Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/0NBUe25l47cjxZaB9fdRZDHdSTo.roa
File: 0NBUe25l47cjxZaB9fdRZDHdSTo.roa (raw, json)
Hash identifier: qGaqgsylpJvAfEBhl+TwSfAU6rGJ6gY2u5TsIzDkJ/c=
Subject key identifier: D0:D0:54:7B:6E:65:E3:B7:23:C5:96:81:F5:F7:51:64:31:DD:49:3A
Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial: 018FEE6FFD6348A9EBA6E4423BF0AA3765D8
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/0NBUe25l47cjxZaB9fdRZDHdSTo.roa
Signing time: Thu 06 Jun 2024 16:44:27 +0000
ROA not before: Thu 06 Jun 2024 16:44:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57255
IP address blocks: 45.88.4.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ee:6f:fd:63:48:a9:eb:a6:e4:42:3b:f0:aa:37:65:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Validity
Not Before: Jun 6 16:44:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0d0547b6e65e3b723c59681f5f7516431dd493a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:03:81:d2:d4:66:bc:84:c9:2e:39:22:84:
a5:75:ac:50:6e:93:5e:6f:bd:7f:cc:c0:4a:25:99:
6a:24:54:54:bc:19:bc:d3:9c:36:72:b9:90:02:9b:
87:52:e7:6e:6b:a6:86:fa:2e:59:2f:e0:af:11:4b:
4a:38:94:bb:c9:ac:03:a8:d0:ca:c6:fa:70:8d:f4:
d7:99:3c:5d:c4:cc:a1:dd:09:a0:b4:ec:a2:70:67:
a4:e4:95:18:75:90:3e:e3:19:0c:f5:f8:29:bc:92:
0a:f4:b4:61:64:ca:33:bf:24:a1:ed:27:f6:07:4c:
bd:97:c5:96:8b:8e:a7:91:90:6c:4f:e3:95:df:48:
fd:fc:f1:48:72:14:82:98:89:61:41:af:92:27:38:
a8:a6:96:07:69:8a:4b:63:15:38:ba:28:53:25:cf:
67:61:31:84:ed:a8:c0:7a:af:24:24:76:f5:d5:c8:
e5:84:37:3e:8e:aa:8c:07:bd:0f:f3:73:c5:f0:96:
ce:ac:d7:cc:62:8d:58:e6:e0:cc:7b:3c:9e:6a:3c:
9c:a7:c8:7d:8e:af:b2:e9:22:6f:88:ed:b8:29:f4:
fa:84:2c:41:e4:29:12:9b:5d:c7:53:f7:3f:d8:d6:
04:02:09:bd:98:cb:44:89:3e:b1:de:8b:c7:55:1b:
00:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D0:54:7B:6E:65:E3:B7:23:C5:96:81:F5:F7:51:64:31:DD:49:3A
X509v3 Authority Key Identifier:
keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/0NBUe25l47cjxZaB9fdRZDHdSTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.4.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1e:f1:d1:86:7c:be:96:d5:34:5b:f8:7d:d8:a7:fa:76:ec:
01:cb:58:0c:a0:01:61:26:8e:08:96:ec:09:c2:e8:3c:a8:b6:
83:48:51:19:b6:fb:bc:97:9a:2a:9e:fc:33:a7:cc:90:c9:d3:
17:e8:bf:2e:c0:79:98:56:07:d2:5d:c8:98:d1:2c:f7:26:4c:
d3:f6:88:c8:69:2e:ac:a6:5e:a2:2b:78:12:ba:a0:11:e2:91:
d8:cd:5d:8e:a7:2e:93:75:f0:54:bd:05:70:2d:76:b0:e6:3e:
43:88:73:5e:d5:6d:0a:f0:fc:7d:03:78:7c:52:82:a1:e4:67:
64:ee:eb:d3:41:85:f0:05:cf:68:21:46:4c:b9:a7:57:99:3e:
bf:dd:d7:07:0c:03:a2:b8:98:13:84:8f:70:9a:6a:73:00:88:
a5:b1:83:9c:b2:9a:a4:4d:f4:01:7c:49:e9:8e:b8:18:04:33:
6c:38:65:2c:2c:ba:c8:8c:f8:b6:cb:94:57:b3:4c:c1:f4:e5:
a4:fd:fa:fb:d5:db:d9:f5:2f:c3:ea:2b:b7:11:47:67:ed:b0:
11:a9:ed:74:20:e2:fe:69:1d:59:90:14:2c:ad:48:58:9b:4c:
3e:60:fc:6f:bc:4b:b4:45:fb:d4:06:21:a8:85:b8:7f:dd:ba:
cd:2a:ff:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 12:30:14 2024 by rpki-client on console.sobornost.net