Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/WAeHH8WtLlNbXO-DZDIy7bX3-ns.roa
File: WAeHH8WtLlNbXO-DZDIy7bX3-ns.roa (raw, json)
Hash identifier: 79lQ2HR8FB5TZ0SdHsXEkp89FxJnQ3Ra7EH5ZV7q8fE=
Subject key identifier: 58:07:87:1F:C5:AD:2E:53:5B:5C:EF:83:64:32:32:ED:B5:F7:FA:7B
Certificate issuer: /CN=d8646e6ccb716e89501958fc86823a98368fb51a
Certificate serial: 01E4E2B6
Authority key identifier: D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/WAeHH8WtLlNbXO-DZDIy7bX3-ns.roa
Signing time: Thu 24 Mar 2022 22:03:17 +0000
ROA not before: Thu 24 Mar 2022 22:03:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 89.107.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31777462 (0x1e4e2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8646e6ccb716e89501958fc86823a98368fb51a
Validity
Not Before: Mar 24 22:03:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5807871fc5ad2e535b5cef83643232edb5f7fa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:05:22:26:05:1a:b8:f7:1c:15:32:75:16:
ca:a2:fb:0a:7a:ed:00:71:71:8e:02:d0:69:28:73:
66:cd:ca:ee:b5:38:ac:0d:5e:3d:18:ec:4d:ea:ec:
ad:67:1c:8b:c4:a1:be:67:1c:e6:70:ca:eb:b6:22:
bc:f3:d9:f9:db:cc:c7:5d:4c:50:e3:4a:34:96:3b:
12:78:a6:3a:91:e0:81:00:46:e3:4e:fa:27:1f:5d:
7b:2a:eb:3e:de:87:f0:b1:45:56:4c:6b:39:ee:cb:
f4:03:2b:60:4a:d6:8a:06:2f:c7:ce:64:79:f6:14:
26:af:e1:ee:3f:94:c4:c8:f5:2e:7f:d9:06:d5:5f:
1c:c4:d8:e2:e0:52:8f:db:40:53:b3:7a:8a:8f:08:
6e:0b:3a:de:84:64:57:00:ac:41:12:4c:0b:9d:d9:
86:c3:09:90:ea:b5:41:02:bf:15:8d:70:66:db:0e:
c4:a8:4a:fe:bf:a7:52:93:f7:79:d2:0c:44:9b:51:
fe:e1:c5:3c:14:d0:58:ce:02:35:2e:9e:49:a7:54:
dc:ca:96:97:00:57:0b:e0:51:96:a2:43:d6:33:9c:
e8:46:9d:9a:c9:c9:0d:02:a6:ea:85:76:a7:58:62:
bf:ff:90:99:f2:20:ec:a6:2f:93:68:81:c1:84:03:
e0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:07:87:1F:C5:AD:2E:53:5B:5C:EF:83:64:32:32:ED:B5:F7:FA:7B
X509v3 Authority Key Identifier:
keyid:D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/WAeHH8WtLlNbXO-DZDIy7bX3-ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/2GRubMtxbolQGVj8hoI6mDaPtRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.9.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c4:ad:69:66:70:f1:26:cc:98:ff:a9:e8:d5:16:95:3e:82:
8e:c0:5e:2e:be:6b:3b:ca:c6:f6:2e:cb:b0:31:f8:fd:7b:ff:
bf:8f:77:b4:01:e3:a4:9b:2e:85:c8:c5:21:7c:ab:ab:4b:10:
c7:e7:a1:f9:a8:e2:98:3c:01:48:fc:34:a0:f4:39:60:4a:4a:
d9:c7:fc:00:f8:51:c8:30:56:ba:78:6b:e7:6a:e4:77:46:d1:
a0:48:54:be:99:0a:6e:21:5b:7b:e6:f0:ef:14:51:c4:cc:89:
02:ac:89:ad:5a:cb:2a:80:17:cd:16:4e:a6:a6:c9:54:4d:b6:
85:c4:07:20:9e:7a:d2:27:0b:ed:6f:2a:f2:a6:fb:8b:8d:71:
d8:91:26:91:fa:f8:8f:4d:56:71:0f:60:dc:c0:cf:53:da:af:
9b:cc:1c:5d:43:bb:14:bf:af:94:2f:16:b9:54:fb:f2:5a:ba:
1c:df:20:d0:a1:54:b2:ed:1d:86:94:12:9a:68:51:0e:25:73:
c4:65:94:db:97:fc:5b:64:c8:b7:b9:85:53:0e:87:c0:e6:0a:
3d:62:f9:27:ac:b2:9b:fa:c8:0b:46:fc:06:43:cd:f9:1f:43:
7c:c2:58:3f:46:e8:18:73:12:92:44:0a:91:3c:92:85:ef:6e:
0d:23:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:47 2023 by rpki-client on console-fra.rpki-client.org