Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/XtHy-Ru_1PyTKfEhxbvkoTXyPII.roa
File: XtHy-Ru_1PyTKfEhxbvkoTXyPII.roa (raw, json)
Hash identifier: lOWKDlIZ1eHMPEKNsbtiMsmGAQGaYtlAFGptfG+mdJ4=
Subject key identifier: 5E:D1:F2:F9:1B:BF:D4:FC:93:29:F1:21:C5:BB:E4:A1:35:F2:3C:82
Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial: 018D802DB4A028D6002910A8493E6F3DD324
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/XtHy-Ru_1PyTKfEhxbvkoTXyPII.roa
Signing time: Tue 06 Feb 2024 20:48:15 +0000
ROA not before: Tue 06 Feb 2024 20:48:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39896
IP address blocks: 45.159.108.0/22 maxlen: 22
146.255.24.0/21 maxlen: 21
193.150.128.0/20 maxlen: 20
193.150.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:80:2d:b4:a0:28:d6:00:29:10:a8:49:3e:6f:3d:d3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Validity
Not Before: Feb 6 20:48:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ed1f2f91bbfd4fc9329f121c5bbe4a135f23c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d0:21:f2:4f:21:f9:ae:ff:e0:02:21:e0:51:
8c:86:87:46:33:15:fc:f1:ff:87:ab:87:6a:b9:1e:
9c:3a:c8:31:3e:47:c1:d7:f8:30:c2:76:2e:18:1b:
7f:e2:a6:e7:64:1e:f7:92:61:78:64:ff:db:50:6f:
78:1b:cd:50:8f:ce:ac:a8:37:07:b2:5b:38:27:75:
ca:d5:1e:66:c0:11:d0:30:0c:bd:30:44:8b:83:85:
e3:6f:69:9e:51:cb:4f:81:9f:d9:bf:0c:1e:ed:d7:
2f:b8:a0:f8:31:a3:0f:81:94:a0:a6:7f:09:e9:5f:
5d:9d:41:ac:32:e3:33:da:f6:d1:79:b0:a3:83:5d:
ba:5e:5a:47:65:5b:b8:a4:9c:03:79:8b:2b:37:7d:
ab:c4:12:5a:63:59:af:09:c9:21:8f:a2:af:92:c7:
26:5b:59:6d:bd:f1:81:ef:dd:29:58:ae:81:5c:f9:
fa:b4:81:60:a2:54:4a:1e:c8:e7:72:d9:b1:1e:e1:
2c:0c:ab:fb:84:20:52:5e:8f:eb:6e:0b:7d:25:2b:
e7:1b:22:de:a0:cf:d3:d6:d7:30:b9:3a:dd:7c:d4:
56:b0:4e:b2:3f:6b:72:99:6d:a8:fb:9e:83:73:6e:
f3:19:03:6c:6b:7b:87:b6:97:f1:b9:d8:1c:2d:0c:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:F2:F9:1B:BF:D4:FC:93:29:F1:21:C5:BB:E4:A1:35:F2:3C:82
X509v3 Authority Key Identifier:
keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/XtHy-Ru_1PyTKfEhxbvkoTXyPII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.108.0/22
146.255.24.0/21
193.150.128.0-193.150.151.255
Signature Algorithm: sha256WithRSAEncryption
2b:99:79:52:e8:37:50:af:0d:53:7c:d6:1b:b5:68:9f:c1:45:
68:c5:db:77:aa:46:70:14:d1:31:46:25:5b:b8:64:ca:77:56:
31:46:3a:e3:fe:4e:86:22:ad:67:6b:bd:f6:80:c5:a1:2c:c0:
0a:66:80:4e:1f:16:2a:52:be:97:12:d5:fc:60:1c:7f:54:bb:
cb:c7:61:3e:9e:92:2a:32:42:a8:a1:f2:08:91:c5:f1:31:02:
6a:8a:3e:a6:49:59:90:82:fb:ea:62:50:cd:93:f1:f7:20:1c:
3a:a4:a4:0f:4e:15:57:46:b0:e7:e7:fb:a6:a3:c6:70:68:40:
83:61:b8:a2:56:75:be:a9:14:f8:11:de:88:c7:ab:41:be:b1:
89:d0:91:4b:8b:13:ff:fa:1a:d0:f5:3a:37:51:2f:61:8d:d8:
36:1f:33:a2:6f:32:67:e2:f1:b6:63:5d:d6:dd:97:64:65:c8:
dd:d8:20:00:87:4c:cb:ab:01:a6:61:75:c7:68:df:20:d1:8f:
d2:f4:eb:ca:a7:cb:06:ae:6f:84:fa:6a:f9:40:56:59:6c:28:
44:3e:62:23:7c:36:2e:be:3f:38:f2:d8:d1:9d:a3:15:49:ae:
26:92:13:a5:0d:55:42:7e:89:78:c8:92:42:c7:28:80:cf:d2:
ec:3b:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 03:58:44 2024 by rpki-client on console.sobornost.net