Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/UUjgh9IXnTkgBZbbI_DBh0A_FVQ.roa
File: UUjgh9IXnTkgBZbbI_DBh0A_FVQ.roa (raw, json)
Hash identifier: GduOTN3XMpAjefEYnotRniU6q35RIQjQnSlGowsGdsk=
Subject key identifier: 51:48:E0:87:D2:17:9D:39:20:05:96:DB:23:F0:C1:87:40:3F:15:54
Certificate issuer: /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial: 0188716A4F58923FC3759A9037DEE1475E0C
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/UUjgh9IXnTkgBZbbI_DBh0A_FVQ.roa
Signing time: Wed 31 May 2023 10:46:12 +0000
ROA not before: Wed 31 May 2023 10:46:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199545
IP address blocks: 89.23.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:6a:4f:58:92:3f:c3:75:9a:90:37:de:e1:47:5e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Validity
Not Before: May 31 10:46:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5148e087d2179d39200596db23f0c187403f1554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:e4:0e:c9:d6:49:00:1c:7f:2f:cd:75:c2:
24:8d:ea:1e:ff:9f:8a:ac:fe:99:38:02:a4:eb:d8:
7c:cd:3e:33:28:c1:0d:8a:1c:57:51:88:88:88:03:
a3:ef:ff:ba:7b:f0:ad:43:98:a1:3f:69:dc:16:dd:
af:4f:0a:17:37:63:f8:0d:f1:df:7d:22:5c:cb:43:
f2:d5:bd:f7:fb:44:a5:aa:41:20:48:f2:ed:61:76:
cb:a2:f9:26:e8:8d:8e:b7:2a:0c:85:c5:fd:90:75:
07:fc:1b:50:8d:f7:45:a3:c3:b2:74:9b:eb:a6:47:
4a:75:ed:c4:92:75:64:f0:29:97:6e:00:cb:e9:c6:
ed:77:7f:41:6a:b0:83:ed:69:63:1c:db:fc:86:5d:
6a:a8:58:96:34:fd:5b:ef:26:df:f0:2d:ac:34:9d:
73:70:cb:d7:d0:4f:35:ac:d9:21:72:dc:71:bb:a8:
cc:ab:5a:ca:50:ae:89:8a:c9:17:f1:54:f4:e9:c5:
75:d7:c8:66:f8:b5:53:a0:c0:16:11:2e:f8:9b:0b:
3f:ad:7f:da:20:06:46:9d:e6:25:d6:4e:48:c5:19:
07:56:0e:65:2b:59:3e:3c:5f:c1:dd:58:2a:ff:3a:
d4:28:02:3d:b1:73:4c:2c:a1:03:2a:ec:e6:b5:c1:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:E0:87:D2:17:9D:39:20:05:96:DB:23:F0:C1:87:40:3F:15:54
X509v3 Authority Key Identifier:
keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/UUjgh9IXnTkgBZbbI_DBh0A_FVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.86.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:30:f2:55:f7:36:14:5e:16:36:e6:5f:8d:f1:35:69:c9:a5:
93:ed:37:3b:18:23:9b:1c:af:c9:ae:21:d9:93:3d:d6:82:f0:
9c:a9:26:99:6f:56:0a:d7:02:7b:06:b7:67:5e:17:77:cf:1a:
3b:e8:91:e7:27:1f:58:a9:07:a7:c3:86:6b:33:8d:fe:8f:f1:
65:99:5c:c9:ae:4c:50:53:9f:ec:98:4d:9a:9b:ec:d4:6c:3b:
bb:1a:db:94:d7:4b:cd:d6:9d:4e:af:f1:a2:76:f9:ca:5c:d3:
af:80:ae:c7:82:9e:d6:4e:fb:d6:a5:5a:2d:d0:d5:fa:c7:bb:
0a:c8:66:ad:9b:86:ee:4e:85:9a:e6:ad:8c:70:fe:dd:7d:0b:
d0:11:f7:15:c9:be:64:36:16:2b:b1:79:5e:7b:9d:7b:30:9a:
b2:3c:7a:52:69:48:79:34:63:f9:2a:f4:61:86:91:fc:f3:7e:
24:00:60:54:2d:b0:d6:79:ae:d7:87:e3:e6:e1:ce:f5:95:20:
bc:bb:be:a4:df:b0:13:7b:66:94:6d:1a:8d:83:b3:13:a1:76:
9f:93:c9:ab:e6:5d:18:ad:06:91:95:7c:e0:20:ac:19:94:76:
95:5d:6e:5b:b5:06:15:70:26:3b:d5:06:10:66:fa:85:82:7e:
86:af:54:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:14 2023 by rpki-client on console-fra.rpki-client.org