Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/QeT5LPUCcCYorJWiYaGAjXOEOTM.roa
File: QeT5LPUCcCYorJWiYaGAjXOEOTM.roa (raw, json)
Hash identifier: JUh6YTHMrjJr/Ho0C3uO96yZ55kIa2y7xH2TdA1+qkY=
Subject key identifier: 41:E4:F9:2C:F5:02:70:26:28:AC:95:A2:61:A1:80:8D:73:84:39:33
Certificate issuer: /CN=02da06259534dc452089d291ad277eeac16cd42a
Certificate serial: 01856D66381BBCED798E87225FD8EE7D8B87
Authority key identifier: 02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/QeT5LPUCcCYorJWiYaGAjXOEOTM.roa
Signing time: Sun 01 Jan 2023 12:54:53 +0000
ROA not before: Sun 01 Jan 2023 12:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136038
IP address blocks: 45.91.226.0/24 maxlen: 24
45.91.225.0/24 maxlen: 24
45.91.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:38:1b:bc:ed:79:8e:87:22:5f:d8:ee:7d:8b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02da06259534dc452089d291ad277eeac16cd42a
Validity
Not Before: Jan 1 12:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41e4f92cf502702628ac95a261a1808d73843933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:db:be:f6:f7:b1:05:4b:2c:34:97:a2:f0:
c1:30:f9:5a:f8:07:19:8b:57:6d:30:d7:29:be:72:
92:31:e1:b0:e7:a6:50:5c:fc:be:5e:c2:5a:3c:52:
f4:ad:26:56:46:df:13:ba:15:7b:e1:f4:53:96:49:
4a:c5:83:f0:6b:6b:ba:d3:4d:6b:a5:2f:98:a8:42:
6b:11:24:28:49:a6:e0:23:27:3f:8a:d8:c0:5a:8f:
1e:c0:19:6d:46:d6:bb:da:09:cf:d8:08:2a:62:99:
86:30:c1:31:13:be:2e:0c:c6:21:83:a1:4c:b0:c8:
d8:15:2e:7e:38:e9:b6:20:40:65:16:b3:d0:f1:5a:
8f:37:ca:f7:61:04:2b:ba:ae:39:4b:ef:17:23:a3:
32:82:2d:f4:4a:a6:2a:a2:d2:d7:72:fb:7c:21:19:
7c:9b:d1:8c:00:b2:59:aa:61:96:1d:33:44:71:54:
20:98:1f:7e:49:c8:b0:3a:59:19:cb:d4:7a:ae:a6:
a8:4b:11:54:79:81:70:de:9f:dc:41:7f:e1:1d:15:
69:fb:78:05:0c:a6:a8:04:b0:56:e6:dc:f9:32:21:
61:17:6f:70:ba:3c:6e:ec:2b:a5:90:83:ec:09:35:
b3:76:3b:83:2f:a3:1f:48:4c:42:34:36:59:a6:8a:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E4:F9:2C:F5:02:70:26:28:AC:95:A2:61:A1:80:8D:73:84:39:33
X509v3 Authority Key Identifier:
keyid:02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/QeT5LPUCcCYorJWiYaGAjXOEOTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.225.0-45.91.227.255
Signature Algorithm: sha256WithRSAEncryption
51:e5:90:4c:93:fc:e4:90:19:3d:43:65:47:d8:cc:94:4c:bb:
19:54:56:68:12:24:99:91:74:c3:4e:26:38:22:d7:58:ed:0c:
a6:ea:b4:29:2b:0b:c7:0d:d8:97:c9:51:7f:a3:3b:c6:90:c1:
40:d8:38:e9:61:fa:fd:2f:cf:ad:c3:34:65:79:a0:b3:67:b5:
7d:6e:81:f1:1f:7a:b5:7d:25:ae:63:92:10:0d:49:0d:2d:de:
e4:6b:3d:7e:34:9b:a2:43:1a:6b:f8:3e:a6:d2:27:d3:9b:bd:
04:e3:1f:fa:02:2e:56:2f:94:1f:30:58:8b:2d:c2:ff:31:df:
c0:57:bb:d5:5a:93:6e:17:17:86:43:6a:62:60:33:5e:4f:84:
07:03:50:53:d2:6d:49:34:8e:9b:b2:09:9c:3f:be:65:07:9f:
48:3f:e8:e4:e6:10:6b:27:55:20:85:56:1c:41:63:ef:29:28:
3a:97:03:6a:0d:e6:29:e1:8f:09:c5:2a:62:aa:cd:ff:29:05:
86:1d:f9:cf:7b:86:64:c2:e6:a0:30:8e:e2:d9:e8:e8:d2:93:
29:72:73:9a:fb:ce:d7:e1:b3:c4:91:b8:92:9e:ba:01:f1:56:
19:30:f1:e6:2f:e9:c5:2c:22:12:b7:c9:2c:e4:40:05:ca:7a:
13:b4:38:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net