Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/9ToD20b6iqy8XEw15yelURLrVmE.roa
File: 9ToD20b6iqy8XEw15yelURLrVmE.roa (raw, json)
Hash identifier: 1b2lL+p2IK7feAuvQzr5TsBq5GLOoqj1yj3w2lmHToo=
Subject key identifier: F5:3A:03:DB:46:FA:8A:AC:BC:5C:4C:35:E7:27:A5:51:12:EB:56:61
Certificate issuer: /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial: 0188716A530A44A6235BC074DBC554314053
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/9ToD20b6iqy8XEw15yelURLrVmE.roa
Signing time: Wed 31 May 2023 10:46:13 +0000
ROA not before: Wed 31 May 2023 10:46:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 89.23.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:6a:53:0a:44:a6:23:5b:c0:74:db:c5:54:31:40:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Validity
Not Before: May 31 10:46:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f53a03db46fa8aacbc5c4c35e727a55112eb5661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:37:11:74:d4:b4:d8:bf:6d:e4:2e:56:0e:
89:61:3d:69:d0:d2:a7:d2:e0:c4:70:c2:45:d7:47:
df:e2:80:9c:e6:4d:65:20:7f:fb:14:ff:60:a4:de:
5b:a4:1d:c5:ef:17:19:37:93:83:8c:ea:3c:14:45:
44:cc:60:7e:a6:a7:c1:3f:ac:57:09:27:3a:44:ea:
e3:15:1b:4f:e6:5b:c9:32:34:d5:32:2f:d1:e9:48:
4b:f6:22:2c:87:6a:4e:ff:c5:e3:35:48:e2:25:5e:
8c:8f:1b:4c:96:b7:8b:e7:b6:09:1e:c3:cb:26:4e:
e2:9c:b1:38:1f:64:78:52:84:00:0a:74:19:04:f1:
75:01:de:1d:42:87:38:31:ee:92:d5:40:6a:61:e5:
6a:31:84:c6:ab:52:fa:75:39:96:48:a3:44:2f:0b:
0d:8a:d4:ea:d2:c2:52:02:1b:a8:d5:61:cc:8c:0b:
2b:47:f0:4c:b5:3d:80:5b:ab:9b:3f:bd:97:fb:b7:
1d:cf:f6:3e:ff:dd:8a:ca:51:63:53:a7:b2:6f:5d:
e2:17:a0:c9:cb:c2:86:25:8a:fe:06:72:fb:bd:32:
93:de:c9:54:4e:51:c1:1a:e7:0f:e1:48:57:b0:90:
85:01:ae:b9:19:34:23:b1:c2:a4:40:3f:d2:5f:a4:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:03:DB:46:FA:8A:AC:BC:5C:4C:35:E7:27:A5:51:12:EB:56:61
X509v3 Authority Key Identifier:
keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/9ToD20b6iqy8XEw15yelURLrVmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.76.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:53:fe:6d:0a:f5:b8:4d:5d:ad:4f:23:af:ad:d2:43:31:dd:
02:fe:19:ed:5c:1c:b9:fb:b5:5e:bd:dc:ca:90:96:14:db:ec:
61:60:85:f7:dc:15:98:63:cf:e0:80:3c:2d:0e:5e:50:83:74:
08:fe:de:d8:ff:5f:36:ca:14:41:06:62:e9:49:fc:c0:bf:ae:
63:97:6b:e3:61:bd:49:46:29:2c:5e:00:5d:3c:b7:88:06:83:
19:db:69:63:f4:ee:6d:e1:e9:13:4c:c0:33:03:ff:6c:79:0e:
b0:f0:f6:bb:80:5d:5d:6e:a4:fa:e0:9a:aa:73:86:10:3b:c8:
57:86:7a:3c:26:6d:c9:21:e0:15:58:a9:a3:04:9d:7f:1f:8e:
92:f0:51:79:43:0f:d3:d1:13:0a:12:ed:83:94:b5:92:aa:0f:
bb:1b:24:9b:53:82:ad:5c:76:3b:f5:b2:f6:9d:5f:1c:fc:e4:
5d:05:2f:1c:92:75:35:36:e0:f6:b0:07:7a:1d:27:94:6c:7f:
5e:c8:a4:de:14:af:ca:48:6d:12:52:a4:d4:42:44:14:f0:7c:
56:3e:fc:b0:02:77:23:d5:2a:58:cb:00:50:50:04:6f:d3:7e:
0c:ea:41:1b:8c:b1:d2:84:2c:f0:1c:1c:cc:54:e0:12:28:93:
fd:53:74:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:03 2023 by rpki-client on console-ams.rpki-client.org