Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a48d54-9996-406d-b81b-d9cc3fd6ff60/1/k8wQKrgpgsUyq8AMzDCio7SB8k0.roa
File: k8wQKrgpgsUyq8AMzDCio7SB8k0.roa (raw, json)
Hash identifier: 3q4U5StkInbQ5RhjDRnxhVenfZX3jYYiTwHT5ZZH/40=
Subject key identifier: 93:CC:10:2A:B8:29:82:C5:32:AB:C0:0C:CC:30:A2:A3:B4:81:F2:4D
Certificate issuer: /CN=9cb9ce3e85eba7753b36e0d24510ccae8aa2b377
Certificate serial: 0181CF3952F4C4B7AD76C6C6B26CFAF4DF12
Authority key identifier: 9C:B9:CE:3E:85:EB:A7:75:3B:36:E0:D2:45:10:CC:AE:8A:A2:B3:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLnOPoXrp3U7NuDSRRDMroqis3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a48d54-9996-406d-b81b-d9cc3fd6ff60/1/k8wQKrgpgsUyq8AMzDCio7SB8k0.roa
Signing time: Tue 05 Jul 2022 16:37:29 +0000
ROA not before: Tue 05 Jul 2022 16:37:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60428
IP address blocks: 185.130.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cf:39:52:f4:c4:b7:ad:76:c6:c6:b2:6c:fa:f4:df:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb9ce3e85eba7753b36e0d24510ccae8aa2b377
Validity
Not Before: Jul 5 16:37:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93cc102ab82982c532abc00ccc30a2a3b481f24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:ee:2f:04:a2:23:80:05:9a:06:aa:af:1d:
ff:52:a5:9d:fd:3b:9d:47:75:66:6c:86:f7:63:fd:
8c:98:de:76:b5:3c:0d:7e:59:dd:a3:00:16:b2:0f:
bc:af:6b:07:2a:66:4a:bd:18:6d:32:b7:ee:54:d7:
0a:b6:eb:be:44:0a:32:d0:6d:b5:d5:58:c2:c6:48:
64:75:35:7c:63:d3:56:4f:c9:b4:5c:17:de:81:34:
09:29:2d:f8:d9:c1:f8:e4:e1:e8:46:ce:c3:5b:92:
a7:f9:8e:e3:3c:5b:88:b4:be:51:df:ac:48:07:74:
f4:cb:4e:47:9d:5d:8d:e7:d3:72:af:e8:17:ef:0e:
2e:f8:3f:b0:ac:75:69:af:2b:b6:99:1f:a9:15:63:
dd:47:d6:a7:85:9b:45:a5:51:f7:10:82:46:d9:63:
9a:f6:ca:12:2b:96:c5:7d:5a:1e:8e:df:28:be:1c:
09:8a:a6:eb:eb:71:6d:54:86:5f:34:6e:92:0e:f3:
17:89:de:85:39:44:4f:ed:30:d1:e6:b3:e4:d7:3c:
ae:53:57:f3:b6:30:a8:1e:8e:57:ba:17:5b:93:98:
75:60:c1:8f:5c:6f:cf:d6:f5:96:7f:c0:b2:78:1c:
3a:03:fd:d2:8b:b7:3c:b4:8f:78:49:2d:cf:e1:a9:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CC:10:2A:B8:29:82:C5:32:AB:C0:0C:CC:30:A2:A3:B4:81:F2:4D
X509v3 Authority Key Identifier:
keyid:9C:B9:CE:3E:85:EB:A7:75:3B:36:E0:D2:45:10:CC:AE:8A:A2:B3:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLnOPoXrp3U7NuDSRRDMroqis3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a48d54-9996-406d-b81b-d9cc3fd6ff60/1/k8wQKrgpgsUyq8AMzDCio7SB8k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a48d54-9996-406d-b81b-d9cc3fd6ff60/1/nLnOPoXrp3U7NuDSRRDMroqis3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.89.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:36:a7:05:65:25:1f:73:02:28:0d:6c:d2:3a:ce:84:05:6c:
35:3f:a9:f0:36:f9:cf:a6:d5:62:8a:3e:b0:f3:d1:3c:b5:89:
f5:03:f5:18:6c:2d:f5:cc:b9:4a:b4:34:ed:01:f5:dc:7d:61:
5f:4d:0b:40:6d:0f:3b:93:c4:92:5d:dd:2b:7b:05:fd:df:4e:
e6:db:03:68:5e:a2:a0:ec:d7:69:17:f2:06:0b:7e:dd:b6:7a:
cf:37:00:39:2f:d3:dc:35:c1:ff:91:67:85:79:87:ea:85:58:
78:d9:c4:6c:c1:a1:83:3f:67:71:32:26:e8:ea:07:a9:f5:99:
75:3a:03:44:cd:88:6b:20:a7:fb:63:d6:40:57:01:07:5d:77:
e8:ad:a5:79:91:f2:db:18:2d:fb:ad:3f:6f:9f:3d:c2:c5:6e:
55:ac:d2:b3:ab:2a:c5:75:64:68:8c:d2:78:35:9e:87:41:bb:
49:53:8f:bf:22:eb:05:c3:31:c6:c1:71:90:d2:5c:f5:25:3d:
cb:87:95:c7:8e:45:53:61:79:fe:e1:84:e4:bc:d2:9a:e4:6d:
fb:82:e5:56:fa:2f:81:66:bc:6e:e2:5a:73:23:96:6f:72:c8:
6f:65:20:77:6c:86:ed:ed:1c:93:6f:0c:b8:60:e0:51:dd:9e:
76:d3:f0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:48 2024 by rpki-client on console-fra.rpki-client.org