Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/j3sKgdJJdKHXzzBRq9LJ9C_NxXQ.roa
File: j3sKgdJJdKHXzzBRq9LJ9C_NxXQ.roa (raw, json)
Hash identifier: Zwd8PkFD1ECEyI5Y5j7KeCd93QcljtgdAnBodvMbPQc=
Subject key identifier: 8F:7B:0A:81:D2:49:74:A1:D7:CF:30:51:AB:D2:C9:F4:2F:CD:C5:74
Certificate issuer: /CN=d8646e6ccb716e89501958fc86823a98368fb51a
Certificate serial: 018443165D8B9F178386B1FB9D6DEB51F9B0
Authority key identifier: D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/j3sKgdJJdKHXzzBRq9LJ9C_NxXQ.roa
Signing time: Fri 04 Nov 2022 14:40:49 +0000
ROA not before: Fri 04 Nov 2022 14:40:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 89.107.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:43:16:5d:8b:9f:17:83:86:b1:fb:9d:6d:eb:51:f9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8646e6ccb716e89501958fc86823a98368fb51a
Validity
Not Before: Nov 4 14:40:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f7b0a81d24974a1d7cf3051abd2c9f42fcdc574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c4:ba:10:0a:bc:21:31:d7:98:97:1a:da:7e:
2c:bd:28:32:7d:b0:6b:1b:d5:75:bd:7e:f9:f7:a0:
6f:3e:48:bd:84:dd:c6:68:1d:43:f1:35:1a:29:db:
9a:cb:b4:82:56:40:e4:3a:e8:2e:78:b6:f2:a4:19:
6c:65:08:d2:53:43:b4:fb:01:10:8f:8b:00:4a:22:
8c:f0:fa:32:a1:9a:f3:ee:28:f3:1e:e3:73:a0:33:
08:bc:ea:22:3e:2a:0e:02:0c:1f:c0:a8:c2:5a:d9:
2a:a5:e4:9b:ce:89:72:ac:29:f6:93:8e:67:e8:61:
cf:91:a2:f6:4a:47:f2:6a:4b:ff:1a:ce:2b:c2:66:
18:8f:66:78:17:f6:29:55:50:50:0e:e3:8c:96:5a:
73:31:7c:ac:c9:8b:65:9e:3a:ce:9d:91:23:6f:de:
a7:38:b6:3c:6d:59:b1:75:a4:90:c5:3f:aa:d1:b3:
db:83:81:d6:2c:7e:44:08:d5:9a:43:03:86:c6:bd:
70:6f:4b:96:72:42:c7:0b:ca:01:f6:ba:d8:b2:09:
2d:6d:e9:7b:af:b2:e4:9d:28:5d:2b:e9:59:99:fd:
37:ea:2c:f0:ad:fc:8d:7a:44:6c:7a:a0:5a:e5:5f:
71:76:ce:c9:b5:dd:35:bd:cb:1f:69:99:3a:bd:0c:
21:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7B:0A:81:D2:49:74:A1:D7:CF:30:51:AB:D2:C9:F4:2F:CD:C5:74
X509v3 Authority Key Identifier:
keyid:D8:64:6E:6C:CB:71:6E:89:50:19:58:FC:86:82:3A:98:36:8F:B5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GRubMtxbolQGVj8hoI6mDaPtRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/j3sKgdJJdKHXzzBRq9LJ9C_NxXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/837042-572f-4884-86fc-d8603b4ee39b/1/2GRubMtxbolQGVj8hoI6mDaPtRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.9.0/24
Signature Algorithm: sha256WithRSAEncryption
59:6f:fa:a0:4b:9d:16:18:67:c2:5e:76:66:c8:d4:a6:7a:4e:
a1:97:6e:8c:49:75:2d:1c:b9:6f:31:47:d4:bd:a0:d5:5a:05:
3c:22:ca:6b:a9:29:14:8e:ac:00:35:36:4a:68:dd:18:55:76:
2e:15:2d:68:b2:77:84:8b:fd:94:71:5f:63:43:f9:9b:f5:d3:
29:7a:25:1e:04:fc:3d:67:af:cc:f9:69:be:60:8f:85:4d:3f:
fe:59:e6:af:1e:cb:dc:35:61:83:9a:12:04:8f:75:c6:b1:a8:
b7:2f:85:da:58:dd:5d:2b:69:41:71:65:ea:42:56:5f:7e:42:
27:fe:b2:36:ed:66:05:e2:5b:9d:7a:7d:87:ac:d9:9c:eb:bf:
73:59:58:cb:dd:f5:2d:80:7f:43:b8:84:13:5e:32:f4:be:d8:
13:23:02:5c:8a:aa:19:44:7e:9c:d0:a9:03:a3:72:74:5a:8f:
d0:50:8b:84:ab:30:27:3d:e3:0a:73:32:b3:6d:67:ad:86:57:
bd:19:e0:4d:48:5a:5e:0d:5f:25:c4:3a:53:bc:7a:bf:8c:5e:
70:79:bd:22:a6:47:bf:26:53:ff:b8:1b:74:df:83:d3:f0:cb:
af:d5:c1:2a:a6:d5:e8:2a:22:a1:29:d4:34:32:e1:be:83:34:
3d:ea:3b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:32 2023 by rpki-client on console-ams.rpki-client.org