Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/5xvgg9F7cnmfhRdXpk6LedWUNHw.roa
File: 5xvgg9F7cnmfhRdXpk6LedWUNHw.roa (raw, json)
Hash identifier: l7bYS8QU8+XVSOh5PtES+REVwGsvfm9kwxDxJJSYLEI=
Subject key identifier: E7:1B:E0:83:D1:7B:72:79:9F:85:17:57:A6:4E:8B:79:D5:94:34:7C
Certificate issuer: /CN=43931de6e91b40f4b2bb201253e57a86741105a5
Certificate serial: 01839E5449F206409D899332270C840D3FFC
Authority key identifier: 43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/5xvgg9F7cnmfhRdXpk6LedWUNHw.roa
Signing time: Mon 03 Oct 2022 14:51:07 +0000
ROA not before: Mon 03 Oct 2022 14:51:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39640
IP address blocks: 89.34.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:54:49:f2:06:40:9d:89:93:32:27:0c:84:0d:3f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43931de6e91b40f4b2bb201253e57a86741105a5
Validity
Not Before: Oct 3 14:51:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e71be083d17b72799f851757a64e8b79d594347c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:81:39:8e:7a:cb:15:b9:af:17:c0:b9:24:
cf:1c:f8:cc:3d:c0:2a:12:5e:f7:7a:bf:6b:fd:21:
e4:8e:91:e8:9d:1b:98:9b:96:1c:e8:ef:5d:0d:b2:
3b:da:75:a4:95:09:ce:90:b2:4a:60:f3:d6:d7:88:
7c:3c:5b:db:37:5d:dc:f0:58:60:2b:be:e0:68:a3:
4b:ef:f8:e4:fc:86:c9:f3:d4:fc:d0:55:2e:30:a0:
5c:9a:86:00:b4:35:7c:5a:93:8b:88:46:e2:fc:b0:
5a:92:b4:e2:ba:91:37:92:70:cd:c4:92:d2:03:5e:
ce:f1:23:57:b2:3e:a5:36:8e:f3:d0:21:52:67:2a:
3f:e9:21:eb:db:74:fa:f5:57:a8:b8:e4:22:d7:88:
ad:5b:69:19:e8:f4:40:90:3d:31:81:e7:2c:35:c2:
22:14:39:9b:f0:33:60:1b:2c:b0:cc:db:dd:95:f2:
ec:d8:20:94:8e:d5:c2:f8:74:ac:7b:76:f6:5e:c6:
0d:aa:7d:66:1e:15:9a:6d:03:73:13:e8:0d:cf:22:
0f:38:82:d4:23:e9:0f:17:1c:60:4f:b3:37:39:b0:
43:12:06:96:ed:b3:89:d5:e6:ca:ac:26:6e:69:ee:
1e:d9:25:d7:af:5d:92:39:54:7c:75:13:8b:80:67:
86:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1B:E0:83:D1:7B:72:79:9F:85:17:57:A6:4E:8B:79:D5:94:34:7C
X509v3 Authority Key Identifier:
keyid:43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/5xvgg9F7cnmfhRdXpk6LedWUNHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.76.0/24
Signature Algorithm: sha256WithRSAEncryption
68:57:76:55:de:e7:97:d6:0d:94:69:75:1a:25:83:73:51:68:
b4:37:2f:91:c2:b3:5d:7d:f9:05:cf:fb:c3:4f:e8:5e:84:2b:
4f:64:ce:38:80:ea:4c:36:74:4e:9a:81:cf:52:7d:5f:1b:09:
f0:1f:f4:e8:a4:ad:b0:da:a4:21:98:f3:4c:16:4c:b7:82:46:
00:50:8e:12:f9:e8:45:77:72:32:d9:33:25:d0:c9:91:de:34:
79:d3:43:7f:d4:38:11:5a:53:8f:e2:53:c2:28:23:31:63:31:
a5:31:30:b2:b8:42:90:c3:7a:cd:5b:16:2b:24:07:3a:2a:e3:
bb:6c:42:2a:23:d3:d3:f7:55:01:a7:29:14:e4:ea:68:4e:8b:
07:25:bd:c9:22:d6:b7:fe:e6:22:68:38:b0:24:b4:e5:83:b2:
52:03:c4:7f:87:65:de:9c:5a:38:da:b2:50:88:5d:26:de:14:
12:8b:fa:bd:64:e1:bc:1b:6a:68:6e:02:3d:d7:be:99:21:9a:
54:01:a4:3c:8f:d2:2e:0e:c4:ae:b5:84:11:2c:92:65:30:c1:
46:dc:fe:f8:c7:ef:e8:2d:15:57:be:d3:65:55:17:15:36:f9:
e2:ee:e1:17:07:55:9a:8b:ca:bc:42:63:06:ba:01:e3:ae:5c:
02:a9:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:55 2025 by rpki-client