Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/x59dEGzqRIdeuXAHqGjDFgmBn_A.roa
File: x59dEGzqRIdeuXAHqGjDFgmBn_A.roa (raw, json)
Hash identifier: ed0HjZbuGIggjA7vOb/9g+mlQDXUK+48J8OWgK2aR3A=
Subject key identifier: C7:9F:5D:10:6C:EA:44:87:5E:B9:70:07:A8:68:C3:16:09:81:9F:F0
Certificate issuer: /CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Certificate serial: 081CFA09
Authority key identifier: FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/x59dEGzqRIdeuXAHqGjDFgmBn_A.roa
Signing time: Sat 01 Jan 2022 09:56:33 +0000
ROA not before: Sat 01 Jan 2022 09:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202539
IP address blocks: 45.12.201.0/24 maxlen: 24
45.12.200.0/24 maxlen: 24
2a0e:bf00::/32 maxlen: 48
2a0e:bf01::/32 maxlen: 32
2001:67c:1160::/48 maxlen: 48
2a0e:bf01:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136116745 (0x81cfa09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Validity
Not Before: Jan 1 09:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c79f5d106cea44875eb97007a868c31609819ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:ec:11:17:81:0f:23:59:34:83:8e:de:9d:
e3:0b:95:ef:9c:e1:51:e3:04:54:97:d6:26:a1:e7:
4b:d0:e9:db:fb:45:78:d1:31:2a:cf:12:44:93:58:
70:62:68:24:de:1d:f7:e4:1f:b0:59:12:d2:88:5d:
8f:76:c6:fe:1e:13:05:07:4c:6b:4b:c4:b8:c6:e1:
7a:c6:73:4f:e1:91:3e:28:d3:7d:de:24:05:1a:f4:
36:19:5a:a3:37:c6:36:20:88:8b:09:62:83:b5:56:
2d:24:97:87:aa:cc:3e:2c:c3:50:f1:38:e0:96:00:
20:c5:75:d7:b7:0c:f6:aa:72:00:86:f6:34:dc:a1:
ab:00:85:c1:25:4b:aa:29:49:fe:82:81:f3:c1:01:
34:79:3a:52:03:18:2c:88:f5:0d:86:f9:b3:ac:c3:
b0:df:7c:0b:38:67:e4:30:c6:54:35:84:85:5b:7e:
88:f5:77:45:e3:ab:2f:60:e0:0e:a0:03:dc:a6:bb:
34:69:7d:bf:16:cb:db:90:12:10:fb:6c:3d:99:9a:
3a:16:2a:09:4e:55:51:20:76:ee:a1:ad:8e:7a:22:
6f:eb:a1:65:4c:40:01:fb:f7:58:23:be:be:9e:cd:
dc:ae:80:3b:08:10:65:1d:c6:e9:b5:e9:94:6b:da:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9F:5D:10:6C:EA:44:87:5E:B9:70:07:A8:68:C3:16:09:81:9F:F0
X509v3 Authority Key Identifier:
keyid:FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/x59dEGzqRIdeuXAHqGjDFgmBn_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.200.0/23
IPv6:
2001:67c:1160::/48
2a0e:bf00::/31
Signature Algorithm: sha256WithRSAEncryption
45:9b:35:47:69:f7:19:46:b2:f4:ee:91:55:6b:c6:c2:ad:c0:
7a:98:4e:11:03:7a:b5:d7:46:73:d8:3f:a9:91:8e:d5:07:8f:
ef:87:83:20:97:09:7f:fa:18:39:de:45:13:66:50:17:08:9a:
89:51:ee:0b:a7:12:27:c0:f2:9c:18:b2:f5:e7:d3:43:f5:b4:
7b:42:43:7c:a8:e5:d9:3d:4b:8a:8b:27:23:19:dc:94:f6:58:
7a:05:ec:7d:33:c5:f8:dd:e1:f9:8e:86:f5:fb:83:75:78:c0:
b5:fc:3c:3a:af:fe:a8:b6:3f:0e:1e:23:14:7d:18:93:0c:ca:
b8:52:f5:38:4a:3b:c9:9d:20:d3:8a:e0:33:0b:9a:e9:a8:cc:
fe:00:8f:24:97:4b:48:d4:86:7a:ba:4e:81:b5:5c:33:79:ac:
89:b3:34:e2:8d:28:c4:89:e4:b7:2a:8b:7a:52:ec:39:85:4b:
ba:a5:f0:ae:95:7e:84:9f:85:cc:5d:af:ee:b6:3a:a4:d6:40:
6c:cb:e6:c7:3a:4d:cf:e2:84:ba:9b:c7:c6:22:12:4f:c8:fb:
b9:31:9f:b3:00:0a:20:3c:2e:28:89:3d:cc:7d:0b:5e:e3:3d:
14:e2:04:b4:8c:6e:aa:92:71:e0:f3:1f:29:67:41:72:16:fe:
4d:86:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net