Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/2sxJOVC3YZByG232oxEGdMhbIWs.roa
File: 2sxJOVC3YZByG232oxEGdMhbIWs.roa (raw, json)
Hash identifier: F/rwmExPPFI5fMV9Daq9dywi2bPunCk6j/r5CUWB9No=
Subject key identifier: DA:CC:49:39:50:B7:61:90:72:1B:6D:F6:A3:11:06:74:C8:5B:21:6B
Certificate issuer: /CN=8912e418225da95d6a21302407923ff94549572b
Certificate serial: 2AA9051A
Authority key identifier: 89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/2sxJOVC3YZByG232oxEGdMhbIWs.roa
Signing time: Sat 01 Jan 2022 09:03:29 +0000
ROA not before: Sat 01 Jan 2022 09:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31323
IP address blocks: 89.223.1.0/24 maxlen: 24
89.223.12.0/24 maxlen: 24
87.249.55.0/24 maxlen: 24
92.255.40.0/23 maxlen: 23
89.104.118.0/24 maxlen: 24
2a02:28f8:2::/48 maxlen: 48
2a02:28f8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715719962 (0x2aa9051a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8912e418225da95d6a21302407923ff94549572b
Validity
Not Before: Jan 1 09:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dacc493950b76190721b6df6a3110674c85b216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:06:cd:91:1c:7e:e5:ef:06:40:5e:4c:bd:
6f:ff:4c:8e:98:76:38:0f:d8:24:2d:87:31:7f:6a:
9a:8f:e2:e1:81:07:67:04:c1:7f:f5:32:0b:f9:93:
65:9c:ad:39:cd:0d:b8:34:c4:18:b1:d7:15:0c:61:
d6:c6:de:1d:e0:a8:62:c7:46:b2:5d:e3:db:87:31:
1e:8a:85:b0:52:78:75:0a:3f:03:3c:8e:9d:be:47:
11:49:f2:d5:b0:9b:58:e7:3c:85:a0:5b:a1:1c:d9:
0f:c0:26:18:52:f9:f8:60:48:90:ac:be:af:30:1c:
e1:83:93:03:c0:dc:92:44:28:54:72:c8:e1:be:e4:
4d:22:ce:06:c9:04:26:9a:f1:df:94:ca:af:48:98:
50:86:e0:6e:3e:8e:83:df:d5:1a:c5:e0:26:ad:57:
8c:d1:a7:3a:e0:43:7a:35:0a:d3:09:b5:ca:74:4a:
88:cb:c6:9e:0a:9d:e1:5a:8b:51:ef:4b:dd:23:b3:
1d:33:e7:b0:e3:17:09:3a:39:39:4f:8b:db:64:1a:
a4:af:82:b2:a5:e1:be:e5:c3:14:1c:2c:5a:eb:ee:
31:ad:af:ca:cd:e9:b3:85:2a:20:ab:49:d0:4e:23:
f0:aa:87:81:ce:32:be:f4:fa:bc:d4:72:f8:15:84:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:49:39:50:B7:61:90:72:1B:6D:F6:A3:11:06:74:C8:5B:21:6B
X509v3 Authority Key Identifier:
keyid:89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/2sxJOVC3YZByG232oxEGdMhbIWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.249.55.0/24
89.104.118.0/24
89.223.1.0/24
89.223.12.0/24
92.255.40.0/23
IPv6:
2a02:28f8::/48
2a02:28f8:2::/48
Signature Algorithm: sha256WithRSAEncryption
39:97:b8:cc:1d:cc:ff:90:3f:2d:54:84:1b:39:e9:87:e7:7a:
f8:f6:7c:b5:07:08:a8:5f:1f:86:49:2c:ed:a3:f5:2e:71:72:
10:17:5c:5a:8e:bf:42:e6:55:c1:69:94:d4:69:79:5e:df:78:
cc:72:4c:30:7a:88:6f:7a:07:dc:99:33:11:24:de:38:a9:f2:
4c:58:fd:58:87:96:64:b7:95:6a:12:e5:7b:bb:64:55:99:32:
39:5b:7b:4e:ed:11:c3:51:bf:e5:04:78:20:da:b0:00:27:5f:
f1:71:f5:f4:ae:d4:61:92:98:40:c8:97:1e:60:a7:87:de:58:
1b:c4:db:3e:4a:75:16:6f:13:fb:a5:57:1f:62:12:f2:b7:c0:
b3:75:0e:70:62:42:c2:02:6c:0b:73:15:e5:a4:93:39:f2:69:
fe:0f:21:a7:e6:fc:8f:79:ba:9d:10:76:3c:46:a2:e5:a0:d0:
81:a9:8d:6b:92:ae:8c:ca:8f:b1:07:06:0b:aa:56:60:cc:f1:
61:1b:10:06:c7:b4:5b:04:ae:46:d0:2a:5e:7d:8a:0f:b0:26:
e6:f4:8e:a1:15:cb:ae:8d:73:8c:40:fc:cc:7a:e4:e5:60:42:
4f:51:e5:5c:01:9a:61:2c:24:28:65:92:70:da:b3:dc:7b:d3:
5b:30:12:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-fra.rpki-client.org