Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/3aswkhluFrRjNG6B1adc_CsYtBc.roa
File: 3aswkhluFrRjNG6B1adc_CsYtBc.roa (raw, json)
Hash identifier: 5XZlrxm5ToriKhi22gjYXv/wd5tPOw6hg+FFq+nG2lk=
Subject key identifier: DD:AB:30:92:19:6E:16:B4:63:34:6E:81:D5:A7:5C:FC:2B:18:B4:17
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD53AC1BD0BB277A0CB2DDDC2CB6294
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/3aswkhluFrRjNG6B1adc_CsYtBc.roa
Signing time: Mon 02 Jan 2023 00:15:23 +0000
ROA not before: Mon 02 Jan 2023 00:15:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59892
IP address blocks: 89.39.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:3a:c1:bd:0b:b2:77:a0:cb:2d:dd:c2:cb:62:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddab3092196e16b463346e81d5a75cfc2b18b417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:98:52:ef:52:10:c6:e4:d6:89:12:3a:0f:03:
1d:c9:b9:4c:5f:27:3c:34:a0:fe:d1:ba:6a:1a:f2:
1d:be:f8:f0:e9:1a:5a:78:19:f3:7b:4b:4a:32:9c:
8d:5d:cb:c5:12:72:cc:a5:4a:df:fd:c6:5f:71:ab:
54:37:91:b7:04:64:71:40:ab:ed:75:3f:c1:df:55:
4b:59:3d:b6:61:1b:c3:90:1e:ff:91:1a:f2:00:18:
7f:1b:67:dc:08:6a:f4:6b:36:75:d3:65:5f:b9:ba:
84:77:00:ea:5c:8b:3e:b6:f1:bd:46:79:d1:09:7b:
ac:84:6b:d2:fa:06:fa:71:8a:72:b5:65:a6:48:e2:
f8:e5:5e:41:51:8a:09:01:90:b5:a8:00:59:06:47:
5e:d1:b7:f5:73:5b:a8:9b:29:04:d3:95:c8:fb:e7:
f7:53:28:22:c5:1c:e6:ba:1f:02:17:3d:95:0f:a7:
45:ec:da:f7:25:6c:fa:25:50:c5:72:c5:25:89:d7:
cc:c2:69:8d:c2:8f:7c:b8:62:0f:b4:52:39:59:d8:
73:fb:37:72:5c:48:65:9d:2d:a4:ce:41:83:5c:06:
a1:a9:af:40:3b:e2:e9:35:40:80:8f:ac:36:3a:dd:
53:50:37:af:70:2d:0c:92:b3:83:1a:45:69:ef:af:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:30:92:19:6E:16:B4:63:34:6E:81:D5:A7:5C:FC:2B:18:B4:17
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/3aswkhluFrRjNG6B1adc_CsYtBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a8:0c:e6:99:cd:6b:29:17:10:68:c6:e2:b6:4a:e1:68:8d:
c0:36:7b:7e:21:98:b7:b1:ae:f3:16:6d:2d:b9:c9:38:b6:96:
e0:59:62:c2:cb:37:02:03:6b:62:53:8b:46:21:ad:f3:23:1f:
59:c2:07:ea:7b:20:fe:41:62:79:f1:02:20:b6:77:dc:e7:b3:
2f:d1:1d:8a:c2:32:19:30:d7:9e:a7:74:12:23:87:37:c8:da:
44:43:b5:06:d0:f0:61:ba:79:4c:fe:b3:2e:74:27:82:fe:e0:
f6:76:1d:d6:bb:43:81:85:79:83:29:9e:3e:ec:c2:29:b1:c5:
c3:27:8e:9f:14:14:eb:58:45:09:ad:38:e1:8a:fd:98:42:dd:
a2:7e:c6:a5:2c:ff:d7:cc:ee:1e:ab:05:45:3d:df:b7:0a:92:
1a:38:fa:d5:9e:85:72:06:79:d5:1a:9b:b7:4a:a9:0c:c3:70:
bf:1d:4c:1c:f9:b1:b3:0b:e8:0d:a3:d5:73:67:3b:5d:f6:32:
ea:78:72:e6:3b:6d:65:22:c2:67:2c:90:45:32:78:2a:28:a9:
61:da:96:fc:cc:a7:14:91:ea:76:e4:94:6c:62:62:e4:0f:24:
e9:7b:ab:e4:95:22:a2:c1:3b:d4:ec:9e:9f:7e:08:89:fb:42:
64:18:5f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:28 2025 by rpki-client