Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/sbJmisa-LfKSyEjhqWyFjf9kows.roa
File: sbJmisa-LfKSyEjhqWyFjf9kows.roa (raw, json)
Hash identifier: ZVi7TxI6OiWSTOQ/QQ8OEdCoyb6jq39P5ewoRVaXQS4=
Subject key identifier: B1:B2:66:8A:C6:BE:2D:F2:92:C8:48:E1:A9:6C:85:8D:FF:64:A3:0B
Certificate issuer: /CN=d89ae0014a1462705eaf7e22642ed9b9987f9131
Certificate serial: 03A84A85
Authority key identifier: D8:9A:E0:01:4A:14:62:70:5E:AF:7E:22:64:2E:D9:B9:98:7F:91:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JrgAUoUYnBer34iZC7ZuZh_kTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/sbJmisa-LfKSyEjhqWyFjf9kows.roa
Signing time: Sat 01 Jan 2022 09:01:16 +0000
ROA not before: Sat 01 Jan 2022 09:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201814
IP address blocks: 91.223.3.0/24 maxlen: 24
193.34.212.0/22 maxlen: 22
195.3.222.0/24 maxlen: 24
195.3.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61360773 (0x3a84a85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d89ae0014a1462705eaf7e22642ed9b9987f9131
Validity
Not Before: Jan 1 09:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1b2668ac6be2df292c848e1a96c858dff64a30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:a1:25:f0:9f:25:1b:a5:d8:5d:10:1c:a6:
c6:f3:2f:e8:61:35:69:f4:4c:df:ef:8d:ff:d3:4b:
e6:69:03:7c:70:8a:38:3f:a6:5f:d1:79:ad:48:5f:
9e:4f:e2:28:77:1f:2a:76:97:03:89:be:e0:c0:19:
a3:0d:4f:de:46:03:cb:63:b7:e9:15:3c:1c:38:21:
97:98:6b:eb:75:a7:18:51:3e:0d:42:1f:01:3a:26:
07:13:5b:4e:17:b5:af:99:cd:b1:e4:99:40:a5:83:
b4:ad:92:8f:3d:fc:82:6d:ac:59:da:dc:f8:09:12:
f1:21:ee:d9:41:22:4d:45:5f:05:6f:98:6d:e7:18:
7f:e4:3e:f5:7d:8b:2d:08:32:bc:82:33:66:d8:1a:
c4:2b:23:e7:f1:e4:c1:ba:cc:0f:d2:f6:89:5c:2a:
5a:53:77:1c:94:90:70:f6:1f:ef:32:66:8f:68:f8:
25:9d:02:09:8c:a5:8d:07:76:8c:de:0f:cc:1e:dc:
96:3b:b1:16:2a:d4:28:71:61:fe:a5:ce:b3:19:9d:
5e:66:aa:98:94:8b:55:4a:a9:20:3f:d6:49:7a:3b:
06:b3:70:b0:7e:23:67:80:76:55:10:6a:d0:82:3c:
2c:cc:90:23:d8:be:80:70:1f:4d:03:57:a9:73:50:
06:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B2:66:8A:C6:BE:2D:F2:92:C8:48:E1:A9:6C:85:8D:FF:64:A3:0B
X509v3 Authority Key Identifier:
keyid:D8:9A:E0:01:4A:14:62:70:5E:AF:7E:22:64:2E:D9:B9:98:7F:91:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JrgAUoUYnBer34iZC7ZuZh_kTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/sbJmisa-LfKSyEjhqWyFjf9kows.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/10f8e7-fec8-4171-98db-ac2830bed56b/1/2JrgAUoUYnBer34iZC7ZuZh_kTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.3.0/24
193.34.212.0/22
195.3.220.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:38:03:d8:41:b0:73:bc:06:fc:8e:e1:18:a9:0b:7b:06:bf:
10:b4:a3:31:d8:a6:31:ac:27:28:70:ec:75:55:c3:49:6c:11:
6f:f2:3e:51:23:56:72:fb:57:af:80:1f:52:1e:f8:ad:61:78:
1a:cb:39:f8:df:c7:4f:e1:f1:99:40:b8:3f:e9:cc:1b:f8:5d:
16:aa:4b:94:51:89:39:a8:9c:7a:1c:ea:d2:f6:66:80:3c:e0:
5f:fb:78:e4:13:bc:ec:72:54:7c:d2:ed:e5:75:31:81:fa:83:
eb:a7:d5:37:f0:ec:96:c0:e9:06:f0:ca:69:3b:75:e4:9f:33:
23:dd:20:bf:89:8f:39:e4:cc:30:0f:b5:c7:1b:1b:bd:51:0d:
e4:4d:b8:be:90:ac:1b:3d:f4:83:d6:f8:2c:ee:61:db:fb:86:
a1:58:75:4a:8c:bd:d1:c8:e7:98:8b:36:f4:2f:06:fc:eb:b0:
e0:c1:81:ce:5a:84:68:38:4c:37:56:f1:87:dc:5e:92:7c:fa:
2d:63:b0:d0:42:ac:1b:b9:d6:9e:39:a7:99:af:14:a3:39:45:
69:24:8e:b2:69:20:d1:34:94:ab:af:a3:52:ea:b4:68:0c:3d:
25:5d:be:2c:3d:0d:46:f2:ba:9b:38:fc:a8:42:c5:c9:24:70:
46:b7:81:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:10 2024 by rpki-client on console-fra.rpki-client.org