Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/jv72UN3pnsi2Xdcz4TlC_44qrfI.roa
File: jv72UN3pnsi2Xdcz4TlC_44qrfI.roa (raw, json)
Hash identifier: e0xBbMIpABoIilifngdNTwfpLAtwOWR+Xvd9RfvbSF0=
Subject key identifier: 8E:FE:F6:50:DD:E9:9E:C8:B6:5D:D7:33:E1:39:42:FF:8E:2A:AD:F2
Certificate issuer: /CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Certificate serial: 0184098A1D25C4317D9338ED430EF01E14A5
Authority key identifier: B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/jv72UN3pnsi2Xdcz4TlC_44qrfI.roa
Signing time: Mon 24 Oct 2022 10:29:17 +0000
ROA not before: Mon 24 Oct 2022 10:29:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.84.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:09:8a:1d:25:c4:31:7d:93:38:ed:43:0e:f0:1e:14:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Validity
Not Before: Oct 24 10:29:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8efef650dde99ec8b65dd733e13942ff8e2aadf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:32:74:25:09:45:61:43:90:17:bd:32:6c:
11:f4:90:14:20:e0:63:da:8a:f6:5b:41:c1:19:e1:
21:4f:94:24:70:13:f4:ba:39:c6:3f:64:99:d5:4e:
f5:80:8f:d1:59:8e:28:de:9e:41:3c:8d:29:8e:61:
ca:02:59:1a:50:8e:1a:49:eb:c3:6e:3c:89:7d:02:
de:82:58:b3:68:e6:da:3a:6c:0c:c4:90:ed:47:a2:
56:00:12:24:db:d9:3e:f3:da:02:41:52:25:de:62:
be:42:e8:25:0d:35:91:96:1b:95:01:70:19:e3:1b:
b9:5a:e7:ec:21:10:da:d8:a4:b8:57:63:cb:75:fd:
b2:5c:6f:b0:c3:c7:ba:7d:57:d8:2f:6a:70:bb:bd:
e1:d3:b3:0d:6c:b8:a7:bc:e5:3b:ad:1c:b0:8d:a1:
33:ee:79:ae:b2:3d:1b:39:16:ba:2c:be:0b:32:04:
c0:47:04:a2:95:a9:ec:9f:bf:e1:12:99:8a:52:a0:
60:e5:27:7f:18:d7:ee:ed:ec:43:86:91:9d:80:4c:
47:a6:ec:2a:46:b9:da:57:b8:73:e7:33:88:f7:c8:
54:9c:e4:38:cf:13:68:7b:91:96:a5:87:10:fd:1b:
2d:09:63:e6:24:fb:a1:94:e5:14:be:29:2e:7d:f1:
c9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FE:F6:50:DD:E9:9E:C8:B6:5D:D7:33:E1:39:42:FF:8E:2A:AD:F2
X509v3 Authority Key Identifier:
keyid:B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/jv72UN3pnsi2Xdcz4TlC_44qrfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/slabvQqepbcF-ruQIDruMVjYBVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ac:c0:6b:35:74:8c:a8:7c:fc:03:68:da:43:5d:63:eb:64:
4c:7f:c1:80:b9:d4:64:73:bb:a4:31:ce:79:bc:87:8c:f7:4f:
23:ed:be:29:08:d0:7d:55:25:17:2b:8d:3a:2e:46:4f:c7:6d:
7f:71:9b:6f:16:5c:95:15:da:68:51:66:a0:5a:00:7a:0a:bf:
98:26:74:24:15:0f:de:57:af:12:6f:91:c8:c5:bf:b5:27:c4:
a6:7a:56:e3:88:53:0e:48:fe:77:fc:63:21:ee:c8:f4:02:21:
78:89:f0:de:d9:e4:c4:11:55:b3:02:14:de:f7:bd:66:ff:35:
88:e7:21:56:a2:c4:27:2d:4b:85:09:cf:ff:4d:97:28:55:d9:
85:d7:56:61:7a:12:c1:b3:c5:ff:b2:21:76:eb:49:2a:dc:30:
0f:0f:ef:4e:28:a0:fc:6b:4f:61:97:17:aa:18:cf:17:e1:f3:
20:c3:c1:87:6e:ea:ba:78:de:b8:3a:24:8c:cf:6a:76:92:fd:
e7:d5:5b:aa:9c:b1:2a:d4:3b:d7:d5:ca:55:ec:9f:60:21:03:
a3:a4:8b:be:f3:c3:25:93:05:8b:34:79:68:97:18:28:88:95:
19:0d:f9:10:b2:41:2e:d2:05:7b:86:85:3a:e9:7a:c7:5e:a9:
da:61:9b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:53 2023 by rpki-client on console-fra.rpki-client.org