Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/C-jJtRFijfd3PISFshbIX23pVfM.roa
File: C-jJtRFijfd3PISFshbIX23pVfM.roa (raw, json)
Hash identifier: 6vI45JMfjzSDVi04P2TgJmacygiV3dhLVTHfC8N0Nk4=
Subject key identifier: 0B:E8:C9:B5:11:62:8D:F7:77:3C:84:85:B2:16:C8:5F:6D:E9:55:F3
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 01882CEDAE0223D8448053DFF28A3490DBB0
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/C-jJtRFijfd3PISFshbIX23pVfM.roa
Signing time: Thu 18 May 2023 03:35:54 +0000
ROA not before: Thu 18 May 2023 03:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 152.89.192.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2c:ed:ae:02:23:d8:44:80:53:df:f2:8a:34:90:db:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: May 18 03:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0be8c9b511628df7773c8485b216c85f6de955f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ea:fd:13:47:43:cc:a1:83:11:e8:5f:aa:01:
e2:8a:4a:09:e6:37:42:d0:4d:73:41:5b:55:d8:e3:
2b:44:c7:2e:dd:3d:c8:49:f7:ea:65:2d:31:56:c6:
cc:e0:96:3c:fe:61:8a:c3:05:19:4d:34:44:1b:67:
76:d8:bd:10:23:ef:aa:a1:48:d0:12:3c:96:3a:14:
6a:ec:82:46:91:f5:2a:79:eb:b7:53:ca:03:be:a2:
f6:6e:f9:56:4f:63:db:5a:f3:9d:49:c7:c5:b8:88:
55:19:06:07:e2:1a:b6:29:1f:57:51:30:cd:3d:bb:
d0:48:40:bc:cf:b6:16:df:b4:b6:26:4a:f0:00:5d:
89:42:1f:9f:b5:b7:08:c0:9b:e5:62:7b:1d:71:7b:
78:5c:1c:d0:e0:21:61:03:e6:2c:98:b2:ac:3d:79:
88:bf:cf:7a:33:6b:40:7c:3e:c7:97:f4:39:4a:05:
90:af:ee:5b:61:0e:fa:f9:c4:3b:b9:b9:f2:0b:0a:
15:c3:11:3e:dc:86:a8:76:9a:e1:7e:e7:50:51:64:
0f:f6:4d:2a:1f:79:ee:16:5c:9f:7a:67:ee:fd:3f:
f5:e2:5c:1d:9f:4c:68:7d:20:a8:e7:a5:71:43:29:
30:be:62:8b:0c:38:95:58:e0:a2:52:9a:02:29:09:
1e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E8:C9:B5:11:62:8D:F7:77:3C:84:85:B2:16:C8:5F:6D:E9:55:F3
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/C-jJtRFijfd3PISFshbIX23pVfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.192.0/23
Signature Algorithm: sha256WithRSAEncryption
77:9e:1f:9f:cc:f5:4e:76:8a:0c:6d:0b:7b:77:ec:2d:e7:81:
8d:d1:42:04:77:64:e3:33:a1:97:bf:85:b9:06:f4:75:8a:2c:
22:18:a1:44:99:8a:50:aa:76:4c:f9:1d:c5:15:17:e7:38:78:
3a:5f:7a:cd:26:6b:ca:b8:c7:39:bf:95:83:97:e1:61:22:f7:
b3:17:db:ec:97:26:b0:15:69:82:46:0e:5f:59:8a:17:d1:54:
e0:28:27:42:37:91:5b:f9:dc:82:08:45:94:01:10:46:6b:3b:
9e:53:a6:ad:f9:95:56:41:c1:5f:3c:51:b8:bf:8a:59:17:4c:
8f:d0:f0:2e:70:a6:aa:e8:31:12:65:ba:a2:10:d1:d7:d3:34:
9e:7b:22:98:6a:3f:c7:6d:78:2f:35:7d:47:d8:7a:15:a0:9f:
65:24:c4:32:95:9d:bc:c1:d8:48:85:00:41:5d:95:92:bb:a3:
29:1d:3d:e4:6a:59:50:30:fc:66:83:51:d3:65:2a:d2:16:10:
32:ca:c6:95:30:ea:75:87:71:09:7d:e4:6d:1a:a7:ac:50:cc:
bd:59:74:86:1c:62:13:35:a8:1a:77:4b:05:19:d1:46:ca:84:
16:9a:95:33:9c:d0:7d:37:73:23:03:bf:0a:1a:86:aa:c8:a9:
26:27:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:42 2024 by rpki-client on console-fra.rpki-client.org