Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f44aab-957a-4a8f-8def-e0c9e720dcee/1/yJrrgEKM5uwlNCj7xaMzsBofyUE.roa
File: yJrrgEKM5uwlNCj7xaMzsBofyUE.roa (raw, json)
Hash identifier: 39AvvCIr3zGZBMNv8p3qsdZBp4ZHsJnJnJ+93uNC6t8=
Subject key identifier: C8:9A:EB:80:42:8C:E6:EC:25:34:28:FB:C5:A3:33:B0:1A:1F:C9:41
Certificate issuer: /CN=2cadc4772d1bb4e95d998232abd73b63c57c2318
Certificate serial: 05C7877C
Authority key identifier: 2C:AD:C4:77:2D:1B:B4:E9:5D:99:82:32:AB:D7:3B:63:C5:7C:23:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LK3Edy0btOldmYIyq9c7Y8V8Ixg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f44aab-957a-4a8f-8def-e0c9e720dcee/1/yJrrgEKM5uwlNCj7xaMzsBofyUE.roa
Signing time: Sat 26 Mar 2022 08:16:54 +0000
ROA not before: Sat 26 Mar 2022 08:16:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200370
IP address blocks: 45.8.163.0/24 maxlen: 24
45.8.160.0/24 maxlen: 24
45.8.160.0/23 maxlen: 23
45.8.160.0/22 maxlen: 22
45.8.161.0/24 maxlen: 24
45.8.162.0/24 maxlen: 24
45.8.162.0/23 maxlen: 23
2a12:93c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96962428 (0x5c7877c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cadc4772d1bb4e95d998232abd73b63c57c2318
Validity
Not Before: Mar 26 08:16:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c89aeb80428ce6ec253428fbc5a333b01a1fc941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f1:21:15:3e:03:77:93:1b:15:50:76:b8:32:
26:e4:c4:c8:f2:6e:c9:0b:bc:64:d1:11:cb:6e:56:
c7:fe:c4:fa:ba:05:63:30:98:9e:44:7d:8d:b8:e4:
75:9d:a5:da:08:73:ae:13:ba:6d:54:69:95:1a:05:
fb:47:30:04:bb:51:2b:e0:12:3c:f8:e7:a1:46:ee:
d5:1f:21:e3:17:cc:2e:9d:f2:73:a8:b0:74:d9:bf:
5f:42:d5:3a:a3:c7:0e:ab:e9:1d:c8:03:11:c1:f5:
ac:c5:a6:2d:58:ef:47:36:af:09:ad:1a:c0:6f:cf:
b4:2b:0e:be:b6:cf:b0:3b:83:a4:0e:89:34:21:30:
18:49:3c:4b:bc:19:c1:25:a4:54:0b:0f:57:1a:79:
3b:a1:73:9f:57:46:7a:fb:24:1b:30:04:64:41:a4:
de:d7:fb:08:f5:f8:46:2c:d0:56:31:ad:98:fd:21:
2f:ee:c8:11:49:83:95:e7:e1:8c:81:01:24:b3:a4:
c1:46:72:ef:af:eb:52:14:2b:51:20:22:8f:7d:7b:
e4:ee:bb:ef:fd:53:f9:88:b7:2d:13:ab:29:1c:1e:
96:55:67:df:e9:07:83:32:e3:d7:dd:da:a3:b9:8f:
3d:73:a2:7b:2f:d4:0f:f9:e3:6a:d5:40:e4:30:53:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9A:EB:80:42:8C:E6:EC:25:34:28:FB:C5:A3:33:B0:1A:1F:C9:41
X509v3 Authority Key Identifier:
keyid:2C:AD:C4:77:2D:1B:B4:E9:5D:99:82:32:AB:D7:3B:63:C5:7C:23:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LK3Edy0btOldmYIyq9c7Y8V8Ixg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f44aab-957a-4a8f-8def-e0c9e720dcee/1/yJrrgEKM5uwlNCj7xaMzsBofyUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f44aab-957a-4a8f-8def-e0c9e720dcee/1/LK3Edy0btOldmYIyq9c7Y8V8Ixg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.160.0/22
IPv6:
2a12:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:cd:4a:ed:5c:16:fd:f1:0e:a2:44:8c:6f:01:39:1f:18:12:
7a:92:f9:38:26:d0:f4:0c:5d:45:52:cc:c5:82:13:56:eb:37:
7c:6d:11:1a:74:bb:b5:8c:22:5b:d0:91:09:e3:39:95:a6:21:
28:57:d4:91:5d:87:dc:2b:7c:25:b6:4b:d4:99:2d:1d:ab:2d:
b7:0e:3b:e2:a6:c6:3d:68:8f:00:f4:a2:fa:53:cd:87:74:73:
58:e0:47:de:e6:d3:cc:53:0f:e6:c3:c2:8d:4d:82:e1:57:c9:
30:50:5d:bf:6c:26:e1:d8:fa:6c:92:ad:0b:99:5b:7d:30:d6:
c1:a0:fb:4c:86:89:d7:8c:1e:32:73:a6:2b:30:94:b5:1a:36:
f1:73:bd:13:c8:a4:0d:ba:71:5a:eb:30:75:c5:09:54:94:31:
c3:61:94:e6:b0:31:98:b2:e6:10:13:e4:5e:80:bf:04:66:37:
be:af:f4:4b:ea:f7:e5:66:77:d1:95:1d:89:2a:fa:83:ca:a1:
8c:51:1f:44:11:6a:dd:b6:7e:e4:86:18:77:a9:6c:a7:6e:96:
87:e9:5e:96:6d:62:e9:aa:3c:4e:f9:d4:86:72:a6:70:aa:28:
50:b3:5b:46:28:26:42:94:5c:ff:39:ce:d3:98:c2:52:77:5b:
a7:27:f9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net