Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/ATVyo1RjWl1sd9zNcjqwU2m5fYM.roa
File: ATVyo1RjWl1sd9zNcjqwU2m5fYM.roa (raw, json)
Hash identifier: vOU4zcuwq/aQQE230/oZ8/aCJdp/VxHrZyoB8p6vO2s=
Subject key identifier: 01:35:72:A3:54:63:5A:5D:6C:77:DC:CD:72:3A:B0:53:69:B9:7D:83
Certificate issuer: /CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Certificate serial: 0474BF8B
Authority key identifier: CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/ATVyo1RjWl1sd9zNcjqwU2m5fYM.roa
Signing time: Sat 01 Jan 2022 13:58:36 +0000
ROA not before: Sat 01 Jan 2022 13:58:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 45.149.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74760075 (0x474bf8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Validity
Not Before: Jan 1 13:58:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=013572a354635a5d6c77dccd723ab05369b97d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:94:7d:1d:8f:2e:95:a6:34:a0:99:79:92:
73:d2:10:7f:4a:f7:d0:a9:29:92:b1:d8:14:2d:d3:
cd:7d:3c:9b:02:c5:94:dc:5c:11:33:61:d9:73:42:
10:fb:39:d1:3b:c6:fd:60:8f:89:80:6a:bf:cd:78:
9e:5e:4b:e0:ef:cb:fc:62:e4:4d:00:3c:fb:e0:9f:
07:c8:14:01:43:ff:02:ba:f2:2b:67:0e:f2:f9:bd:
02:b9:54:11:51:8f:bd:cf:4e:ff:1b:11:96:2e:20:
0f:20:e6:ff:b1:17:62:49:1e:4e:27:f5:c8:7e:1a:
9a:c2:52:a1:cc:d7:b6:bd:12:10:0e:9f:df:a3:6b:
06:cb:63:d1:72:d0:e0:b4:4e:84:e9:1a:fa:bf:ad:
b3:e0:98:37:0d:91:a2:7d:e7:97:5a:4d:30:78:b2:
59:75:a8:e8:6b:a3:15:10:ea:46:3a:6a:86:96:95:
92:39:05:2c:60:0a:02:cf:47:b9:95:cc:cc:ef:a5:
b6:54:09:8e:40:56:c4:ea:92:47:9d:ee:2b:ff:88:
d6:99:88:4e:bd:e6:47:bf:bb:6e:2a:c3:5e:63:ba:
14:62:fa:80:77:1f:02:46:59:b0:bd:b6:df:aa:e7:
3b:cf:41:d8:86:86:fc:78:3a:00:ef:7f:01:6b:50:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:35:72:A3:54:63:5A:5D:6C:77:DC:CD:72:3A:B0:53:69:B9:7D:83
X509v3 Authority Key Identifier:
keyid:CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/ATVyo1RjWl1sd9zNcjqwU2m5fYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/zv_2rlHqKmefdF_YzDmEMV5XKZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:c9:c2:64:3c:b5:5c:65:93:1c:05:e9:56:9e:9b:99:5d:af:
f7:34:86:f6:5c:00:ae:f5:67:a1:3c:f6:03:b3:41:32:dd:70:
68:89:b4:65:be:f9:79:f1:eb:23:7c:93:fc:fa:11:3a:e3:f8:
bf:5a:a3:68:58:23:6d:1d:0b:91:6a:e6:2f:e9:79:c8:88:07:
ea:64:d9:c0:bc:62:af:15:b5:5f:1b:c6:dc:12:61:b6:4d:1f:
83:05:f1:2f:d7:a3:08:4d:1d:bf:f3:45:79:40:df:25:d8:94:
d7:a9:5c:da:10:af:f2:13:f4:ff:0b:c7:67:25:80:44:ae:8b:
00:a9:9c:76:d9:9e:96:f1:3f:7c:94:ea:6a:a9:d7:36:2f:85:
dc:bc:9e:16:0c:dd:13:77:7d:fe:96:d3:23:fb:8f:1f:e3:16:
69:95:b2:02:5b:13:10:66:28:f1:3d:cd:e0:d4:81:52:b2:15:
4b:88:ee:40:72:bb:d0:f8:5e:0b:d7:5c:34:77:8a:2d:55:fb:
73:46:0a:86:98:f1:05:80:f7:38:06:bb:fe:dc:a5:2c:de:fe:
af:bd:40:a2:f5:2a:62:d3:76:9f:71:6e:f5:60:88:24:2f:ca:
0d:92:8e:2f:42:6d:20:d8:73:8e:b0:2d:0b:9f:31:84:7e:46:
0b:48:a5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net