Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/ZU6kOqSHrXNnKVosYUlEFCZQ49g.roa
File: ZU6kOqSHrXNnKVosYUlEFCZQ49g.roa (raw, json)
Hash identifier: 8bAbfVIoRue3A/MvSNhunuXlkGP2P6JVHCu38FCZbPA=
Subject key identifier: 65:4E:A4:3A:A4:87:AD:73:67:29:5A:2C:61:49:44:14:26:50:E3:D8
Certificate issuer: /CN=d8646e6ccb716e89501958fc86823a98368fb51a
Certificate serial: 0182DACA109A8838DA4C2FA1067C89143782
Authority key identifier: D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/ZU6kOqSHrXNnKVosYUlEFCZQ49g.roa
Signing time: Fri 26 Aug 2022 15:34:11 +0000
ROA not before: Fri 26 Aug 2022 15:34:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 89.107.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:da:ca:10:9a:88:38:da:4c:2f:a1:06:7c:89:14:37:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8646e6ccb716e89501958fc86823a98368fb51a
Validity
Not Before: Aug 26 15:34:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=654ea43aa487ad7367295a2c614944142650e3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:13:66:ee:16:e7:82:c8:71:f5:76:47:02:
65:4b:72:00:41:54:7b:fc:9e:18:41:93:46:8e:2c:
b3:bb:c6:29:98:77:96:a8:0b:bb:08:77:f2:6a:35:
15:81:3c:12:39:f2:b2:87:3c:ca:e1:cb:d5:a9:7f:
8f:96:57:d2:61:c1:41:0e:f2:12:41:bf:4f:a6:e5:
e3:a6:c7:04:d2:9c:fc:d2:aa:eb:0b:10:88:2b:d2:
65:ff:cd:61:89:68:d5:f8:97:23:de:a6:1c:2e:d1:
b7:5b:11:b0:4d:c4:06:55:db:a7:53:4b:ab:eb:40:
d6:69:7a:07:c3:39:4e:39:ee:b5:bb:e4:28:d5:42:
b3:ee:5a:e9:82:a5:8b:9b:f4:f0:81:12:5b:0e:e0:
2d:85:11:8e:6c:57:f1:b3:f5:08:b1:b2:d0:bf:47:
04:dd:db:52:72:5f:c3:2f:16:81:ac:d7:f7:3e:67:
58:10:15:45:63:f8:10:09:00:34:47:3a:27:86:4a:
b7:32:5c:34:f5:72:ed:bf:ae:bd:c3:b4:cc:96:ac:
c7:e3:67:c5:db:b7:1e:2c:0d:50:ed:3d:93:5c:38:
00:21:7d:83:94:99:b0:5f:87:c4:9c:74:70:9d:2d:
3d:aa:0e:48:e2:3b:70:20:f6:06:be:dc:b4:e7:91:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4E:A4:3A:A4:87:AD:73:67:29:5A:2C:61:49:44:14:26:50:E3:D8
X509v3 Authority Key Identifier:
keyid:D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/ZU6kOqSHrXNnKVosYUlEFCZQ49g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/2GRubMtxbolQGVj8hoI6mDaPtRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.9.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3a:74:2f:7b:5e:9b:9c:a3:f3:5a:74:01:4e:3f:df:8c:7c:
96:29:ed:8e:08:04:03:6b:2c:6d:e9:ec:77:a6:af:43:19:f6:
0b:eb:b4:05:f2:96:d3:a1:f5:49:b9:93:ae:92:88:d7:08:d4:
be:59:88:eb:79:ff:c0:8e:fe:94:76:0f:56:b3:9f:0a:ff:ba:
f9:26:b6:b3:67:29:1d:7a:b2:98:da:34:87:96:73:e8:c9:d3:
df:bc:38:13:ce:87:b4:4a:d4:7e:80:21:09:68:e8:52:43:cd:
52:2f:70:43:1f:26:bf:6c:6b:2a:cd:fe:bc:76:88:67:fc:78:
5b:bc:6c:b2:38:fd:1e:69:be:1b:b6:de:dd:92:b9:40:d4:61:
be:15:08:50:66:e4:cb:ff:70:d2:dd:fb:a4:71:45:f0:2d:18:
33:d2:df:db:1c:32:66:4e:10:a6:03:9b:43:89:67:5f:6a:28:
c6:64:c1:fc:b5:12:2d:12:21:2d:f2:8b:d5:f6:7f:be:79:8f:
05:8a:80:3f:5f:3c:c9:32:66:ef:a2:04:7f:b4:b9:ab:d0:3d:
68:f9:cc:84:c4:ea:d3:b4:e6:1e:b1:3b:37:ca:af:58:ae:36:
19:dc:8a:7c:4e:33:36:41:0a:a5:05:51:eb:98:c1:cb:d8:c0:
cc:3e:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:32 2023 by rpki-client on console-ams.rpki-client.org