Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/bsWBFB01rM7RNZpfoOleWwmsR7A.roa
File: bsWBFB01rM7RNZpfoOleWwmsR7A.roa (raw, json)
Hash identifier: 3+UVtqxoW9QYXz3Ji/NHCMD6z9JrMd8kv+GFMLnTq+M=
Subject key identifier: 6E:C5:81:14:1D:35:AC:CE:D1:35:9A:5F:A0:E9:5E:5B:09:AC:47:B0
Certificate issuer: /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial: 0190DFE505D5B14F9D337C1BC8DA2FD853C8
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/bsWBFB01rM7RNZpfoOleWwmsR7A.roa
Signing time: Tue 23 Jul 2024 14:00:46 +0000
ROA not before: Tue 23 Jul 2024 14:00:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58280
IP address blocks: 45.129.224.0/22 maxlen: 22
2a0e:5040::/29 maxlen: 29
2a0e:5040::/32 maxlen: 32
2a0e:5041::/32 maxlen: 32
2a0f:fd00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:df:e5:05:d5:b1:4f:9d:33:7c:1b:c8:da:2f:d8:53:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Validity
Not Before: Jul 23 14:00:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ec581141d35acced1359a5fa0e95e5b09ac47b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:be:78:b8:a3:84:c7:0c:75:66:96:e5:e5:5d:
ff:39:17:86:91:e1:53:26:36:28:22:ad:a3:08:f5:
66:75:0b:37:af:a7:80:e4:b8:0d:89:2f:6f:ca:9d:
7a:c9:cf:17:21:c0:3f:a3:7f:57:ce:6f:7e:b8:71:
5b:d7:bb:29:4f:d9:64:b9:eb:3c:9b:5a:6e:e0:50:
9c:33:84:64:c5:3a:1a:fa:12:d5:ea:ac:54:a1:4a:
b5:fe:22:78:5e:b8:76:9f:a2:df:5d:3e:d2:b8:b3:
86:05:f8:97:bf:70:9b:6f:6c:ef:ae:86:06:ef:8c:
21:a6:db:6c:70:41:cc:52:6e:90:8f:e7:cc:c1:57:
3c:c6:84:4c:38:03:c7:37:8d:a0:d5:20:43:e7:ee:
6d:71:b1:8a:2b:1d:29:6f:b6:02:6d:8f:73:85:0b:
e6:96:62:a8:47:a1:6d:45:d3:c4:70:c0:78:23:e3:
a3:52:4c:1f:ed:77:b4:e7:d4:82:12:0b:be:6e:e8:
0d:1a:ba:ca:22:45:5c:10:30:0c:e5:7e:49:2d:19:
b9:dd:57:6e:90:72:89:cf:6a:84:c2:40:4e:d4:5f:
0c:3e:3a:4a:06:39:50:78:90:2d:65:ca:2c:1e:01:
e1:d5:51:48:a1:93:11:2f:39:ad:d9:d6:e6:76:89:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C5:81:14:1D:35:AC:CE:D1:35:9A:5F:A0:E9:5E:5B:09:AC:47:B0
X509v3 Authority Key Identifier:
keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/bsWBFB01rM7RNZpfoOleWwmsR7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.224.0/22
IPv6:
2a0e:5040::/29
2a0f:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
33:70:cd:a0:36:ef:6f:5f:ec:f9:57:2a:88:83:05:d7:ff:6c:
a4:73:e6:4d:9c:00:58:10:6c:05:01:9f:54:5e:d9:13:f8:c5:
85:00:da:cc:5c:00:86:fb:d6:61:40:9d:df:38:38:ad:8c:1a:
45:0b:ba:23:0b:2e:31:e6:42:f5:59:cb:c8:cc:9b:91:9b:24:
2c:9c:ff:97:ce:4f:c1:de:ba:c8:3a:6e:52:6e:07:1c:de:2b:
c5:5d:6b:66:c4:b1:e2:68:65:01:0d:b8:0a:44:38:92:8d:a4:
dc:91:e0:cf:ab:60:4b:dd:1d:9f:e8:29:54:a5:fe:53:29:ec:
6c:13:33:e4:fb:40:b0:0d:b9:24:20:0d:cc:6d:03:1c:cc:ad:
6d:16:f6:5f:ae:00:fe:87:7d:fe:b3:b9:4a:d1:95:b0:ce:d2:
68:3b:0e:f1:c9:b9:8a:70:1c:aa:2e:7d:f9:fa:a2:5e:bd:db:
a5:34:2a:ac:fa:79:06:c1:4d:6e:38:c5:77:c5:86:87:dc:78:
11:82:a9:86:64:2e:14:15:62:9b:4d:ff:af:86:7d:c4:4d:2b:
4d:61:d5:d2:3c:bf:71:6f:7a:d0:51:00:a2:f9:40:2d:74:72:
9a:3a:17:3c:7b:94:66:ba:c8:33:e4:30:30:f8:e9:82:f5:ee:
fd:34:bd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:11:11 2024 by rpki-client on console.sobornost.net