Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/j3X7KdSy8Uv2S_9N0Gcpkpxg75M.roa
File: j3X7KdSy8Uv2S_9N0Gcpkpxg75M.roa (raw, json)
Hash identifier: GtryktHX3MDNmlKtjaA7Rmp9V+L6KzZ8Lz3SK0VwbQw=
Subject key identifier: 8F:75:FB:29:D4:B2:F1:4B:F6:4B:FF:4D:D0:67:29:92:9C:60:EF:93
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 0192D913F6C2809D33BB65999CB43686E9AA
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/j3X7KdSy8Uv2S_9N0Gcpkpxg75M.roa
Signing time: Tue 29 Oct 2024 16:20:16 +0000
ROA not before: Tue 29 Oct 2024 16:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49030
IP address blocks: 45.10.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d9:13:f6:c2:80:9d:33:bb:65:99:9c:b4:36:86:e9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Oct 29 16:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f75fb29d4b2f14bf64bff4dd06729929c60ef93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8d:78:09:e0:a8:14:48:d0:6d:28:15:03:cb:
0f:06:71:2b:5e:fa:ef:3d:6c:2f:22:5e:43:36:2e:
95:49:95:d7:74:81:1e:ba:cc:18:31:df:7b:df:f1:
fd:f0:e4:ec:92:a9:11:a6:85:f4:be:8e:7f:ff:46:
d2:be:33:cb:9c:14:28:fd:29:18:19:e1:81:86:8f:
7f:47:0b:7a:ef:7b:ac:79:f0:94:9c:29:c2:17:04:
b0:bc:2b:b7:d7:f0:dc:75:b8:42:a5:8f:6f:25:71:
9d:b5:0f:d2:a2:66:4d:45:c6:6e:fe:a7:b7:47:09:
a4:d9:b9:0a:9e:1d:e6:e9:fe:17:80:e2:f7:df:f2:
f2:91:53:5b:eb:eb:cc:89:0c:6d:ba:55:a2:60:d8:
a6:fd:56:30:b8:88:f8:91:bf:1b:38:b7:be:75:e3:
88:7b:b5:82:d0:0a:5c:89:f4:b3:d3:75:f6:0c:a9:
35:f3:10:02:dd:5f:12:f1:91:e5:bc:aa:ad:3e:c9:
93:38:9b:ff:a8:84:d6:b2:27:33:6b:27:13:18:07:
03:83:20:04:24:96:5e:02:c7:90:07:95:f0:9f:e3:
77:6c:25:44:dd:d5:fd:80:33:19:ba:c4:22:c5:3d:
17:1d:46:a8:6f:e0:89:fc:e8:9f:76:29:3d:e4:5b:
64:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:75:FB:29:D4:B2:F1:4B:F6:4B:FF:4D:D0:67:29:92:9C:60:EF:93
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/j3X7KdSy8Uv2S_9N0Gcpkpxg75M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.120.0/22
Signature Algorithm: sha256WithRSAEncryption
47:96:a0:5d:eb:f9:e3:85:70:b7:88:0a:a5:4c:d3:02:cd:7a:
d5:37:af:7a:20:4f:39:f8:8a:c0:8e:7e:91:c4:4f:17:a9:62:
30:e0:93:b0:8e:46:8e:0e:a5:12:f5:cb:63:74:d2:1e:ef:a9:
18:0a:cb:a0:8b:0a:f6:fa:72:ca:db:94:9f:b3:59:85:4b:4b:
b6:87:56:a7:5f:4a:21:02:bd:ea:eb:5b:64:4c:0c:5f:16:80:
bf:3c:fe:5d:8e:6e:ab:0c:bf:0a:18:fb:5f:52:69:18:81:d9:
3a:aa:67:d1:b6:55:51:dd:eb:7d:c7:ee:b4:b2:89:1f:99:b6:
df:d1:49:6c:d1:3c:37:38:4a:18:58:46:95:a7:22:69:08:0a:
10:89:f2:02:72:1e:f4:12:0f:97:9d:ce:7b:53:9b:f4:0d:c8:
d4:48:2d:0d:f6:5a:7c:81:0c:f5:ca:9e:b7:59:52:1c:86:d5:
a4:57:af:96:f3:53:4a:8e:b3:3c:5a:b6:8d:71:6c:3b:09:df:
f7:9f:88:84:5d:0b:de:92:2c:70:3e:6c:05:38:ce:65:e5:04:
4d:ef:07:6d:3d:24:90:1a:d7:7e:bf:fc:d1:af:89:13:8f:97:
27:5b:64:26:60:a9:cc:47:97:8e:9b:ee:36:f9:73:57:5c:1d:
0d:36:0a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:36:55 2024 by rpki-client on console.sobornost.net