:58:3e:5e:4b:65:11:80:68:54:1f:30:
52:6c:9b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:14 2024 by rpki-client on console.sobornost.net