Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/mfcAaicVqXkAJLFILWkI1M3bv-o.roa
File: mfcAaicVqXkAJLFILWkI1M3bv-o.roa (raw, json)
Hash identifier: 5aEHEJSC7yl5hE0v7nch6majo5L+baUSMiV0/z7xe5E=
Subject key identifier: 99:F7:00:6A:27:15:A9:79:00:24:B1:48:2D:69:08:D4:CD:DB:BF:EA
Certificate issuer: /CN=02da06259534dc452089d291ad277eeac16cd42a
Certificate serial: 01856D663912FDD935605216684EA1E2AFB3
Authority key identifier: 02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/mfcAaicVqXkAJLFILWkI1M3bv-o.roa
Signing time: Sun 01 Jan 2023 12:54:53 +0000
ROA not before: Sun 01 Jan 2023 12:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136526
IP address blocks: 45.91.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:39:12:fd:d9:35:60:52:16:68:4e:a1:e2:af:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02da06259534dc452089d291ad277eeac16cd42a
Validity
Not Before: Jan 1 12:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99f7006a2715a9790024b1482d6908d4cddbbfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0d:c1:55:46:cc:d4:63:89:90:b0:7e:7e:02:
d8:d6:cb:a5:f9:a9:9c:aa:bd:c0:42:53:ab:8f:23:
d1:18:cf:a8:ff:90:93:19:32:bd:68:c9:28:b2:31:
95:c5:96:8e:9c:d6:bd:11:8c:ca:82:ca:c1:f6:d4:
78:90:e6:49:0e:b9:c8:f2:27:02:27:5a:8b:6c:90:
75:b0:56:52:c7:94:a5:04:ab:c4:77:f8:f3:3e:d9:
12:43:43:27:b0:e1:da:12:bc:f4:dd:70:1b:23:a7:
0b:9c:62:a4:ab:20:11:b1:13:f9:71:af:b3:86:81:
f1:ba:83:14:96:6d:76:d3:1c:b8:42:f8:38:0a:ea:
6b:a2:29:98:78:b0:3d:4a:75:8b:2c:ae:12:ac:5c:
41:f6:0b:4a:14:91:73:93:03:95:1d:aa:39:6d:48:
6f:19:1c:d4:42:07:2c:6e:ae:85:5a:57:a5:09:b5:
4e:e0:0c:33:ee:02:62:be:39:f6:03:cb:96:a5:36:
0c:ec:96:a4:d5:a2:fe:20:cb:06:3c:b0:e6:63:7c:
24:ce:1a:a9:6a:84:f4:58:82:2d:37:44:a9:43:44:
d6:a4:d3:f7:2d:54:14:22:09:fc:25:71:7e:fc:2c:
f4:fa:e4:ad:6c:94:9b:dd:80:cd:00:e3:05:16:21:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F7:00:6A:27:15:A9:79:00:24:B1:48:2D:69:08:D4:CD:DB:BF:EA
X509v3 Authority Key Identifier:
keyid:02:DA:06:25:95:34:DC:45:20:89:D2:91:AD:27:7E:EA:C1:6C:D4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtoGJZU03EUgidKRrSd-6sFs1Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/mfcAaicVqXkAJLFILWkI1M3bv-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3f5c21-7b3b-40f7-8851-cd32f0d4086b/1/AtoGJZU03EUgidKRrSd-6sFs1Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d9:5d:ef:88:6e:44:a1:57:7a:de:6f:1e:0d:ee:ed:36:e9:
d8:27:ea:8c:67:b8:92:46:27:12:46:cb:61:bf:97:6f:bb:0c:
72:a8:b1:54:38:cf:d5:33:ab:30:b9:59:63:29:9a:b5:a8:a1:
28:47:54:50:ef:24:b9:99:19:e0:66:08:08:91:8c:73:7b:00:
8b:61:2a:1c:ed:81:2f:03:ba:ba:fa:53:c0:6f:e5:f9:88:ca:
a9:77:7d:57:ac:84:13:77:39:f2:a3:19:a3:62:ba:ea:3d:71:
9e:5b:90:e4:07:5c:46:58:fb:5e:2c:00:29:1e:23:07:91:1a:
c3:5d:fd:79:56:cf:30:48:c9:46:e0:dd:8e:e6:cb:32:cc:fb:
81:a5:04:a2:29:43:0d:de:f9:03:5f:d4:b3:80:50:20:f2:53:
50:60:29:b5:ed:87:f9:55:e4:0f:ce:de:6e:20:0e:3a:bc:f7:
d0:08:b5:e7:44:86:92:04:c2:3b:38:a0:65:be:d2:de:7e:f9:
87:5d:97:a4:3c:fb:54:b1:29:be:2c:c8:3b:25:95:33:f8:40:
02:1b:b5:71:e9:4a:c6:d1:f6:46:24:24:51:e3:6e:a8:dc:55:
ab:0c:27:06:43:69:66:15:a8:ee:c8:1c:dd:67:29:94:6e:ae:
69:a9:f0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:55 2023 by rpki-client on console.sobornost.net