Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/tXxfLrKJvdOtetlElLAf54rPcNM.roa
File: tXxfLrKJvdOtetlElLAf54rPcNM.roa (raw, json)
Hash identifier: Jp4cGvXXxQptABeHJWDGA5tA6DSfaT7xEpgtDwqr6CI=
Subject key identifier: B5:7C:5F:2E:B2:89:BD:D3:AD:7A:D9:44:94:B0:1F:E7:8A:CF:70:D3
Certificate issuer: /CN=cccb42889e5ac899c12f3486bda045a90eeff779
Certificate serial: 15571EE9
Authority key identifier: CC:CB:42:88:9E:5A:C8:99:C1:2F:34:86:BD:A0:45:A9:0E:EF:F7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMtCiJ5ayJnBLzSGvaBFqQ7v93k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/tXxfLrKJvdOtetlElLAf54rPcNM.roa
Signing time: Fri 11 Mar 2022 09:24:57 +0000
ROA not before: Fri 11 Mar 2022 09:24:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207821
IP address blocks: 185.89.38.0/24 maxlen: 24
185.89.37.0/24 maxlen: 24
185.89.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358031081 (0x15571ee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccb42889e5ac899c12f3486bda045a90eeff779
Validity
Not Before: Mar 11 09:24:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b57c5f2eb289bdd3ad7ad94494b01fe78acf70d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:1c:bf:9a:0a:60:d1:d5:e9:66:c9:4e:13:
01:c6:68:91:30:ac:5e:b7:85:c1:38:33:7f:ab:da:
d4:07:4d:fb:5a:09:58:60:2a:29:4a:59:67:c4:88:
f6:f6:63:19:1e:eb:d2:14:28:d3:96:38:ad:f3:43:
f1:c7:a7:f8:e5:14:12:bd:37:8f:da:47:5d:38:5e:
f7:9d:4f:29:70:02:af:46:cd:0a:66:ca:c4:2a:bf:
68:e1:e3:bd:99:f8:57:a1:3b:44:b6:10:ba:18:04:
ce:15:6d:42:a7:54:a5:85:c9:6d:1e:ad:41:4e:c7:
97:63:86:44:88:32:d1:20:ea:b4:ca:40:1b:d1:bd:
81:79:d1:5c:df:d9:fe:54:0f:e7:19:1b:e2:53:0f:
32:7b:45:46:6e:f5:40:56:b8:89:fe:85:c4:66:bf:
b0:f9:da:c8:82:c4:b1:b1:73:40:6c:91:b4:6a:fa:
e8:3e:e5:fd:c0:c2:ae:7a:c4:eb:30:0e:a8:3d:3e:
61:10:71:60:61:96:41:1f:6f:d9:54:43:13:bc:72:
cd:d1:f6:44:4a:17:bc:3c:99:e6:68:f5:12:1f:cf:
79:92:eb:0e:6e:76:67:c5:8b:86:a2:33:8b:1c:87:
33:a2:64:39:10:e5:52:d6:4c:ac:de:bb:b3:56:e3:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7C:5F:2E:B2:89:BD:D3:AD:7A:D9:44:94:B0:1F:E7:8A:CF:70:D3
X509v3 Authority Key Identifier:
keyid:CC:CB:42:88:9E:5A:C8:99:C1:2F:34:86:BD:A0:45:A9:0E:EF:F7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMtCiJ5ayJnBLzSGvaBFqQ7v93k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/tXxfLrKJvdOtetlElLAf54rPcNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f8aba4-e1cf-4144-9bfa-a8888e58a780/1/zMtCiJ5ayJnBLzSGvaBFqQ7v93k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.37.0-185.89.39.255
Signature Algorithm: sha256WithRSAEncryption
91:67:e9:67:96:e2:ae:04:17:d9:04:85:1a:f7:1d:d0:80:1c:
0c:f1:78:57:e8:2d:1f:d3:a1:da:ad:dd:4d:91:8e:38:f0:87:
c3:45:91:34:0d:f8:c9:eb:18:e3:c0:60:62:37:b3:82:0e:9d:
97:3a:af:5f:c5:f5:f5:82:70:d4:34:30:b6:7c:ac:12:0c:7b:
ee:df:69:56:b0:e3:b8:71:bb:86:48:08:5b:60:f3:e4:15:96:
f4:59:da:fb:6e:0a:3e:47:f0:f8:6e:75:63:43:24:1f:5c:1b:
a7:a3:80:a4:fe:1b:16:1a:e8:0b:df:af:93:1a:1e:fb:5a:3e:
22:5f:99:c0:69:5e:a0:85:54:93:b4:04:34:a6:35:d8:f3:0b:
14:52:44:03:8f:e5:8a:e4:ee:af:31:2c:64:68:60:b1:d3:af:
3d:1b:56:3c:5b:7c:c6:90:19:6f:51:87:fa:8f:07:57:62:81:
1f:ed:8f:99:87:3b:92:38:49:63:5e:85:15:1a:00:aa:42:b6:
49:2d:25:f7:d2:b0:19:05:e4:0c:f0:09:a8:64:ad:3b:7f:46:
d1:2f:8b:86:26:93:2d:f8:e1:dc:96:06:4e:5a:a7:b3:e4:5c:
11:57:ca:3e:2c:55:1c:55:5e:38:fe:ba:80:65:d4:28:fe:77:
0b:23:af:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:42 2024 by rpki-client on console-ams.rpki-client.org