Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f44aab-957a-4a8f-8def-e0c9e720dcee/1/I_7iwkwy8LU4hWk-PvWtQrLH28g.roa
File: I_7iwkwy8LU4hWk-PvWtQrLH28g.roa (raw, json)
Hash identifier: rLnvAKC2sikf11XSsHCrlJQarG2l+uwnPt4Glv2Q2I4=
Subject key identifier: 23:FE:E2:C2:4C:32:F0:B5:38:85:69:3E:3E:F5:AD:42:B2:C7:DB:C8
Certificate issuer: /CN=2cadc4772d1bb4e95d998232abd73b63c57c2318
Certificate serial: 05098BD8
Authority key identifier: 2C:AD:C4:77:2D:1B:B4:E9:5D:99:82:32:AB:D7:3B:63:C5:7C:23:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LK3Edy0btOldmYIyq9c7Y8V8Ixg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f44aab-957a-4a8f-8def-e0c9e720dcee/1/I_7iwkwy8LU4hWk-PvWtQrLH28g.roa
Signing time: Sat 01 Jan 2022 10:58:27 +0000
ROA not before: Sat 01 Jan 2022 10:58:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200370
IP address blocks: 45.8.163.0/24 maxlen: 24
45.8.160.0/24 maxlen: 24
45.8.160.0/23 maxlen: 23
45.8.160.0/22 maxlen: 22
45.8.161.0/24 maxlen: 24
45.8.162.0/24 maxlen: 24
45.8.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84511704 (0x5098bd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cadc4772d1bb4e95d998232abd73b63c57c2318
Validity
Not Before: Jan 1 10:58:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23fee2c24c32f0b53885693e3ef5ad42b2c7dbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:5f:7a:20:8e:4c:50:14:a7:eb:a8:5d:36:
2c:7f:55:72:8f:32:9f:e7:8b:40:ed:5d:b3:04:06:
f8:1f:eb:21:db:e7:04:58:f4:ba:67:00:ea:a8:aa:
19:3d:c9:31:6e:94:cf:0a:9c:40:2d:85:61:47:42:
75:bd:72:e0:83:48:a1:0d:69:69:7f:9b:a2:c0:d0:
b8:df:7b:8c:5f:7d:75:f2:28:73:6f:42:7b:09:84:
86:42:4e:6c:af:cf:3a:02:00:99:f3:ec:e2:19:73:
55:b9:05:14:b5:06:96:a9:89:0c:54:ee:96:13:89:
05:db:b7:8e:e3:bb:a8:4e:6a:a8:e5:bb:74:0a:b2:
68:c8:a7:25:12:cd:cd:83:94:2b:4f:46:28:40:4e:
26:90:c4:bb:a1:49:25:de:3b:29:58:1a:da:84:a1:
82:ac:55:a9:9c:df:a1:c6:2b:29:04:85:bd:53:b6:
07:61:83:08:a0:b4:47:d2:8b:e9:83:67:ae:9b:e2:
05:dc:83:54:9d:08:97:4c:2d:36:58:2c:67:6a:e0:
4a:b5:a8:8e:72:78:76:46:68:0f:52:81:85:5b:da:
0b:65:19:a2:c1:91:42:8e:50:6f:80:7e:c2:4b:d6:
a0:66:73:11:3a:e7:01:d4:86:0f:a1:f1:70:50:32:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FE:E2:C2:4C:32:F0:B5:38:85:69:3E:3E:F5:AD:42:B2:C7:DB:C8
X509v3 Authority Key Identifier:
keyid:2C:AD:C4:77:2D:1B:B4:E9:5D:99:82:32:AB:D7:3B:63:C5:7C:23:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LK3Edy0btOldmYIyq9c7Y8V8Ixg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f44aab-957a-4a8f-8def-e0c9e720dcee/1/I_7iwkwy8LU4hWk-PvWtQrLH28g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f44aab-957a-4a8f-8def-e0c9e720dcee/1/LK3Edy0btOldmYIyq9c7Y8V8Ixg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.160.0/22
Signature Algorithm: sha256WithRSAEncryption
63:ac:c9:4c:87:36:49:6c:a2:91:b4:03:b6:0d:49:55:e6:eb:
74:1e:bc:a4:45:2b:3e:6f:76:7a:2b:3e:59:e8:c6:6d:51:c3:
ac:d8:4b:9e:4f:18:d7:ea:9c:ae:7d:cf:ba:15:81:88:d2:66:
d0:df:47:78:16:62:56:f4:65:8a:70:1b:2a:bd:89:9c:76:7e:
fa:e9:95:f0:04:52:cc:71:ed:52:d7:40:28:de:2f:a0:44:6a:
37:96:1d:29:3d:84:50:2e:66:6d:20:4e:6e:f9:ec:eb:4e:d6:
95:e9:b6:f6:bb:fc:96:48:58:2f:f6:2f:f8:10:a8:e4:11:cf:
2f:72:0c:4d:44:2b:1d:55:1f:cd:00:a6:d0:cd:04:54:7a:a6:
d6:a8:4b:4c:03:ef:97:0e:db:fd:e7:d8:e4:fe:b0:c9:2a:1d:
36:22:09:b5:9b:ea:9b:93:74:d9:10:dc:34:ad:45:a2:ad:a0:
9d:70:2a:d7:df:cd:9a:03:c9:42:83:93:9a:08:6d:40:d0:05:
07:f6:0c:c4:62:5b:8f:35:14:07:2a:a2:1a:a5:64:29:ce:c1:
63:26:0f:be:e7:8d:49:8d:8e:2c:4c:c5:e3:ff:40:4f:8c:3b:
52:fc:b4:d0:fb:83:37:fa:6f:3e:d3:51:6b:a1:ec:2b:3c:8c:
d2:67:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net