Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/9jjzzFEeFvbfeIimF09jL8okY3g.roa
File: 9jjzzFEeFvbfeIimF09jL8okY3g.roa (raw, json)
Hash identifier: 0bkgtvrfQHbL1/nBwntM6KUJYR72/Xg2ygqCeTenMqg=
Subject key identifier: F6:38:F3:CC:51:1E:16:F6:DF:78:88:A6:17:4F:63:2F:CA:24:63:78
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 0193BAFFBC983B909FFD132704356B150B58
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/9jjzzFEeFvbfeIimF09jL8okY3g.roa
Signing time: Thu 12 Dec 2024 13:12:22 +0000
ROA not before: Thu 12 Dec 2024 13:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5089
IP address blocks: 45.149.168.0/23 maxlen: 24
45.149.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:ff:bc:98:3b:90:9f:fd:13:27:04:35:6b:15:0b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: Dec 12 13:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f638f3cc511e16f6df7888a6174f632fca246378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:66:17:2b:3e:66:95:66:50:62:1c:41:9b:6f:
d5:bd:a0:64:20:cb:b6:66:54:ca:48:2e:85:16:d9:
1e:3f:5b:87:5d:ff:e9:8c:92:27:11:c0:97:2a:c3:
34:12:61:39:35:ea:4c:c1:55:24:e6:e0:15:95:11:
2a:eb:64:91:c1:5a:fd:a7:45:f9:a1:8e:f1:a0:12:
86:d0:81:a4:12:f5:ac:0a:1d:d9:e8:4b:49:ef:c9:
ba:3c:d2:89:a9:cb:04:3f:e2:a2:07:b4:df:32:f9:
e9:bf:5f:88:6b:17:12:22:d3:f6:a8:bd:b6:9a:05:
ac:e9:f1:e9:31:41:96:df:43:49:a8:c1:62:8d:38:
37:8e:22:87:fa:35:b0:42:9b:4b:51:9d:74:44:bb:
f8:07:79:3d:48:97:0d:1f:52:7b:f4:fe:d8:e1:df:
c7:c2:28:0b:83:ae:a5:6c:af:49:4b:75:eb:d2:1f:
e2:d4:43:a1:3a:57:3a:ba:b7:84:f0:b1:a6:01:43:
af:05:a4:28:ae:99:cf:36:13:23:7c:e9:55:cc:c6:
77:65:eb:f4:51:ca:5a:69:10:01:14:cf:b8:7e:a2:
67:d8:ff:3f:b8:2f:d0:5a:1d:45:fe:9e:a5:ad:b1:
70:03:35:30:79:50:25:1b:04:69:4b:f7:10:24:5a:
50:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:38:F3:CC:51:1E:16:F6:DF:78:88:A6:17:4F:63:2F:CA:24:63:78
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/9jjzzFEeFvbfeIimF09jL8okY3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.168.0/22
Signature Algorithm: sha256WithRSAEncryption
09:87:1f:9f:1b:32:3f:d4:63:7f:bc:62:98:a1:ab:92:6e:d3:
de:14:dd:60:35:dc:56:9b:74:f4:23:cb:cd:f0:71:dd:42:4b:
fa:3f:64:e4:95:9f:6a:ac:1a:eb:57:ef:d4:5f:59:39:07:b3:
af:77:50:f7:90:85:13:5b:3e:53:09:55:ca:31:cd:66:be:5b:
3f:1a:11:b2:13:03:9f:cc:34:19:a2:d7:a9:7f:d0:f1:9a:f3:
5a:e0:69:f4:75:94:9c:f5:01:cc:2b:4c:be:ee:92:3f:db:4c:
d0:45:cd:90:54:c7:2d:08:4b:a2:9f:29:4d:d8:59:ca:54:4b:
86:2d:40:94:b3:32:49:73:fa:19:14:91:f1:db:07:13:4b:08:
a7:ce:66:c5:7a:ce:6f:dc:92:f2:fa:90:41:bb:dd:99:cd:94:
b4:30:4e:d6:fd:70:56:6d:fe:d9:36:5e:c3:00:af:99:d4:0b:
79:9b:d4:55:2a:13:37:5a:ed:f1:72:62:77:36:6a:b9:43:4c:
3c:89:2f:5f:42:73:2f:9e:28:f9:cf:99:d9:7c:4a:84:a8:c1:
de:09:bc:f2:ff:52:d4:e6:fa:98:b5:d5:4c:48:c8:11:1a:2c:
33:cb:44:4b:fb:45:d1:a4:28:1e:f8:5d:a6:d7:97:8f:15:b9:
f7:98:08:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:42 2024 by rpki-client on console.sobornost.net