Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/5aIv8qsQFQSEOYJQ0dAXCI-5JDw.roa
File: 5aIv8qsQFQSEOYJQ0dAXCI-5JDw.roa (raw, json)
Hash identifier: AmFEiNADi0P7CSv/4IsqbkJRIFLam5iN1E4bVgjPBDM=
Subject key identifier: E5:A2:2F:F2:AB:10:15:04:84:39:82:50:D1:D0:17:08:8F:B9:24:3C
Certificate issuer: /CN=904567f6e6755663bd99a3eef0ded53a42004193
Certificate serial: 018CC5DC4858E04F2019E57B4ADFBCB6988D
Authority key identifier: 90:45:67:F6:E6:75:56:63:BD:99:A3:EE:F0:DE:D5:3A:42:00:41:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kEVn9uZ1VmO9maPu8N7VOkIAQZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/5aIv8qsQFQSEOYJQ0dAXCI-5JDw.roa
Signing time: Mon 01 Jan 2024 16:29:56 +0000
ROA not before: Mon 01 Jan 2024 16:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.91.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:48:58:e0:4f:20:19:e5:7b:4a:df:bc:b6:98:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=904567f6e6755663bd99a3eef0ded53a42004193
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5a22ff2ab10150484398250d1d017088fb9243c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:ef:04:c4:dc:8a:73:58:f0:05:3c:2c:84:
9a:b6:bd:de:03:3d:bf:73:62:2f:3a:95:60:8d:8b:
6d:c9:ac:db:56:53:6b:ab:c2:9c:5f:25:d6:53:18:
11:ee:b1:13:bb:71:8c:89:53:cc:0d:bb:38:d2:9f:
c7:ab:e7:11:5e:b4:6e:31:b6:94:55:ff:53:3a:b2:
1c:91:1e:b9:0d:98:ae:44:5f:b2:6d:37:a7:ed:d1:
64:70:a7:df:2f:a7:aa:20:c4:02:de:28:f4:6e:48:
9f:97:dd:32:67:c1:df:ea:b0:fc:74:58:47:6f:d5:
b4:70:64:96:6b:46:de:be:a7:10:eb:b6:1d:61:93:
95:98:51:b3:33:c7:da:3d:16:d3:50:0a:e3:2c:6d:
f6:66:42:b8:67:38:f1:86:90:43:50:e5:fc:2b:67:
50:8c:a5:36:3c:ef:dc:65:a2:16:70:b3:e8:c7:6c:
77:1a:45:98:bb:fe:30:0d:88:3a:10:ff:8d:48:2a:
10:01:98:bc:94:94:5f:48:d6:ac:70:27:0c:8d:04:
27:26:cb:0f:c9:27:40:0b:8e:c2:9c:ea:70:be:ae:
d4:42:ab:16:75:b4:c9:a7:33:59:0d:ad:67:fe:bf:
4c:d1:43:bf:69:c2:1d:6a:c0:eb:28:96:4d:28:08:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A2:2F:F2:AB:10:15:04:84:39:82:50:D1:D0:17:08:8F:B9:24:3C
X509v3 Authority Key Identifier:
keyid:90:45:67:F6:E6:75:56:63:BD:99:A3:EE:F0:DE:D5:3A:42:00:41:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kEVn9uZ1VmO9maPu8N7VOkIAQZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/5aIv8qsQFQSEOYJQ0dAXCI-5JDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a80e43-3c99-48ae-adac-24bdbc045981/1/kEVn9uZ1VmO9maPu8N7VOkIAQZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.149.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c0:40:64:9f:6a:93:25:30:38:54:ff:a2:bc:7c:5a:75:fc:
f6:17:a6:1b:7a:01:69:ba:fe:ce:d7:3d:8d:74:dc:0a:c8:52:
1f:05:0f:e4:e0:c0:8a:21:81:de:c1:06:52:23:9f:7a:41:09:
e0:00:4d:44:70:9c:8f:86:c3:7c:18:50:0c:f1:6b:25:88:da:
04:27:24:7f:52:4c:2e:39:e2:71:df:25:6c:be:25:c0:68:87:
9d:84:e6:25:eb:55:5b:3b:17:00:a8:4b:31:34:a4:4b:eb:8b:
c7:2a:d8:0a:fe:8f:e3:92:cb:54:0d:df:ef:c5:c4:e2:30:4f:
e2:1e:ff:8b:f8:39:dd:6d:90:42:0b:8e:ce:86:77:63:aa:59:
41:e9:e2:26:1b:42:12:f0:b2:26:8b:85:ff:0d:15:df:c7:3a:
62:93:b2:da:61:d8:56:64:ea:23:db:9e:a7:2d:cd:56:83:24:
99:67:bb:b0:c5:58:43:18:5b:04:32:fe:89:3e:a0:07:27:c8:
32:ac:7c:b1:6d:db:ba:a4:7f:65:e6:0d:36:83:d7:65:05:e3:
69:8d:70:69:d5:e7:10:7f:9d:7d:a0:ec:ee:88:6f:07:a0:28:
06:1f:28:1c:6a:0f:b5:66:bc:6c:73:62:59:2c:07:9b:c9:c6:
81:21:d1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:09 2024 by rpki-client on console.sobornost.net