Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/DCbKRmRVLaR0v4cPlePhnE9lVR4.roa
File: DCbKRmRVLaR0v4cPlePhnE9lVR4.roa (raw, json)
Hash identifier: sqXNJ4ys9BGIqxLtfhKAhTEnBWaTQv73MrJNBd6rc7o=
Subject key identifier: 0C:26:CA:46:64:55:2D:A4:74:BF:87:0F:95:E3:E1:9C:4F:65:55:1E
Certificate issuer: /CN=93c8ae210ea49b4eada48b1da222023c734d3211
Certificate serial: 018CC2DB1936A51FE79C831C48376699FF52
Authority key identifier: 93:C8:AE:21:0E:A4:9B:4E:AD:A4:8B:1D:A2:22:02:3C:73:4D:32:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8iuIQ6km06tpIsdoiICPHNNMhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/DCbKRmRVLaR0v4cPlePhnE9lVR4.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24904
IP address blocks: 45.87.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:19:36:a5:1f:e7:9c:83:1c:48:37:66:99:ff:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c8ae210ea49b4eada48b1da222023c734d3211
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c26ca4664552da474bf870f95e3e19c4f65551e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:f2:5f:97:6e:c7:95:b8:a9:1f:ae:f8:65:
b7:3f:c5:34:40:75:4a:ce:3a:b5:a9:26:e3:bf:2c:
a4:51:06:d4:e9:08:0c:d4:ad:6e:b1:04:e4:a8:4b:
d8:d6:b9:a9:0c:f8:ed:a4:07:09:2f:77:04:41:c4:
4e:5e:ba:fe:0d:d5:99:39:b1:9b:46:d2:0e:67:14:
7b:d7:b4:ad:0b:59:b3:e0:35:89:8e:ad:e5:b2:ef:
07:dc:d9:d3:81:08:28:a0:18:12:ce:c4:ba:15:71:
ce:2c:3a:f5:33:81:24:0e:c1:ce:71:92:86:82:ee:
3b:77:dc:06:ff:d7:f0:e6:8b:42:cf:f2:1e:e0:a6:
cd:40:1a:5a:df:6e:a7:6e:6b:27:44:17:10:b9:df:
01:48:9e:84:e3:9d:f3:62:e8:c0:e1:e5:23:25:93:
7e:99:6f:d6:da:87:90:9a:8b:c3:08:39:38:41:fc:
10:7b:4a:bf:a6:5e:17:bf:2e:61:a2:6c:c8:f7:5b:
e7:6c:38:5b:8e:73:fc:8b:dd:64:0d:2a:d1:98:48:
d1:15:c0:f0:f3:d2:9d:1c:71:dd:f5:a3:84:28:bc:
42:33:f6:35:f4:7e:8c:7d:93:72:b8:18:a0:ea:13:
25:0b:1b:9b:8f:ee:27:8a:e4:46:80:c8:82:d9:54:
6f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:26:CA:46:64:55:2D:A4:74:BF:87:0F:95:E3:E1:9C:4F:65:55:1E
X509v3 Authority Key Identifier:
keyid:93:C8:AE:21:0E:A4:9B:4E:AD:A4:8B:1D:A2:22:02:3C:73:4D:32:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8iuIQ6km06tpIsdoiICPHNNMhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/DCbKRmRVLaR0v4cPlePhnE9lVR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/k8iuIQ6km06tpIsdoiICPHNNMhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.180.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:86:9b:9e:41:49:df:35:ef:e0:be:57:91:bd:12:e9:b5:4e:
29:c3:f5:69:5e:74:d6:0f:b1:31:e1:f5:f1:28:a2:6e:52:7b:
6c:48:9c:0c:7e:b0:a4:67:09:16:b4:5c:d3:8d:2b:32:9a:d3:
0b:1b:1f:fc:f6:52:3a:06:3c:a2:cf:c9:3f:90:a1:c2:69:92:
2f:b9:85:4e:69:3e:ae:34:c1:66:df:03:73:12:83:19:41:81:
cf:44:12:6c:e6:30:de:97:27:05:46:53:54:54:36:8b:66:e4:
fc:63:54:0f:eb:ad:32:1e:ae:84:c1:1a:01:bf:44:b6:13:5e:
29:8e:87:5c:b8:6c:73:8d:00:6c:74:90:74:4d:b4:e7:bf:d5:
16:50:8b:67:13:e1:7a:43:f3:7b:b7:a8:e0:77:8b:dd:52:78:
4b:48:74:e8:c4:1e:ed:0a:5c:c1:11:2f:d1:45:9a:dd:92:da:
b9:dd:ec:50:d0:38:d7:5e:88:7b:94:e7:61:b9:e9:4f:e8:0f:
a1:11:a0:0a:a6:f4:37:14:ce:56:52:fd:b6:66:78:20:ea:a3:
c3:51:f4:b3:2f:93:bb:e8:f9:18:02:24:d9:b1:21:4a:23:32:
17:8c:94:98:02:2c:b7:99:c3:67:7d:42:60:51:e8:ce:d5:1e:
c4:b2:08:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:21:35 2024 by rpki-client on console.sobornost.net