Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/625gXec-hDWF3mcyOx5kJPinap0.roa
File: 625gXec-hDWF3mcyOx5kJPinap0.roa (raw, json)
Hash identifier: EIG4qtMXipSgVgs/RmqND7vKPcn1Kp+5wNZQf/omB7Y=
Subject key identifier: EB:6E:60:5D:E7:3E:84:35:85:DE:67:32:3B:1E:64:24:F8:A7:6A:9D
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01857142ED45AC47BE1495E3539F5B4B4BA7
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/625gXec-hDWF3mcyOx5kJPinap0.roa
Signing time: Mon 02 Jan 2023 06:54:49 +0000
ROA not before: Mon 02 Jan 2023 06:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.13.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:ed:45:ac:47:be:14:95:e3:53:9f:5b:4b:4b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 2 06:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb6e605de73e843585de67323b1e6424f8a76a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cb:29:02:aa:aa:9c:f2:09:c6:4a:a9:0b:be:
89:08:8c:17:d2:ae:ff:14:19:14:2b:3b:de:f3:2d:
72:7d:b3:8d:b6:fe:a4:90:24:fe:97:b0:48:ee:73:
48:81:e7:39:7a:30:0e:6a:45:2b:c7:f0:e0:30:be:
cb:35:fd:1e:4c:5a:c4:ad:a2:14:a7:1e:cf:be:02:
d5:82:7d:f8:ad:be:fc:3b:73:14:cf:a7:ca:45:17:
6c:cf:2d:f0:6d:49:28:d3:ce:9e:67:57:cd:1a:cb:
0c:91:ce:09:47:a0:0d:f9:e2:6b:25:05:c6:c6:b6:
e3:32:03:20:db:a1:67:9e:a2:a8:70:33:d5:2f:42:
b9:06:35:a5:80:a9:6c:74:1e:a0:c3:54:eb:ce:75:
c7:b7:79:78:e4:15:c4:20:65:19:fa:60:6d:73:a8:
16:e9:9c:20:b5:05:eb:2a:7d:e9:fa:96:84:77:ea:
ca:d7:93:1d:c0:b1:40:a5:01:d1:e6:09:1d:f9:43:
9b:60:c2:81:17:cb:4b:6e:eb:0b:1b:27:e2:00:c6:
52:6f:23:1e:10:ca:4f:93:d4:4f:5d:85:93:f5:f7:
16:cb:84:8e:2d:4e:a4:af:4a:1d:bf:bb:18:22:6a:
de:12:6d:3d:59:16:5d:42:6c:8b:92:1f:08:85:18:
b1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6E:60:5D:E7:3E:84:35:85:DE:67:32:3B:1E:64:24:F8:A7:6A:9D
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/625gXec-hDWF3mcyOx5kJPinap0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.148.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:80:19:9f:ad:cb:d1:64:1c:87:cb:93:c5:af:4a:33:cf:0c:
3e:9a:f3:d8:89:9d:c7:d8:85:5d:9e:82:84:b3:73:1f:ca:ff:
83:f4:ef:69:56:fd:65:c0:2d:1b:7d:d5:4e:be:1e:bc:ae:28:
ad:8a:4b:89:1a:2b:4f:6b:92:73:5c:02:3b:28:e5:15:66:dd:
48:80:49:b0:de:03:e7:ef:c2:09:cf:d1:39:79:5c:47:e7:be:
c6:5e:9c:82:ba:21:4e:45:d7:ec:1c:00:0b:c5:53:02:2d:5e:
3c:3f:cd:d9:9f:c8:0e:92:bc:6e:bf:4b:91:d8:37:19:a8:3d:
a9:2f:1a:7a:fe:0e:18:18:5a:06:e1:7b:6b:cc:3c:b7:b8:b6:
49:96:d3:b2:8c:bd:32:d6:9d:92:da:94:09:c7:28:aa:aa:1a:
b0:b1:55:c2:61:4f:18:30:11:e3:cd:70:03:97:1d:dc:d9:47:
ae:3d:fa:3b:ec:bd:53:26:d1:2f:f5:86:49:55:42:b8:91:75:
66:ec:72:45:2e:87:0a:ef:4a:87:d5:fa:47:3c:60:0e:33:9c:
b2:60:fc:0e:70:3c:db:23:fa:2b:b9:36:82:5e:6d:38:2f:35:
0e:db:9e:fa:be:16:9b:98:07:8c:35:69:3a:52:05:99:1d:aa:
ff:39:ef:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:29 2023 by rpki-client on console.sobornost.net