Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/TGFQUm3YOMd3I2H5r6AUBnI2yNA.roa
File: TGFQUm3YOMd3I2H5r6AUBnI2yNA.roa (raw, json)
Hash identifier: U2LZ7XA3NQnEUYrw7zqIdQWz2VH4WC1VxJceeUyiEOE=
Subject key identifier: 4C:61:50:52:6D:D8:38:C7:77:23:61:F9:AF:A0:14:06:72:36:C8:D0
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 01936CE642AF4E1A95380FA897E4C6AE156D
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/TGFQUm3YOMd3I2H5r6AUBnI2yNA.roa
Signing time: Wed 27 Nov 2024 09:14:09 +0000
ROA not before: Wed 27 Nov 2024 09:14:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42156
IP address blocks: 45.83.172.0/22 maxlen: 22
45.83.172.0/23 maxlen: 23
45.83.174.0/24 maxlen: 24
45.83.175.0/24 maxlen: 24
45.143.60.0/24 maxlen: 24
45.143.61.0/24 maxlen: 24
45.143.62.0/23 maxlen: 23
69.48.159.0/24 maxlen: 24
185.161.188.0/24 maxlen: 24
185.251.180.0/24 maxlen: 24
2a0e:8480::/29 maxlen: 29
2a0e:e2c0::/29 maxlen: 29
2a0e:e2c1::/32 maxlen: 32
2a0e:e2c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6c:e6:42:af:4e:1a:95:38:0f:a8:97:e4:c6:ae:15:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Nov 27 09:14:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c6150526dd838c7772361f9afa014067236c8d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:14:9d:1d:2a:8a:4b:57:1c:09:6f:49:a0:
cf:65:22:76:1d:3e:37:fb:ad:5a:c6:dd:28:59:bf:
49:f1:8a:09:76:89:d4:4c:7e:2e:da:13:6d:f8:66:
59:6f:6e:e3:9f:39:3f:a5:3e:99:ad:8a:a1:89:5e:
b4:ea:7d:63:ad:b5:01:a2:93:fd:2e:19:2c:c0:95:
5b:43:af:14:56:05:bf:1d:69:5e:93:8a:74:bb:94:
e4:5a:15:03:6e:44:16:08:c3:d1:f7:6e:13:f6:35:
4c:0d:4b:09:37:0a:c2:99:b6:03:f5:31:01:40:6b:
2e:14:c6:f3:a8:aa:f1:6a:47:4a:d9:94:44:7d:0a:
cf:0b:80:61:1f:70:ee:23:6f:bf:65:ab:f5:5c:a3:
22:1f:73:f6:3a:89:19:72:c6:6e:04:1c:e3:62:59:
e4:2f:e0:c4:27:17:11:06:f0:49:ca:26:a1:cb:71:
5c:3f:c4:9e:59:1e:50:73:b9:46:7b:78:84:f1:fb:
71:d1:02:0f:b8:c0:56:72:36:30:24:4e:9e:54:df:
d6:cb:99:9b:13:6a:12:f1:c9:4f:d5:87:77:85:d9:
78:ff:81:f9:e4:fe:cd:fb:67:30:14:72:f1:0b:b6:
ce:1b:1e:65:9e:e2:86:0d:2f:62:69:d5:1b:12:8b:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:61:50:52:6D:D8:38:C7:77:23:61:F9:AF:A0:14:06:72:36:C8:D0
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/TGFQUm3YOMd3I2H5r6AUBnI2yNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.172.0/22
45.143.60.0/22
69.48.159.0/24
185.161.188.0/24
185.251.180.0/24
IPv6:
2a0e:8480::/29
2a0e:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:6d:22:5c:a8:59:9b:69:ee:9a:b5:73:7c:4c:e4:c7:27:32:
53:c2:d6:22:37:c9:93:9e:df:2a:d6:f3:52:6a:bb:bb:e7:f1:
d3:70:32:4f:63:1d:8c:cd:5f:33:f6:26:76:bc:e2:64:dc:93:
5a:6d:5a:93:06:a5:df:6a:68:9a:9f:92:16:b2:a9:49:99:d9:
49:64:92:87:af:04:7a:44:9c:05:5d:56:cf:ad:f0:9a:3b:53:
dc:49:d6:34:79:67:6d:84:66:d8:89:03:a3:62:39:64:e0:2f:
14:fa:b2:90:67:c6:b6:96:9f:47:1a:a2:c3:bd:55:14:43:13:
3f:7a:31:50:b9:e8:3e:75:48:19:ba:16:a5:31:bd:42:2b:dd:
73:41:64:87:77:3b:65:7b:e9:b7:da:e3:c1:40:04:d3:ca:80:
db:4e:7f:b2:16:99:aa:64:07:88:52:d0:fa:fa:97:f9:b9:34:
cd:f5:8e:12:9a:ba:f7:6d:40:da:83:42:7b:98:92:ed:67:1a:
22:2d:89:78:1c:fb:63:0a:5e:d4:53:01:c9:a3:4a:c3:24:e1:
8c:96:a6:18:32:82:5f:ab:1a:fe:1c:50:6f:40:7b:66:83:cd:
1c:64:8a:a1:87:4b:f2:2c:a4:02:2c:d9:87:22:3b:cc:00:ed:
77:d0:97:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:25 2024 by rpki-client on console.sobornost.net