Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/U-o8MgHr-3s6_TIqwqOf90bH43I.roa
File: U-o8MgHr-3s6_TIqwqOf90bH43I.roa (raw, json)
Hash identifier: xPOWPJg56DjWA4PAF2B/JypeGF9sCwGQ6jDQry8s7wU=
Subject key identifier: 53:EA:3C:32:01:EB:FB:7B:3A:FD:32:2A:C2:A3:9F:F7:46:C7:E3:72
Certificate issuer: /CN=d8646e6ccb716e89501958fc86823a98368fb51a
Certificate serial: 0135BA9E
Authority key identifier: D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/U-o8MgHr-3s6_TIqwqOf90bH43I.roa
Signing time: Thu 06 Jan 2022 20:40:42 +0000
ROA not before: Thu 06 Jan 2022 20:40:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399045
IP address blocks: 89.107.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20298398 (0x135ba9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8646e6ccb716e89501958fc86823a98368fb51a
Validity
Not Before: Jan 6 20:40:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53ea3c3201ebfb7b3afd322ac2a39ff746c7e372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bc:4b:8a:a8:ef:67:4b:d2:41:da:aa:22:36:
88:38:cb:2f:98:25:53:3f:59:1d:e0:bd:09:90:5c:
1b:8a:2f:4f:94:e3:09:7f:04:d0:4e:ea:4a:04:d5:
23:1b:fc:bb:b5:20:c9:bd:37:f6:05:b5:32:17:3f:
8d:53:ec:3b:ef:cd:7d:f3:8e:31:a5:90:37:99:70:
99:49:b5:6e:c7:5e:4c:0e:0d:64:ae:4c:e8:a3:2b:
b0:2a:67:97:b0:9e:91:43:0b:d3:97:04:2c:1d:ee:
ea:a1:05:d8:94:ed:d7:7a:6a:b3:eb:08:c7:1c:ab:
ad:de:34:4f:d5:e1:ff:6b:95:ae:e4:b6:76:29:ea:
5a:58:ef:dd:a5:0b:03:35:c5:0c:ad:46:af:6e:1b:
8a:4c:5b:60:39:29:83:4e:d6:2a:f9:eb:0c:ac:42:
a4:f4:67:71:7d:b9:69:8d:47:8a:7e:c1:3b:57:b7:
ac:22:9d:23:95:5b:57:5f:28:5e:45:74:51:7f:8c:
45:4b:b0:c4:98:78:74:dc:9a:f0:b1:aa:54:a6:3f:
95:32:6f:bf:19:6b:44:b8:e9:eb:8c:34:c2:28:3f:
20:13:56:93:83:0e:82:d4:a0:98:20:3b:7c:1f:27:
04:54:da:3b:b4:d4:2d:74:fb:b0:ea:a5:e7:42:92:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EA:3C:32:01:EB:FB:7B:3A:FD:32:2A:C2:A3:9F:F7:46:C7:E3:72
X509v3 Authority Key Identifier:
keyid:D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/U-o8MgHr-3s6_TIqwqOf90bH43I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/2GRubMtxbolQGVj8hoI6mDaPtRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.9.0/24
Signature Algorithm: sha256WithRSAEncryption
71:05:c2:83:33:41:f4:a7:c3:e7:76:9c:63:3a:57:e6:19:4d:
0e:a4:34:b3:ad:00:19:bb:a8:74:0e:49:8a:7e:16:22:7b:26:
36:f3:38:22:97:e3:18:3e:bd:06:b3:62:a4:9f:e4:31:52:4b:
b2:ec:cb:69:8d:51:f1:ad:c2:ac:b2:d3:ce:6a:fe:de:25:94:
61:4c:c4:a5:56:50:2b:30:3d:1e:c9:58:9f:9e:b5:05:33:9f:
78:68:ba:7c:91:23:0b:0f:74:bb:2d:38:be:05:79:7c:1c:28:
f9:d2:a6:d9:fa:01:de:cd:f3:75:17:d6:62:34:84:b8:43:75:
41:8f:c3:86:77:24:48:03:f2:8f:d3:5e:38:22:70:31:47:7b:
7b:05:ed:5d:93:2b:91:b6:84:70:a9:34:8e:e1:76:db:b1:d2:
61:4a:34:76:ad:c8:bb:5f:38:3a:76:c4:42:4f:1d:ce:2c:20:
14:d5:db:66:75:ab:b6:ea:1e:28:be:d6:4b:3c:15:c0:40:41:
46:92:d2:df:a4:99:c3:3e:f9:16:45:7d:d2:62:8a:39:2f:dc:
92:45:c6:a4:8a:58:1c:8f:0d:ee:cb:c7:98:6d:0d:79:4d:1d:
dd:90:06:43:dc:92:fd:5b:2e:8a:73:c7:fc:dd:2f:ff:e8:15:
fb:ed:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:47 2023 by rpki-client on console-fra.rpki-client.org