Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/9HXNuCuzSJVY0YcYPYWovmr-c6w.roa
File: 9HXNuCuzSJVY0YcYPYWovmr-c6w.roa (raw, json)
Hash identifier: 8YoJsIRrB4CXko9AI5qc3y6982KqXHoQ4nFlNBTbY5w=
Subject key identifier: F4:75:CD:B8:2B:B3:48:95:58:D1:87:18:3D:85:A8:BE:6A:FE:73:AC
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019377437534AB30EBBB646F04E63197AE9B
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/9HXNuCuzSJVY0YcYPYWovmr-c6w.roa
Signing time: Fri 29 Nov 2024 09:32:09 +0000
ROA not before: Fri 29 Nov 2024 09:32:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60134
IP address blocks: 45.152.156.0/24 maxlen: 24
45.152.157.0/24 maxlen: 24
45.152.158.0/24 maxlen: 24
45.152.159.0/24 maxlen: 24
193.30.129.0/24 maxlen: 24
213.232.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:43:75:34:ab:30:eb:bb:64:6f:04:e6:31:97:ae:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Nov 29 09:32:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f475cdb82bb3489558d187183d85a8be6afe73ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a4:af:58:ab:92:e6:9d:83:3f:db:2c:7f:74:
22:5e:b7:e7:3c:44:0e:01:b8:d5:de:12:22:b7:d6:
f6:11:2d:76:4b:ec:76:64:84:07:eb:a0:95:0a:2f:
de:2f:72:00:a6:40:59:6d:76:71:91:45:87:02:58:
93:04:2b:c1:f7:8f:85:ba:31:91:4d:ab:98:eb:c5:
8c:f4:64:ae:19:79:45:db:97:28:e0:a5:ed:ca:91:
23:19:3d:09:75:60:a8:86:d2:83:7b:eb:76:12:bb:
8d:61:0c:50:2b:5b:5d:71:60:37:8e:e8:ef:34:0c:
e0:d6:1d:42:68:77:27:3b:41:b8:51:2c:4b:6a:a7:
00:c1:37:e9:9e:f3:7d:09:b7:a5:c9:77:51:59:81:
2a:36:2c:49:d6:e9:d7:23:f7:b1:40:98:f6:1e:98:
4b:a1:32:39:ef:dc:4a:13:24:c1:69:39:d1:ae:94:
ee:cc:63:dc:4f:61:84:ee:c6:ab:2c:6e:8c:7d:bb:
35:61:a3:0d:43:ad:99:b7:d8:32:16:29:ef:fa:8b:
55:e2:1a:e9:da:a8:d3:d0:a6:32:7d:66:40:ce:88:
72:10:91:3f:41:78:1d:8f:0c:df:e5:96:e0:5a:c8:
9d:37:d0:c9:82:84:cb:e1:fa:71:91:1d:85:09:80:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:75:CD:B8:2B:B3:48:95:58:D1:87:18:3D:85:A8:BE:6A:FE:73:AC
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/9HXNuCuzSJVY0YcYPYWovmr-c6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.156.0/22
193.30.129.0/24
213.232.248.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1c:86:fb:ec:42:0a:ac:ac:6f:92:e2:c5:19:8f:7a:f0:82:
1e:ac:7e:78:e7:e9:0f:0e:2a:3b:90:73:17:3c:80:20:d6:24:
e8:06:03:ef:a6:ed:a6:6c:6f:c5:ed:2c:cf:c4:c7:d3:f1:71:
ce:69:d1:58:54:a9:5f:da:bc:5a:35:35:75:9a:d9:bd:2e:eb:
9f:be:20:80:e1:ec:16:97:1c:ab:1d:bc:91:7d:c3:17:a7:95:
54:27:68:40:c3:f7:01:52:5b:ca:1a:ba:f3:db:33:bf:b3:4e:
17:3d:fd:e4:2d:43:0e:0c:69:b8:1f:2f:80:8a:6e:aa:48:1e:
9b:93:e0:9f:e3:7d:8a:56:8b:ce:b0:5e:e8:3d:e2:32:b0:d5:
f6:64:97:06:f1:4c:1d:0d:4a:ce:d8:99:ab:ce:8c:58:f5:e2:
b9:dc:1f:21:29:f6:5b:9d:e7:66:ff:63:ea:37:49:36:be:7d:
8a:8a:45:3c:dc:0b:20:bb:48:91:10:b2:d6:7d:cd:ee:28:1e:
97:09:5d:d1:a5:c3:65:c8:cb:01:2a:d0:fe:bf:b7:48:1c:46:
4f:f4:1d:04:3d:85:15:51:ae:73:4d:f8:34:31:e1:bc:3c:c1:
85:a6:6d:8a:82:09:1e:9c:a1:c2:81:35:cf:46:fd:5f:d8:90:
46:5d:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:18 2024 by rpki-client on console.sobornost.net