Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ZvXI2ELQfTIAMBLuSkLwRYqPKbE.roa
File: ZvXI2ELQfTIAMBLuSkLwRYqPKbE.roa (raw, json)
Hash identifier: BX1pIVmwFnlinQGoxdXt+fVNq0ywvnaFOscvc6WR32Q=
Subject key identifier: 66:F5:C8:D8:42:D0:7D:32:00:30:12:EE:4A:42:F0:45:8A:8F:29:B1
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 01924D1F1143C4ED0203E76D49978B7DFE9D
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ZvXI2ELQfTIAMBLuSkLwRYqPKbE.roa
Signing time: Wed 02 Oct 2024 12:05:34 +0000
ROA not before: Wed 02 Oct 2024 12:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 45.112.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4d:1f:11:43:c4:ed:02:03:e7:6d:49:97:8b:7d:fe:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Oct 2 12:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66f5c8d842d07d32003012ee4a42f0458a8f29b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:d6:fd:ef:cc:3c:bb:c2:47:3e:c0:4d:c0:
4b:eb:ff:11:ad:bc:f6:16:2e:d5:63:d3:29:7f:88:
d2:a9:ba:79:d2:2f:f5:5a:a9:84:b1:23:8a:70:0e:
97:39:d7:c0:44:56:87:fb:97:a8:96:cd:56:76:66:
2d:60:51:0f:12:5e:9f:e1:6d:93:b0:3e:5a:b4:d9:
95:52:8a:7c:4c:f2:58:49:3b:16:48:b3:c1:7c:46:
d8:18:91:a4:9f:b0:77:6f:14:6c:e6:fd:f7:a0:8a:
95:b7:4f:5c:e0:fd:6c:34:8d:d4:1d:54:16:7a:a7:
0b:f2:66:bb:72:24:d8:81:30:8a:d1:96:4b:cb:a1:
3b:db:dc:f2:0b:57:0f:a5:a2:2d:1c:f5:51:ee:27:
68:76:81:89:f6:be:e9:11:bc:b3:e1:4f:55:d1:b9:
27:92:31:88:c3:da:f3:29:1f:86:c6:bd:cb:f3:45:
19:12:d5:90:33:36:34:1a:c8:9d:42:e8:c5:64:de:
ff:e1:7f:99:fd:96:55:53:eb:f6:e6:d3:0e:6a:73:
b6:ee:e8:90:fe:99:0b:88:0a:1c:b8:b6:f1:e0:b5:
f1:b0:de:aa:8a:28:8d:e4:64:d9:dd:12:c0:a9:80:
ac:7e:7c:19:b6:cc:ec:4f:17:25:be:4d:4f:60:70:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F5:C8:D8:42:D0:7D:32:00:30:12:EE:4A:42:F0:45:8A:8F:29:B1
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/ZvXI2ELQfTIAMBLuSkLwRYqPKbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.195.0/24
Signature Algorithm: sha256WithRSAEncryption
71:71:30:b0:1b:c6:83:12:d7:06:e7:c8:60:a2:3c:db:82:fc:
8e:91:62:a3:38:59:41:f1:e5:fa:af:ac:59:05:17:77:d0:df:
59:4b:8c:ee:34:e1:20:03:3a:20:93:58:51:81:52:00:f3:63:
c5:67:92:18:63:d3:17:84:91:e7:c1:d6:09:95:06:ef:a4:24:
e8:5d:06:d8:7e:b1:37:c8:88:de:fd:85:d6:88:50:b8:a8:0d:
b6:94:6b:aa:3c:56:92:c8:50:8e:87:f2:ae:42:c3:9c:91:4a:
0e:2a:43:38:53:b8:af:9c:25:bb:bc:6f:3b:15:7a:ca:53:6f:
9e:aa:dc:93:aa:2d:aa:4f:df:68:c8:4d:af:78:44:f4:0f:be:
0a:b1:85:5a:fc:ef:f4:32:f0:a0:ce:be:7c:8c:81:db:b3:27:
a8:fd:5c:59:ca:99:ea:b9:0f:6e:b9:f6:70:d3:4a:32:ae:7e:
32:c2:c4:34:b5:4d:33:c0:a5:af:4c:cb:fc:05:75:eb:24:33:
f7:42:92:3d:36:5d:cb:47:00:c5:fb:39:f5:ca:f5:a9:06:ed:
bc:97:bc:49:66:b2:1d:33:46:91:7c:b8:9a:3a:1d:c3:b7:98:
58:38:90:7e:96:f2:a9:6b:78:83:5d:76:8c:4b:66:38:9b:09:
5e:7e:e3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:59 2024 by rpki-client on console.sobornost.net