Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/PGW5lOpLEFQim0jQo9gpV1oZI3I.roa
File: PGW5lOpLEFQim0jQo9gpV1oZI3I.roa (raw, json)
Hash identifier: ZB2FiKSmblhEgNH+hVxGKB6CQVfc0ErOUUWLjkO1TFE=
Subject key identifier: 3C:65:B9:94:EA:4B:10:54:22:9B:48:D0:A3:D8:29:57:5A:19:23:72
Certificate issuer: /CN=02da06259534dc452089d291ad277eeac16cd42a
Certificate serial: 01856D6639E5AE7F9380A86662BB2BA60456
Authority key identifier: 02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/PGW5lOpLEFQim0jQo9gpV1oZI3I.roa
Signing time: Sun 01 Jan 2023 12:54:54 +0000
ROA not before: Sun 01 Jan 2023 12:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137427
IP address blocks: 45.91.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:39:e5:ae:7f:93:80:a8:66:62:bb:2b:a6:04:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02da06259534dc452089d291ad277eeac16cd42a
Validity
Not Before: Jan 1 12:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c65b994ea4b1054229b48d0a3d829575a192372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:92:83:47:e9:21:16:3b:32:dd:96:e3:44:05:
78:c7:ed:c8:37:16:c7:37:95:a0:86:53:f9:84:db:
71:6d:d9:50:a3:8c:ca:42:3c:95:ba:b7:db:01:87:
b8:b4:26:cd:ec:c0:d5:e2:89:69:d7:5e:0f:c6:20:
7f:50:47:ac:a1:25:04:aa:c7:ec:cd:7b:b8:3c:29:
fd:60:7b:f8:3d:1e:78:3f:f5:17:47:8c:54:3e:28:
78:48:38:bf:4f:52:2c:59:8e:00:14:8f:87:19:11:
5c:53:9d:dc:b0:0c:78:86:9c:3f:1d:6f:4b:2e:a5:
00:c9:05:7d:6a:b0:28:66:09:d3:f7:62:1f:3f:99:
1f:56:e0:dc:46:dc:f2:d7:50:3b:5e:1a:38:5e:71:
a7:62:f9:77:17:aa:40:ab:d7:e0:c0:d7:84:b0:2e:
cf:ef:2f:e7:a0:99:0e:a8:2b:52:d5:ff:b0:71:5b:
58:b2:a5:e2:0d:b4:4d:e0:96:35:cc:3a:85:b7:27:
eb:04:99:52:f3:33:de:0e:fa:df:f1:67:cc:53:49:
c2:e0:0d:51:33:2a:0c:28:03:1e:cc:a4:f9:a2:e6:
cf:99:f2:86:18:c4:dd:67:4b:73:86:40:f0:80:46:
fb:65:c7:77:cc:ea:ec:37:2e:36:ba:3e:70:aa:b4:
7d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:65:B9:94:EA:4B:10:54:22:9B:48:D0:A3:D8:29:57:5A:19:23:72
X509v3 Authority Key Identifier:
keyid:02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/PGW5lOpLEFQim0jQo9gpV1oZI3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:35:69:d8:12:ca:5d:30:4e:47:af:d9:d7:4b:74:b6:0c:82:
15:ad:d1:63:35:6c:5a:38:29:3f:8d:9f:1c:b5:d4:8f:83:81:
2a:53:9b:9f:4a:50:b9:4d:27:df:13:6c:34:97:df:79:e1:1b:
77:db:f7:4d:ab:fb:b8:e0:77:44:82:5c:25:33:22:14:4b:e1:
c6:a7:ef:38:aa:36:8e:bc:2c:bd:c3:40:90:29:e8:56:c0:96:
76:2a:ee:a7:a0:d9:1e:20:19:8b:7c:39:e4:89:a7:b1:f0:68:
e3:64:a7:b0:7d:ac:c2:6a:3e:78:54:95:6e:95:20:b1:b6:bd:
71:0f:61:a4:1f:a8:1d:3a:a3:17:e3:51:0f:a0:3e:2d:84:6b:
4e:61:5a:8a:7e:39:5c:40:1b:8c:7e:7b:6c:64:24:79:eb:37:
ba:ec:16:42:7a:5d:af:e1:75:1f:a9:88:49:ec:ff:b2:35:e4:
94:0d:ff:77:8b:1a:87:55:1d:41:15:97:30:3f:2f:5d:b7:cb:
c2:84:ff:be:66:69:5f:da:cd:f2:2e:9f:0a:84:e9:39:fb:e3:
ba:ac:c3:1d:a7:f0:42:f3:0b:11:d6:85:81:d2:58:ff:2f:d8:
2d:ed:4e:e1:ce:ea:ec:ad:91:4c:12:8d:86:e6:c7:f2:d3:d1:
fe:53:4b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net