Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GcdYV6zpEvGYFutt49v5IfBkQkc.roa
File: GcdYV6zpEvGYFutt49v5IfBkQkc.roa (raw, json)
Hash identifier: LGfqXjgiB3e5oWPSAERbSkXVFcarCmVsW9Oc3sB62Lk=
Subject key identifier: 19:C7:58:57:AC:E9:12:F1:98:16:EB:6D:E3:DB:F9:21:F0:64:42:47
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019275EDCDE6BF6589CCAEC41A39A712725A
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GcdYV6zpEvGYFutt49v5IfBkQkc.roa
Signing time: Thu 10 Oct 2024 10:16:11 +0000
ROA not before: Thu 10 Oct 2024 10:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47436
IP address blocks: 45.147.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:75:ed:cd:e6:bf:65:89:cc:ae:c4:1a:39:a7:12:72:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 10 10:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=19c75857ace912f19816eb6de3dbf921f0644247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:82:b7:41:14:26:e7:ef:4c:24:df:22:8f:
3e:2b:56:fd:79:c2:34:d5:8d:47:31:39:aa:ef:54:
6d:dc:82:ce:94:08:36:64:77:10:e8:b2:65:78:65:
9c:50:3b:1b:e4:37:4b:ca:c6:49:22:63:c4:9a:5b:
f0:1e:d4:10:ae:60:18:7f:de:c7:ec:5e:fd:c5:98:
6b:8a:82:50:e6:19:9f:15:c1:4d:4c:63:26:89:12:
ee:c1:94:d9:ed:38:b4:7f:72:6e:47:d0:9b:5b:03:
1c:f7:33:32:be:b2:dd:da:39:b5:0a:f8:5b:0e:ce:
27:97:99:4a:bf:f0:d4:4d:2d:14:2c:5f:3a:ae:d4:
c3:e3:be:ca:8e:85:c0:8d:fe:51:f0:22:3c:64:61:
4b:ad:1d:95:eb:a7:01:d3:0c:eb:ce:3d:b1:48:de:
d7:be:1c:8d:13:5b:de:c8:ca:d1:93:ca:eb:7b:72:
83:66:72:f3:bc:35:df:e7:a8:2b:4d:c5:8d:1c:12:
02:b0:3b:22:d3:a8:9e:79:0a:6e:05:b8:9e:a9:94:
0e:23:d3:6f:4c:83:fa:fd:f7:e8:69:bc:90:73:8f:
d9:5e:31:42:ca:1b:99:6c:03:f0:79:06:bf:6a:dd:
99:66:e6:a7:84:3e:36:30:9b:58:d3:74:2a:61:6a:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C7:58:57:AC:E9:12:F1:98:16:EB:6D:E3:DB:F9:21:F0:64:42:47
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/GcdYV6zpEvGYFutt49v5IfBkQkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.45.0/24
Signature Algorithm: sha256WithRSAEncryption
25:54:f1:a3:c8:ca:47:ef:b2:7d:88:6a:c5:8b:02:b6:45:24:
96:10:44:d5:96:32:0f:4f:79:e2:36:47:23:a4:46:20:55:31:
6f:94:35:43:ec:c8:9e:c5:20:bd:f4:db:b3:69:c4:c7:67:7f:
00:dc:a8:ec:ae:21:04:0c:54:70:2e:d7:1e:ff:bc:f1:92:9c:
86:b3:31:3f:ed:2c:ce:91:8c:a1:94:fc:f5:3d:4b:db:df:fe:
f0:b6:63:5e:0f:ba:c6:a6:bc:ef:8b:9e:7b:d0:97:86:79:f9:
c6:71:ce:6c:5a:e6:9e:c7:ed:11:5d:10:03:b9:dd:92:be:d3:
21:10:8d:85:d6:06:e9:fb:eb:8b:34:82:75:b7:14:6e:78:e4:
c6:24:7e:54:df:f6:35:d8:bd:e5:6c:d9:83:ac:e2:d0:aa:72:
3f:9a:95:44:42:d4:34:3c:2a:41:be:41:95:76:2a:9f:46:37:
11:2e:ff:de:e2:b6:a8:d3:6c:16:8f:e5:4b:cf:39:40:a1:27:
13:82:b2:af:7f:74:24:9b:2c:ac:7a:dd:e8:dd:fa:5b:0c:ba:
bd:25:23:52:7e:52:68:a0:fa:4e:6b:90:e9:af:4e:03:4f:7d:
3e:bc:48:ed:77:12:8e:b1:5d:ec:a7:da:0a:fd:d7:86:6f:84:
a5:e2:54:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:31 2024 by rpki-client on console.sobornost.net