Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/s5A4DWsxHzJhAyaPRc0tZb9Gzpg.roa
File: s5A4DWsxHzJhAyaPRc0tZb9Gzpg.roa (raw, json)
Hash identifier: 30pVzKr92ShwLLCyhHoUWNm6ZQ3DFjJrd9uf2yIq4p0=
Subject key identifier: B3:90:38:0D:6B:31:1F:32:61:03:26:8F:45:CD:2D:65:BF:46:CE:98
Certificate issuer: /CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Certificate serial: 01856F0B31AE016EF9FE418D126F1E9A9EAB
Authority key identifier: FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/s5A4DWsxHzJhAyaPRc0tZb9Gzpg.roa
Signing time: Sun 01 Jan 2023 20:34:42 +0000
ROA not before: Sun 01 Jan 2023 20:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209347
IP address blocks: 45.12.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:31:ae:01:6e:f9:fe:41:8d:12:6f:1e:9a:9e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Validity
Not Before: Jan 1 20:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b390380d6b311f326103268f45cd2d65bf46ce98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:20:8c:a2:82:91:27:4f:31:5d:b7:cd:b4:17:
e4:25:64:0b:14:4f:5a:f7:06:1d:9f:ea:1c:37:39:
4c:a9:d3:d1:11:58:d8:f1:93:cd:e6:8c:df:c5:96:
8b:e6:46:04:a1:38:66:47:41:e6:83:42:37:79:f0:
1f:e5:6a:be:a7:b3:53:05:11:20:d6:70:8f:61:4e:
9b:b3:ef:e8:78:00:57:de:26:04:15:e2:ed:e5:3d:
32:65:59:ee:db:e4:ef:ff:21:64:c0:b2:97:83:ea:
b7:69:96:3f:6e:c6:6a:93:a0:76:66:ea:09:43:8a:
ed:81:17:96:ab:08:22:70:d8:d3:54:ea:69:45:85:
a8:fc:5d:6d:2a:c5:6b:04:03:09:0d:45:f5:40:a3:
e0:8e:20:df:1e:9f:4a:ac:5e:35:64:95:6e:86:9a:
49:74:b0:7c:55:90:da:4a:c6:9b:c0:24:19:b0:2a:
03:fd:04:2f:da:4b:b6:06:a8:8b:9a:ac:72:b7:30:
6c:1d:0d:af:e4:c8:0a:34:7c:f4:a7:a4:ab:be:b7:
1a:7d:53:15:76:01:0d:98:d9:bc:e2:b4:54:4b:32:
d6:c5:33:6c:c9:16:a7:1e:b0:6b:fb:a1:02:6e:b2:
5f:2b:94:a3:b8:37:ae:c0:1a:85:ad:13:20:a0:99:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:90:38:0D:6B:31:1F:32:61:03:26:8F:45:CD:2D:65:BF:46:CE:98
X509v3 Authority Key Identifier:
keyid:FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/s5A4DWsxHzJhAyaPRc0tZb9Gzpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:0e:a9:99:01:53:48:6c:bf:91:b6:12:f6:40:a1:18:f9:f6:
2e:7a:68:de:97:b4:c7:42:fd:c1:53:c2:0f:af:c6:34:48:a3:
44:89:26:26:8d:82:5f:ee:79:0b:7b:81:fd:b1:0a:cd:d0:2a:
41:3b:2c:bf:0a:ac:85:ed:85:2b:c0:f6:3f:e6:e0:67:18:2c:
89:a7:7d:1c:d4:71:9e:a8:6d:0a:16:8d:44:f8:9f:00:ea:af:
d6:a7:96:2f:22:f2:98:35:a8:ec:a3:ea:2a:af:01:36:c2:a0:
6a:27:01:4e:cd:8a:82:33:f9:83:7d:ef:40:81:20:ac:13:1e:
ca:14:c4:84:60:cb:da:b4:60:7b:83:b0:13:cb:e8:c5:3f:d9:
36:1b:c1:d5:33:eb:a6:02:b7:04:bb:0f:c7:18:70:df:8f:5e:
a5:a5:88:3e:89:c8:16:4e:54:c2:dd:bd:c9:31:48:1b:4a:a9:
e7:3d:2e:b8:2c:9e:cb:9f:5e:5f:b9:16:4c:33:65:96:a0:c4:
41:43:c5:5e:b3:b8:a9:6b:9a:cf:10:7a:b1:bd:cb:8d:e6:6b:
e8:09:64:10:61:8b:61:a2:49:28:f8:67:19:56:e7:d9:a0:48:
6e:66:5c:46:46:22:de:89:6e:39:6d:7d:38:96:6b:d6:9f:4e:
64:70:c1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net