Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a48d54-9996-406d-b81b-d9cc3fd6ff60/1/0d_-NHAmFsCKWx3r8N2YDnnLXl0.roa
File: 0d_-NHAmFsCKWx3r8N2YDnnLXl0.roa (raw, json)
Hash identifier: b4vivqtzT1DsO/NaDJbm2KaiNomaz12zk94X5OTdaaI=
Subject key identifier: D1:DF:FE:34:70:26:16:C0:8A:5B:1D:EB:F0:DD:98:0E:79:CB:5E:5D
Certificate issuer: /CN=9cb9ce3e85eba7753b36e0d24510ccae8aa2b377
Certificate serial: 01823EA825D763B58DF35CDE5FD8CC0A3C5A
Authority key identifier: 9C:B9:CE:3E:85:EB:A7:75:3B:36:E0:D2:45:10:CC:AE:8A:A2:B3:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLnOPoXrp3U7NuDSRRDMroqis3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a48d54-9996-406d-b81b-d9cc3fd6ff60/1/0d_-NHAmFsCKWx3r8N2YDnnLXl0.roa
Signing time: Wed 27 Jul 2022 07:56:23 +0000
ROA not before: Wed 27 Jul 2022 07:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60428
IP address blocks: 185.130.89.0/24 maxlen: 24
2a0e:a5c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3e:a8:25:d7:63:b5:8d:f3:5c:de:5f:d8:cc:0a:3c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb9ce3e85eba7753b36e0d24510ccae8aa2b377
Validity
Not Before: Jul 27 07:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1dffe34702616c08a5b1debf0dd980e79cb5e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:74:0d:1b:49:e5:1d:66:fd:b7:9b:93:a7:1d:
74:a2:06:24:b5:22:2e:dd:df:0d:3d:21:e5:2a:5a:
31:8e:1f:ed:5d:5a:02:73:3c:d2:5b:d8:9e:eb:37:
c4:eb:1c:61:bd:5d:64:7e:73:86:c3:6b:6d:1b:76:
69:53:3d:d7:9c:4c:a2:cd:01:0d:2b:0c:fc:63:52:
97:96:23:1b:0a:5a:f9:44:ec:f9:03:43:d2:1b:d8:
b6:f9:d5:b5:63:4a:e7:4e:05:72:c3:94:7e:56:15:
ec:12:90:45:9c:97:fd:a9:49:24:5c:c5:4e:61:c5:
cc:6f:10:7a:69:1f:31:2e:cc:0c:13:8a:df:a5:ef:
e6:6f:a4:44:4f:ed:64:6c:ea:59:e2:94:af:d8:8a:
1d:3b:ae:7f:37:fa:7a:4c:19:61:5c:f9:cb:a0:fe:
df:bc:cb:ad:fa:09:69:59:a8:56:f5:06:64:b1:df:
5e:fa:8c:a7:1a:4d:e4:bd:0c:39:d5:8a:44:91:e7:
9b:6f:cb:e2:29:64:5b:7c:fc:1a:e7:9b:5b:97:ef:
1e:63:44:42:10:23:c8:20:02:49:e7:ff:33:db:f1:
59:b9:c7:f4:ce:cc:05:d0:33:ed:07:72:89:44:aa:
a6:92:80:31:e7:e0:6a:7a:3e:5b:59:d7:1d:40:04:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DF:FE:34:70:26:16:C0:8A:5B:1D:EB:F0:DD:98:0E:79:CB:5E:5D
X509v3 Authority Key Identifier:
keyid:9C:B9:CE:3E:85:EB:A7:75:3B:36:E0:D2:45:10:CC:AE:8A:A2:B3:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLnOPoXrp3U7NuDSRRDMroqis3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a48d54-9996-406d-b81b-d9cc3fd6ff60/1/0d_-NHAmFsCKWx3r8N2YDnnLXl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a48d54-9996-406d-b81b-d9cc3fd6ff60/1/nLnOPoXrp3U7NuDSRRDMroqis3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.89.0/24
IPv6:
2a0e:a5c0::/48
Signature Algorithm: sha256WithRSAEncryption
47:08:cc:ad:32:4e:0c:09:b7:de:7b:c4:48:cd:c3:7d:b2:a8:
59:c4:99:6b:80:c5:42:a8:f4:4a:32:5e:34:63:85:df:4b:c2:
49:5e:78:3e:34:86:e7:83:59:70:3d:ed:f6:0b:f7:f0:a7:34:
22:39:a4:3d:fd:e1:b5:db:f5:93:74:43:04:af:57:bb:a5:32:
63:0b:28:13:79:0a:46:8e:9d:3e:4e:d7:38:02:09:e7:4d:e6:
a5:3d:15:5d:8e:8d:8a:c2:6e:d1:8f:5e:eb:20:11:26:f1:a2:
1b:93:c8:4d:85:f0:3d:56:b1:0f:65:1f:91:56:75:52:d8:0e:
9c:f2:d3:a6:bd:bb:d5:33:5f:f7:34:bf:36:b5:a4:85:40:03:
d6:9e:0e:74:d5:1f:fa:46:a6:6e:97:c8:57:a9:ec:9a:49:3c:
75:89:4c:3f:95:01:e1:28:ac:9f:0e:8e:1e:2e:46:97:13:e5:
4a:dc:b2:2f:0a:15:e0:af:84:60:b8:ca:1f:28:be:30:13:52:
5e:69:78:1d:5f:19:89:84:71:cf:2d:46:df:e1:6f:55:38:9a:
9a:3c:db:b1:de:0a:4b:57:60:86:73:66:a0:e3:3a:b4:da:43:
be:e8:64:ed:dc:c5:53:39:11:47:e0:99:87:86:aa:44:73:ee:
65:ed:8b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:48 2024 by rpki-client on console-fra.rpki-client.org