Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c676c9-dea9-45fa-9081-697b8b393da5/1/oO9oHcWCOD3aZNVDQRreCVxTkR4.roa
File: oO9oHcWCOD3aZNVDQRreCVxTkR4.roa (raw, json)
Hash identifier: 0jxaEMVakDp6FlOEq399pzh4stWjLiPmcX2xc5UYlDo=
Subject key identifier: A0:EF:68:1D:C5:82:38:3D:DA:64:D5:43:41:1A:DE:09:5C:53:91:1E
Certificate issuer: /CN=eb866904912083d8d0590f0ed29fc744427499b0
Certificate serial: 0185710C21BBCCE30F92DC58BD87FD42B7F0
Authority key identifier: EB:86:69:04:91:20:83:D8:D0:59:0F:0E:D2:9F:C7:44:42:74:99:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/64ZpBJEgg9jQWQ8O0p_HREJ0mbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c676c9-dea9-45fa-9081-697b8b393da5/1/oO9oHcWCOD3aZNVDQRreCVxTkR4.roa
Signing time: Mon 02 Jan 2023 05:54:58 +0000
ROA not before: Mon 02 Jan 2023 05:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198192
IP address blocks: 45.131.54.0/23 maxlen: 23
45.131.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:21:bb:cc:e3:0f:92:dc:58:bd:87:fd:42:b7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb866904912083d8d0590f0ed29fc744427499b0
Validity
Not Before: Jan 2 05:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0ef681dc582383dda64d543411ade095c53911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:d7:4f:7e:8b:7f:43:bc:e0:d1:57:d2:a4:
74:3f:77:27:a6:bf:91:97:ce:0a:65:30:52:e2:68:
98:52:55:cc:a8:1d:49:8b:9f:32:9f:ea:63:43:52:
76:0d:48:56:52:26:51:59:3e:44:a5:e5:12:34:c6:
11:f3:e8:f6:dc:01:39:28:91:3f:ca:b8:a6:14:83:
f2:27:b7:ff:1a:35:ee:c3:bc:85:7e:d1:ab:f0:0b:
03:b3:94:9c:ed:de:33:83:0a:d2:6e:26:21:de:e2:
16:e3:8e:6e:8e:f7:ac:72:16:a3:77:76:cf:7b:68:
46:91:ff:12:dd:e5:72:a7:65:a7:96:e8:e3:44:95:
b3:1d:9d:14:e4:86:cd:4c:2e:26:2d:1e:3a:ff:12:
08:8c:5b:51:dd:18:e6:52:ca:73:a5:31:8c:65:ba:
de:aa:5b:d7:3a:16:3c:c3:e2:21:2a:fe:34:e7:ac:
c7:68:f7:c6:c6:cf:13:99:1d:ba:bb:89:70:d6:4f:
1c:07:c7:1a:d1:83:d9:90:33:b3:e0:e9:b1:24:de:
75:2a:58:16:ff:b4:b8:90:9d:d6:6d:8f:ba:b9:67:
30:9d:58:8f:c6:c8:8f:c4:eb:bd:87:98:5d:2e:e8:
f7:a8:6f:88:80:1c:2e:5f:2c:0a:50:9a:73:94:45:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EF:68:1D:C5:82:38:3D:DA:64:D5:43:41:1A:DE:09:5C:53:91:1E
X509v3 Authority Key Identifier:
keyid:EB:86:69:04:91:20:83:D8:D0:59:0F:0E:D2:9F:C7:44:42:74:99:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/64ZpBJEgg9jQWQ8O0p_HREJ0mbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c676c9-dea9-45fa-9081-697b8b393da5/1/oO9oHcWCOD3aZNVDQRreCVxTkR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c676c9-dea9-45fa-9081-697b8b393da5/1/64ZpBJEgg9jQWQ8O0p_HREJ0mbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:4b:ae:76:3e:43:95:a3:64:0b:f2:79:70:e5:23:a7:79:b6:
52:37:08:64:4a:3e:a9:d7:e6:38:3f:a9:98:df:79:86:d6:fa:
cf:33:83:a2:8b:b9:16:a8:5a:9a:7d:64:52:3a:7a:3d:d4:71:
63:b2:33:93:30:af:17:9d:4b:42:be:56:3a:ab:42:64:fe:7b:
22:85:b6:39:01:57:7f:5d:8c:28:ee:3d:69:41:05:01:84:c0:
1d:b0:21:b6:50:59:c5:7c:4e:28:6b:18:d6:ed:20:e9:55:dd:
9e:ff:3b:92:33:4b:ef:30:ce:dc:6a:e2:db:62:fb:f9:15:cd:
f6:3f:6f:fd:be:70:a2:3b:c5:99:b4:81:d7:9c:4a:1b:dd:76:
3c:24:4f:ab:c7:f6:ab:4a:85:94:9d:4f:31:3b:57:89:be:e2:
9f:ab:7b:a5:c2:a2:d8:78:b3:23:b2:77:74:4c:a8:cf:01:0e:
69:75:c4:11:76:bf:12:be:41:a9:bb:6b:96:d3:12:6f:56:bf:
05:dc:c4:20:9d:c5:b3:9c:45:62:3a:f4:6c:23:c0:45:b8:8f:
27:ac:4e:ba:44:e9:d4:b3:4b:7d:9b:a0:18:66:ea:57:5b:1d:
43:22:94:3b:38:d7:8d:15:18:29:d5:62:50:85:02:f4:7a:51:
fa:29:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:40 2023 by rpki-client on console.sobornost.net