Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/108e6a-eafa-4f50-addc-25aed7a6398b/1/n89OYZJgi20-p3Xnp7EMujLIqUA.roa
File: n89OYZJgi20-p3Xnp7EMujLIqUA.roa (raw, json)
Hash identifier: oRut0TgnVNnhFUecJIcBLeBlLR4bGghNRfgJcZER42E=
Subject key identifier: 9F:CF:4E:61:92:60:8B:6D:3E:A7:75:E7:A7:B1:0C:BA:32:C8:A9:40
Certificate issuer: /CN=430d27a2a09d059315a2746ce5934b6cc91c1066
Certificate serial: 01870E189DBEDE0C6F44C6713FE7CD6ADF4A
Authority key identifier: 43:0D:27:A2:A0:9D:05:93:15:A2:74:6C:E5:93:4B:6C:C9:1C:10:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw0noqCdBZMVonRs5ZNLbMkcEGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/108e6a-eafa-4f50-addc-25aed7a6398b/1/n89OYZJgi20-p3Xnp7EMujLIqUA.roa
Signing time: Thu 23 Mar 2023 10:51:46 +0000
ROA not before: Thu 23 Mar 2023 10:51:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 146.19.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:18:9d:be:de:0c:6f:44:c6:71:3f:e7:cd:6a:df:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430d27a2a09d059315a2746ce5934b6cc91c1066
Validity
Not Before: Mar 23 10:51:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fcf4e6192608b6d3ea775e7a7b10cba32c8a940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:6c:7e:56:75:56:20:32:b2:f8:f3:10:1b:
bb:bf:54:0d:b2:d5:7c:9f:0f:0b:83:9f:56:29:30:
66:1b:8a:05:3a:c2:d3:8c:e0:a8:e2:18:c8:8e:df:
c9:82:95:89:8a:a3:32:e0:2d:3c:dd:8d:dc:d0:a0:
a6:3a:18:74:35:35:58:b9:2d:8f:f5:34:09:f4:63:
a7:ed:37:13:16:5e:f7:f7:2c:48:2e:08:ca:b2:fb:
23:aa:6d:56:96:41:72:2e:ba:02:d9:18:57:0b:6d:
78:7d:7e:3b:1b:64:03:fb:36:30:43:9e:a6:b2:f4:
db:0f:8a:84:15:79:4a:22:2d:64:78:88:25:97:35:
4b:15:30:b2:fe:ee:9d:f4:2f:e4:7b:c3:9f:53:a7:
ac:0b:98:8d:18:fa:b4:85:c7:20:60:d4:9e:e7:1f:
39:0d:e7:d3:a1:5c:d6:44:18:f6:57:ea:1a:32:fa:
69:ba:df:9c:59:d3:b6:c0:e3:6a:7c:ff:12:7a:8e:
46:c3:d4:78:87:83:df:13:15:c3:de:21:e5:9b:bd:
56:d1:28:0c:16:fe:1a:35:70:0d:58:f2:3e:37:5d:
6b:0d:1d:ab:97:03:d5:6a:7b:cf:fb:c1:eb:2a:38:
bc:4e:69:62:3e:60:96:52:e9:a3:39:14:11:02:e6:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:4E:61:92:60:8B:6D:3E:A7:75:E7:A7:B1:0C:BA:32:C8:A9:40
X509v3 Authority Key Identifier:
keyid:43:0D:27:A2:A0:9D:05:93:15:A2:74:6C:E5:93:4B:6C:C9:1C:10:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw0noqCdBZMVonRs5ZNLbMkcEGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/108e6a-eafa-4f50-addc-25aed7a6398b/1/n89OYZJgi20-p3Xnp7EMujLIqUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/108e6a-eafa-4f50-addc-25aed7a6398b/1/Qw0noqCdBZMVonRs5ZNLbMkcEGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.247.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:57:7f:ea:af:18:53:a8:92:fd:d5:2b:62:eb:0c:22:ab:43:
e6:09:49:ca:32:73:ec:e7:1c:42:20:dc:19:00:24:3c:2b:6f:
94:8a:f3:bc:8a:85:7c:61:ac:22:92:28:ca:a8:ea:04:bc:0a:
82:2e:73:b3:ff:d8:fa:d9:07:35:1e:01:db:42:4a:05:f4:3a:
97:bf:73:d6:9d:c4:6c:c8:ed:00:ae:94:ca:64:a5:23:35:6b:
16:dc:cf:ea:72:f0:7b:5f:6c:5e:71:32:67:1c:af:9b:8d:d9:
2c:ab:d1:9c:92:ef:b3:9f:de:3d:18:74:b1:30:f2:e1:0a:d6:
b2:18:6f:96:21:53:5b:d2:2d:33:44:d0:ad:71:1e:b5:92:50:
6a:b8:f4:66:0c:7b:77:d1:1e:1e:22:bf:3b:64:5a:7b:d0:ee:
86:6f:16:86:3b:6a:2c:59:af:ac:57:55:e1:81:41:12:48:e2:
b2:ce:f2:b9:d4:3c:73:99:28:c8:3c:f1:41:78:71:25:f9:86:
6c:61:92:b9:b4:64:e0:e0:9e:c1:59:2f:e4:3e:cc:0c:1a:d8:
05:90:95:7a:18:15:1e:fb:b2:27:06:af:c1:ae:72:b4:fc:89:
c3:91:ff:76:37:ba:4b:fc:5e:95:81:cf:cf:2f:cf:c8:27:04:
f1:be:8d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 8 10:27:26 2023 by rpki-client on console-fra.rpki-client.org