Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/szAY6SeCjqjxrp5SQ6_todiVGKc.roa
File: szAY6SeCjqjxrp5SQ6_todiVGKc.roa (raw, json)
Hash identifier: HSeeYEtq5WA4yVP3Wb+7umvoFDQkjrO+XRlEPyy80YI=
Subject key identifier: B3:30:18:E9:27:82:8E:A8:F1:AE:9E:52:43:AF:ED:A1:D8:95:18:A7
Certificate issuer: /CN=df18c5f6675368706b08cc27139aedf7210faf47
Certificate serial: 328C2E49
Authority key identifier: DF:18:C5:F6:67:53:68:70:6B:08:CC:27:13:9A:ED:F7:21:0F:AF:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xjF9mdTaHBrCMwnE5rt9yEPr0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/szAY6SeCjqjxrp5SQ6_todiVGKc.roa
Signing time: Sat 01 Jan 2022 03:53:29 +0000
ROA not before: Sat 01 Jan 2022 03:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202719
IP address blocks: 89.190.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 848047689 (0x328c2e49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df18c5f6675368706b08cc27139aedf7210faf47
Validity
Not Before: Jan 1 03:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b33018e927828ea8f1ae9e5243afeda1d89518a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:c8:a0:a4:c3:9c:dc:c8:3f:60:22:f2:df:
46:9c:e5:6a:7d:d5:3a:7b:bc:9c:f8:15:63:91:3f:
5d:3d:53:10:30:77:36:f5:f8:f5:5d:5e:32:9f:db:
b1:2c:87:4d:29:b2:a8:79:f0:72:21:04:d6:3a:73:
a7:4e:21:67:de:c0:e9:79:da:87:22:3f:a4:9d:9d:
d5:35:9b:d1:8f:28:d2:d5:c6:a9:35:29:44:2f:7d:
56:c7:90:37:76:b5:37:5c:1b:27:91:29:08:f2:88:
58:5f:a0:5c:84:d0:a1:96:4a:66:4a:4c:19:4c:b5:
a5:ac:01:be:3b:71:95:67:d1:c8:0f:fd:28:b5:80:
f0:37:26:d1:01:84:9b:34:85:bb:f3:08:65:ed:73:
32:9b:6e:55:1e:51:17:69:39:71:74:89:8b:23:92:
f4:18:f0:0c:7f:b3:11:a9:0e:47:6c:e0:ca:c5:80:
55:ab:91:a7:7a:78:02:d2:0b:e0:47:65:49:32:81:
66:c9:09:30:33:af:a4:b7:b6:3a:61:a7:af:23:17:
8a:69:3e:a9:7b:fd:fa:49:73:e7:9c:96:72:d7:69:
0e:38:92:83:51:c7:eb:9b:01:1d:42:a9:55:c4:d3:
d5:bc:d0:5c:07:95:7b:b1:5c:82:db:e7:1c:86:ec:
07:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:18:E9:27:82:8E:A8:F1:AE:9E:52:43:AF:ED:A1:D8:95:18:A7
X509v3 Authority Key Identifier:
keyid:DF:18:C5:F6:67:53:68:70:6B:08:CC:27:13:9A:ED:F7:21:0F:AF:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xjF9mdTaHBrCMwnE5rt9yEPr0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/szAY6SeCjqjxrp5SQ6_todiVGKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/3xjF9mdTaHBrCMwnE5rt9yEPr0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.54.0/24
Signature Algorithm: sha256WithRSAEncryption
40:be:e3:bf:fc:65:78:4b:d3:61:0c:05:f5:e5:d6:8e:f7:c3:
29:96:b0:93:da:50:78:9d:9a:72:de:49:65:8d:d1:23:f1:25:
13:24:89:a4:a1:64:1d:f3:e0:05:4e:31:ed:c1:a7:b7:4a:56:
2e:39:54:63:4c:49:07:02:a8:14:ae:05:24:6a:82:f9:7b:e1:
19:d7:7b:9c:a5:fb:db:88:fa:2c:79:bb:fd:f7:44:af:4c:a0:
d8:56:df:1a:32:a4:b1:49:1d:a5:3c:a7:29:03:ca:92:54:ff:
2a:9d:93:10:1c:bf:7b:ff:dc:3c:dc:4b:7f:f2:be:20:bc:f5:
96:95:1f:b8:69:38:2f:9c:cf:15:31:a3:c7:33:bd:3f:23:38:
fa:a6:8b:ef:52:0e:ee:32:2e:01:c5:d2:eb:85:f2:8f:c7:9c:
4a:8b:2e:eb:a5:7a:8b:36:21:cb:86:06:e0:12:5f:a3:f8:ef:
64:c3:9c:4b:e0:9e:6e:ee:c3:4e:ef:42:d5:d6:37:48:c5:92:
aa:cc:54:38:05:e2:df:93:61:8d:bd:3b:99:09:ef:ce:85:c5:
0f:9b:0c:26:c1:9c:f4:5a:9f:f9:9d:d4:2c:a7:c7:95:29:15:
fd:cf:b5:d1:f3:1e:66:7a:cc:5c:72:fd:71:a1:79:fb:59:fa:
69:fa:00:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:22 2024 by rpki-client on console-fra.rpki-client.org