Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/qcPRNVxLIEqetzi3F4frdv_Vjq0.roa
File: qcPRNVxLIEqetzi3F4frdv_Vjq0.roa (raw, json)
Hash identifier: GGl6mv3MTmDT5fF8spkh+8S+PqPJt+S7QPK16dERAE4=
Subject key identifier: A9:C3:D1:35:5C:4B:20:4A:9E:B7:38:B7:17:87:EB:76:FF:D5:8E:AD
Certificate issuer: /CN=6cfa841621aafc52f88c4901e1f18fadce1e1d65
Certificate serial: 060ECDA6
Authority key identifier: 6C:FA:84:16:21:AA:FC:52:F8:8C:49:01:E1:F1:8F:AD:CE:1E:1D:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPqEFiGq_FL4jEkB4fGPrc4eHWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/qcPRNVxLIEqetzi3F4frdv_Vjq0.roa
Signing time: Sat 01 Jan 2022 01:56:20 +0000
ROA not before: Sat 01 Jan 2022 01:56:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206841
IP address blocks: 45.152.81.0/24 maxlen: 24
45.152.82.0/24 maxlen: 24
45.152.83.0/24 maxlen: 24
45.152.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101633446 (0x60ecda6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cfa841621aafc52f88c4901e1f18fadce1e1d65
Validity
Not Before: Jan 1 01:56:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9c3d1355c4b204a9eb738b71787eb76ffd58ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:57:9a:df:50:d4:6c:2d:1d:f8:de:16:2a:ad:
40:c4:ed:d9:b7:3d:5d:eb:47:76:18:3a:34:59:f4:
ef:f0:1e:dc:44:f6:24:f4:e0:b2:9d:b3:c2:50:aa:
95:b1:99:16:89:7c:fd:01:3d:58:a4:88:ef:13:f5:
26:f8:fb:c4:7e:b9:2e:4b:3d:aa:b9:5f:b2:03:2c:
43:ce:da:03:ad:ed:d7:a0:83:37:39:8c:42:fd:64:
81:b2:b8:66:6b:5a:62:7b:11:09:3c:43:47:04:6f:
5d:27:07:7d:b0:46:e6:3a:a9:cd:b2:42:f3:dc:0d:
a4:f3:29:8e:a5:34:60:5f:95:2d:b5:4d:21:0a:91:
40:0f:69:33:e2:7c:a2:56:d4:7f:ea:43:45:7e:75:
73:d9:75:05:6b:d9:d6:6f:6a:38:05:6d:40:6c:b2:
9d:58:fd:86:50:53:6e:45:b1:ec:de:d4:3c:8f:51:
21:8e:83:a1:d2:c5:a6:8f:51:df:00:a5:75:18:8b:
bc:e7:aa:37:32:e6:06:b4:a1:55:52:85:e0:46:ee:
a5:4b:17:27:b4:d4:e6:bf:e1:86:3c:65:0e:c0:6c:
e6:16:ab:2c:75:a7:e9:8c:6e:c5:95:64:75:67:44:
a3:14:46:2d:39:b4:39:3f:10:43:55:8a:f3:8d:00:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C3:D1:35:5C:4B:20:4A:9E:B7:38:B7:17:87:EB:76:FF:D5:8E:AD
X509v3 Authority Key Identifier:
keyid:6C:FA:84:16:21:AA:FC:52:F8:8C:49:01:E1:F1:8F:AD:CE:1E:1D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPqEFiGq_FL4jEkB4fGPrc4eHWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/qcPRNVxLIEqetzi3F4frdv_Vjq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/717d61-4127-4db6-a089-e79129e4ddef/1/bPqEFiGq_FL4jEkB4fGPrc4eHWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.80.0/22
Signature Algorithm: sha256WithRSAEncryption
30:56:d2:bd:22:46:ab:38:d1:e9:e0:4f:0c:a6:a4:8e:5f:52:
37:15:02:e7:7e:95:9b:87:47:a3:3c:c9:52:ef:61:29:a2:db:
7f:cf:1d:1d:64:f6:4a:9d:43:9d:cd:28:37:1e:c1:a0:95:99:
c3:76:65:68:e6:6f:73:b3:66:9c:dc:96:65:f3:2b:d8:65:2e:
3e:a6:0a:48:9e:b1:12:bc:47:a1:06:4e:0e:47:e6:58:a0:d9:
20:a1:23:42:63:da:be:d6:48:db:30:5b:bb:97:a9:5b:d6:05:
f8:53:85:12:ee:f4:74:a2:68:ff:9a:bf:58:44:61:be:5d:f8:
07:cc:e3:95:e0:0a:b1:cd:80:17:74:b9:7c:ec:6a:60:09:00:
51:9c:e2:3b:e8:ff:6b:17:82:b0:e9:a0:79:6b:19:bc:43:c2:
ad:d2:19:d3:4e:d9:1f:92:8e:89:d3:b7:1f:7b:4e:4c:05:3f:
25:48:c0:66:7a:c6:8c:a7:b3:a0:a7:98:b9:db:59:3f:68:bd:
e8:92:83:9c:79:9d:7b:f3:03:b2:66:ac:32:17:e6:1e:68:7c:
e3:98:98:37:79:1a:8a:bc:6f:64:91:37:45:bc:ea:cb:d5:25:
f5:cd:5a:40:a5:62:d2:e1:54:c5:0b:e0:a2:34:ce:6f:f9:fe:
1e:07:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net