Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/52e6bc-d818-4d51-a87e-c0d752cbe6c5/1/EZl21R1Fyhf9SrEgJCOaBNqf1qY.roa
File: EZl21R1Fyhf9SrEgJCOaBNqf1qY.roa (raw, json)
Hash identifier: hYXa+rmUqDach0sopJLJ1Ekw6/NX+D98ZyF/WhCZxs4=
Subject key identifier: 11:99:76:D5:1D:45:CA:17:FD:4A:B1:20:24:23:9A:04:DA:9F:D6:A6
Certificate issuer: /CN=1a371cabaf0e1a9c9acbd8df2544a36a429e95ee
Certificate serial: 0184F647EF42FD0887DE420CBA2024FD517B
Authority key identifier: 1A:37:1C:AB:AF:0E:1A:9C:9A:CB:D8:DF:25:44:A3:6A:42:9E:95:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gjccq68OGpyay9jfJUSjakKele4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/52e6bc-d818-4d51-a87e-c0d752cbe6c5/1/EZl21R1Fyhf9SrEgJCOaBNqf1qY.roa
Signing time: Fri 09 Dec 2022 09:47:00 +0000
ROA not before: Fri 09 Dec 2022 09:47:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 89.36.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:47:ef:42:fd:08:87:de:42:0c:ba:20:24:fd:51:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a371cabaf0e1a9c9acbd8df2544a36a429e95ee
Validity
Not Before: Dec 9 09:47:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=119976d51d45ca17fd4ab12024239a04da9fd6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:21:8c:e7:e1:43:55:f5:b7:ef:89:84:6a:
da:0b:24:2d:c4:b5:1b:13:e2:ff:81:20:32:43:2a:
16:98:af:24:23:54:48:32:cc:b7:2b:40:0f:fa:e5:
ed:6f:6c:d2:5e:e3:04:99:eb:8e:e0:13:1b:ab:1c:
40:b3:91:e2:3f:db:19:26:c3:ab:49:2b:5e:91:39:
31:76:2a:5f:b4:b8:bf:b9:34:16:d8:6c:23:e7:67:
01:b0:57:d0:e1:e0:99:52:72:e0:42:7a:99:b6:94:
1e:ae:96:ca:a9:22:77:c5:37:11:5e:9f:2a:25:a8:
a2:8f:8b:37:e2:f3:27:2b:c8:b3:8b:ae:2f:79:9b:
6e:b8:9d:30:5e:83:21:f8:04:19:7b:bd:f0:f0:68:
f3:95:53:07:ce:de:c7:fa:f0:31:ec:09:ff:b5:13:
39:26:bb:3a:af:26:e3:f5:d3:c6:f8:37:7c:95:11:
4b:27:35:5c:bc:68:40:28:5f:38:77:21:84:da:ce:
2b:af:0b:a8:a6:a2:a7:0e:32:ee:bb:53:63:d9:1f:
05:62:bb:f7:d8:82:91:e0:0b:06:3f:0f:62:2a:99:
77:1c:7b:ea:08:e7:df:0e:5b:64:6c:7a:cf:9f:4f:
f0:8e:52:3b:40:06:73:4b:9a:28:77:a2:17:e4:1e:
76:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:99:76:D5:1D:45:CA:17:FD:4A:B1:20:24:23:9A:04:DA:9F:D6:A6
X509v3 Authority Key Identifier:
keyid:1A:37:1C:AB:AF:0E:1A:9C:9A:CB:D8:DF:25:44:A3:6A:42:9E:95:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjccq68OGpyay9jfJUSjakKele4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/52e6bc-d818-4d51-a87e-c0d752cbe6c5/1/EZl21R1Fyhf9SrEgJCOaBNqf1qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/52e6bc-d818-4d51-a87e-c0d752cbe6c5/1/Gjccq68OGpyay9jfJUSjakKele4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.45.0/24
Signature Algorithm: sha256WithRSAEncryption
25:49:51:ef:5c:e6:07:44:43:be:29:ef:6e:bc:47:d0:ee:d3:
59:66:f5:25:59:2b:d0:69:d3:de:bd:5c:0e:9f:b6:db:be:fd:
5a:62:6f:d4:b6:22:d1:ca:77:5f:57:be:d6:fc:5a:42:9d:3b:
12:24:3c:e1:46:90:c3:44:84:8f:0c:10:3f:f8:8c:93:c5:f6:
4d:f9:2d:c7:32:80:17:a2:a2:9e:ef:cd:2e:2f:4b:eb:5e:9f:
9a:94:39:57:b8:35:64:44:63:51:fd:74:94:aa:22:2d:d2:65:
fa:11:e0:d3:5a:9f:d7:9a:e8:8e:6f:d7:5e:45:93:2b:19:17:
5b:26:b8:2c:08:76:cb:bb:3e:9f:db:95:12:35:92:7b:42:6f:
45:f4:76:dd:23:81:18:33:c3:70:f8:68:7c:e6:0e:0b:36:12:
3d:c5:a8:d7:5f:2f:19:e2:d5:fe:ad:68:79:3a:db:94:37:36:
09:e3:23:3a:fe:d5:9d:7e:33:4e:54:fb:d3:9f:ae:ce:7a:0e:
67:25:a1:b5:83:b5:c7:e9:b8:1a:82:ea:28:81:2a:87:96:33:
50:e4:ac:6a:12:02:0e:41:b1:11:11:a2:e1:3f:8a:d1:a1:40:
c6:4e:eb:f6:5b:d6:c2:c5:46:4b:0a:d3:6b:9f:d9:72:48:21:
eb:bd:07:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:49 2023 by rpki-client on console-ams.rpki-client.org