Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/v0RgGQ1YyqnJhEPn6pPw6Nj6OmE.roa
File: v0RgGQ1YyqnJhEPn6pPw6Nj6OmE.roa (raw, json)
Hash identifier: Cy1yVAn7aAEQVM8za69oHTu5wClxdAklRE4CqfI62zk=
Subject key identifier: BF:44:60:19:0D:58:CA:A9:C9:84:43:E7:EA:93:F0:E8:D8:FA:3A:61
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 0192D8A52EF64F4D6A72854DC693CC47E850
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/v0RgGQ1YyqnJhEPn6pPw6Nj6OmE.roa
Signing time: Tue 29 Oct 2024 14:19:16 +0000
ROA not before: Tue 29 Oct 2024 14:19:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.10.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:a5:2e:f6:4f:4d:6a:72:85:4d:c6:93:cc:47:e8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Oct 29 14:19:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf4460190d58caa9c98443e7ea93f0e8d8fa3a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8d:d8:5e:74:f9:83:54:22:8e:c2:2f:c3:4e:
79:d7:66:17:ba:56:cb:e6:b1:60:a2:2c:b0:36:bd:
3e:8f:42:47:8e:52:ed:77:e5:02:6e:91:26:75:5d:
0a:5a:05:2f:0b:b3:41:b8:a8:8f:ba:63:db:ab:da:
e0:57:d8:3c:d5:9f:73:23:89:0e:80:77:54:21:b4:
8d:09:83:40:bb:81:47:85:3b:64:51:ee:9e:dc:bb:
97:cd:d0:45:b7:d4:e3:db:18:bc:fc:3a:81:25:07:
87:c8:38:0d:69:57:5c:83:22:e4:2c:96:a8:65:05:
50:38:c8:7d:0c:5e:3f:8b:e8:53:06:ce:32:fb:38:
75:43:75:f5:7b:fc:32:c9:30:1e:17:b7:f9:96:4b:
84:cd:75:68:50:44:e7:87:c6:08:8c:5d:cc:42:66:
8c:51:71:b2:4f:c2:2f:cf:af:41:9e:53:a4:1e:35:
d5:5a:36:b3:bd:87:f7:f4:06:54:da:4a:c2:bd:ea:
60:f3:44:50:d8:17:5e:18:2b:9a:f0:62:6a:b5:a1:
65:fe:a9:15:a8:60:ec:17:61:42:62:b2:aa:27:94:
7a:cc:da:e5:84:0e:ed:6f:a3:29:b3:08:74:66:f8:
2b:d2:02:e0:12:05:bc:8b:a6:22:e2:09:eb:64:07:
d1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:44:60:19:0D:58:CA:A9:C9:84:43:E7:EA:93:F0:E8:D8:FA:3A:61
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/v0RgGQ1YyqnJhEPn6pPw6Nj6OmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.120.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:7e:8c:0a:8b:5f:3f:86:e6:cb:5b:75:b1:60:95:d1:68:1f:
69:cc:18:c3:c1:b4:ec:e4:fb:a1:cf:60:33:ba:2b:5e:1e:9b:
91:70:0c:74:0d:7b:9b:e4:86:de:41:8d:33:4e:6c:77:4e:98:
40:5a:44:72:c3:d7:5a:00:4b:a2:df:2c:71:46:d7:48:d4:b8:
a4:28:5a:a9:14:8d:67:42:c6:c8:89:38:16:e6:0a:46:aa:7b:
33:36:67:87:24:9c:72:4d:26:02:a7:6e:15:d8:5b:d7:d1:b8:
fd:06:36:ca:c3:02:db:5e:e2:00:a7:1e:90:de:28:a4:2b:07:
57:c4:97:f0:fd:6c:89:ee:1b:ed:22:6a:d7:9b:32:2e:47:27:
03:b9:87:e2:f1:e0:7e:c1:e5:fc:95:33:da:82:0d:c6:18:5c:
5c:f5:48:7f:ae:7b:0b:4a:3f:dc:6d:e2:38:c0:b6:e6:94:bb:
a7:61:90:26:61:db:ce:5d:7a:17:50:7c:f7:74:18:dd:28:e7:
a8:85:e2:64:03:cb:fb:27:f6:83:eb:7f:c2:97:26:e4:67:9e:
61:57:f3:16:fa:05:d5:15:6a:51:a2:e2:3f:ce:35:1b:e8:09:
84:e5:d1:88:54:b8:46:50:f8:57:ac:e6:0b:0e:a2:03:6f:ca:
7b:00:e1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:36:55 2024 by rpki-client on console.sobornost.net