Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/b-K_5oLj_GhcRrEBkdhByxEzkrc.roa
File: b-K_5oLj_GhcRrEBkdhByxEzkrc.roa (raw, json)
Hash identifier: XSuCPA47TlW5mMeyMwP/zzdCBdj/7eSS1vC6oZ/gwPI=
Subject key identifier: 6F:E2:BF:E6:82:E3:FC:68:5C:46:B1:01:91:D8:41:CB:11:33:92:B7
Certificate issuer: /CN=caeed2e1bb505049adb39884436cf2cb3e745224
Certificate serial: 018D8430031DBDD467C64A4407CEF6D47C30
Authority key identifier: CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/b-K_5oLj_GhcRrEBkdhByxEzkrc.roa
Signing time: Wed 07 Feb 2024 15:29:15 +0000
ROA not before: Wed 07 Feb 2024 15:29:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 89.107.14.0/24 maxlen: 24
109.107.147.0/24 maxlen: 24
217.198.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:84:30:03:1d:bd:d4:67:c6:4a:44:07:ce:f6:d4:7c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeed2e1bb505049adb39884436cf2cb3e745224
Validity
Not Before: Feb 7 15:29:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fe2bfe682e3fc685c46b10191d841cb113392b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:6b:5f:61:03:0e:a9:8d:62:c4:b9:52:4b:
72:a6:99:90:3c:14:52:6d:75:05:42:a8:6a:d7:73:
3c:af:0c:d7:f4:6e:d5:c3:5c:37:92:97:37:c2:2f:
eb:81:9b:72:cd:4e:2d:95:04:d2:42:09:b0:b2:5f:
b7:b6:3f:1f:8f:6b:8e:a1:28:b8:72:68:69:0c:87:
a5:d9:49:2c:40:af:f0:a8:a1:aa:1d:ff:ba:51:06:
3c:bb:9e:2a:24:9a:18:6d:f2:4d:cf:28:f8:80:e5:
7b:4f:a7:14:bf:8b:32:73:af:4f:f7:8f:ea:66:3c:
f9:96:e2:a2:08:3c:e4:67:64:bf:b3:a5:eb:58:6b:
50:83:10:f0:1d:09:d6:29:b9:da:e3:9d:70:dc:17:
db:df:63:b9:8d:9d:ad:01:3a:9b:9f:c2:dc:08:c6:
cf:14:56:41:0c:3b:ca:11:5c:cd:6d:37:0d:f9:04:
a7:72:d0:78:37:72:d6:c0:f8:60:1a:97:15:e4:91:
9c:60:d7:a2:3d:a3:63:2f:04:a7:3c:2a:21:86:f4:
c9:66:f2:e8:c5:86:16:bb:7b:25:ac:29:da:28:a8:
29:0a:49:5e:18:39:60:79:49:7e:5f:69:5a:5d:0f:
80:8b:04:27:2f:ea:e9:ba:fd:01:12:6d:9c:61:b5:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E2:BF:E6:82:E3:FC:68:5C:46:B1:01:91:D8:41:CB:11:33:92:B7
X509v3 Authority Key Identifier:
keyid:CA:EE:D2:E1:BB:50:50:49:AD:B3:98:84:43:6C:F2:CB:3E:74:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yu7S4btQUEmts5iEQ2zyyz50UiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/b-K_5oLj_GhcRrEBkdhByxEzkrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bbcfaa-7c45-4935-9159-dde769d7ade9/1/yu7S4btQUEmts5iEQ2zyyz50UiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.14.0/24
109.107.147.0/24
217.198.181.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7d:56:ab:8a:ab:61:b8:60:e9:00:41:ca:50:18:01:65:22:
71:10:b7:18:9b:60:b6:ed:1f:94:ef:b1:fb:f8:e2:e9:f9:5f:
ce:24:db:57:1b:8e:97:95:1e:8f:52:2e:ac:13:19:52:69:b4:
6b:a4:6c:c9:1e:8d:43:78:70:43:ab:96:9a:9e:fe:65:a0:2a:
8c:bc:e0:81:ed:d0:34:4f:c0:5c:95:52:70:a4:06:fc:ca:f3:
dd:bb:f5:26:e8:3e:06:59:8f:fa:82:6a:40:54:16:ae:24:f5:
d0:85:79:1d:bc:61:e8:1a:af:3c:e7:98:d2:e8:ef:fd:72:9e:
a8:da:5f:53:20:c7:c1:4d:2a:48:a3:5e:da:d3:ef:c4:dd:f9:
e3:db:4d:57:5f:1a:18:b2:6a:a9:08:b4:f7:e1:b6:33:41:85:
34:76:83:b3:75:2d:ac:e7:9c:06:6d:4c:92:4a:a7:4c:3c:21:
5d:24:b4:d4:a8:9a:1c:21:2f:17:07:41:19:73:65:0a:5a:87:
7b:91:e3:ed:1f:15:a8:c0:13:18:fe:8a:34:19:db:50:c1:21:
cb:e5:98:19:53:06:a9:a2:f9:98:8d:a3:92:48:33:45:13:01:
e3:6c:b4:c8:d8:7e:ae:32:d7:55:1d:36:5d:a2:51:4f:2f:0c:
53:62:5d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:42 2024 by rpki-client on console-fra.rpki-client.org