Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/anEFReSJfyk2vZwmzWyqRFS473c.roa
File: anEFReSJfyk2vZwmzWyqRFS473c.roa (raw, json)
Hash identifier: zM/eHF8DMM0+tjbPtsnHxB1kiOHS+fAEha23XMhu/XQ=
Subject key identifier: 6A:71:05:45:E4:89:7F:29:36:BD:9C:26:CD:6C:AA:44:54:B8:EF:77
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 0192D8A52F9F47F505721773A1E9839FA05B
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/anEFReSJfyk2vZwmzWyqRFS473c.roa
Signing time: Tue 29 Oct 2024 14:19:17 +0000
ROA not before: Tue 29 Oct 2024 14:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.10.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:a5:2f:9f:47:f5:05:72:17:73:a1:e9:83:9f:a0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Oct 29 14:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a710545e4897f2936bd9c26cd6caa4454b8ef77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:e5:57:32:67:59:1b:cf:ad:47:e9:fe:85:
a9:8d:71:d7:f9:e7:2d:15:40:2f:a9:af:17:aa:b4:
84:9e:31:d8:d1:24:46:e0:b3:de:6b:a9:b1:a8:f9:
0e:6e:bc:77:c0:24:c7:0f:c8:fa:8e:b2:42:f0:2a:
26:de:e2:c2:6d:0f:9e:78:70:5e:2d:9e:d1:2c:1f:
41:ca:1a:be:de:a9:de:85:28:c0:4e:c3:bf:52:85:
d1:a1:cd:3f:0d:34:d9:99:ca:78:42:d2:a2:54:0d:
2e:cd:47:a6:3c:ac:eb:a7:dd:5f:65:90:c4:29:a2:
28:89:df:76:2c:68:a8:a8:2b:8a:f5:4c:5c:82:3d:
84:c3:f4:98:8e:e0:e7:a6:c0:b1:70:51:15:aa:94:
46:ff:28:15:44:a9:2a:11:af:a7:2b:d2:2a:19:02:
39:4c:87:6c:25:b3:8b:51:99:42:c0:46:bf:1d:dc:
71:aa:ff:ff:e4:c1:3d:0b:d5:c4:83:68:d1:9a:a9:
ea:b4:75:c1:fc:17:0a:71:9b:fe:57:e1:df:d3:09:
c1:6c:b3:ae:a9:47:12:ba:bc:ed:f6:d4:20:f4:37:
8e:dd:b4:62:6e:e5:cd:dc:28:ef:25:cb:57:bc:4d:
04:1d:a4:b1:b1:c3:c5:4b:b9:be:f1:72:3d:f9:05:
89:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:71:05:45:E4:89:7F:29:36:BD:9C:26:CD:6C:AA:44:54:B8:EF:77
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/anEFReSJfyk2vZwmzWyqRFS473c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.120.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:8c:7e:5a:70:4a:43:d7:bd:79:45:a8:7a:be:59:56:10:30:
97:97:fb:f5:fa:94:2f:b5:f8:f0:5c:91:ba:49:80:4b:64:b5:
5a:ff:ac:82:da:bc:69:2a:f2:87:55:e6:69:d0:49:cb:d9:e2:
39:19:3e:50:6f:07:13:57:d6:12:21:67:95:35:f8:67:f5:b8:
7a:d7:e0:e3:e7:61:74:79:7a:58:5e:bc:0d:0e:6a:a0:d7:fe:
cc:5b:81:ad:24:a1:c4:06:ae:f1:6c:19:b3:bc:f5:1d:bb:d2:
aa:c5:9d:00:d9:2c:54:ee:7e:12:19:7c:29:4a:19:42:a9:10:
2e:56:9e:b1:92:22:b3:62:b8:24:03:ea:fa:88:20:b4:7d:63:
b9:6e:b5:36:67:4b:6d:86:f0:9f:95:9f:a3:88:a9:74:6d:9a:
b6:78:2e:e4:a8:66:95:73:02:fe:14:96:73:b9:d3:24:6f:a4:
39:14:c3:c0:59:5c:c7:93:28:8c:06:e8:09:9d:44:5a:c0:95:
21:23:b7:36:2d:b5:24:4e:01:3e:f0:75:b6:9f:a4:74:a9:a4:
13:b1:57:82:6d:50:9f:91:5c:43:89:9c:fc:5a:c5:6a:72:86:
a5:63:3a:e8:35:35:18:a9:ff:e1:8f:9b:5d:55:e8:a3:f5:60:
3a:e9:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:36:55 2024 by rpki-client on console.sobornost.net