Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/j_Yh0jmyNQj8jqUTCEjXspu9G0o.roa
File: j_Yh0jmyNQj8jqUTCEjXspu9G0o.roa (raw, json)
Hash identifier: xZXD97Y/bfJ8awKHkRYBXaFRFkCLNkQdL17dGyQ23XE=
Subject key identifier: 8F:F6:21:D2:39:B2:35:08:FC:8E:A5:13:08:48:D7:B2:9B:BD:1B:4A
Certificate issuer: /CN=8912e418225da95d6a21302407923ff94549572b
Certificate serial: 2AAD4F66
Authority key identifier: 89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/j_Yh0jmyNQj8jqUTCEjXspu9G0o.roa
Signing time: Sat 01 Jan 2022 09:03:31 +0000
ROA not before: Sat 01 Jan 2022 09:03:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48261
IP address blocks: 89.223.1.0/24 maxlen: 24
87.249.55.0/24 maxlen: 24
89.104.97.0/24 maxlen: 24
89.104.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 716001126 (0x2aad4f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8912e418225da95d6a21302407923ff94549572b
Validity
Not Before: Jan 1 09:03:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ff621d239b23508fc8ea5130848d7b29bbd1b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:60:4d:38:f1:a6:e8:00:46:d4:bd:f4:46:
aa:4f:51:bf:14:6b:4c:a3:a2:65:7e:cc:1b:b3:79:
a3:29:56:f5:db:af:19:55:d4:94:a8:72:ab:fd:b2:
e1:45:a3:89:59:ff:ff:9f:a3:2b:e0:f2:aa:b9:e5:
f8:a2:42:7e:55:63:bb:32:01:8e:22:ff:30:ce:69:
18:7c:e1:c7:18:82:10:6d:04:83:4e:c7:37:aa:d1:
49:14:b6:6f:32:a3:2d:cd:c2:29:72:08:b0:cf:b1:
af:27:51:f8:4f:02:f4:85:86:0a:91:25:f3:ea:db:
59:5e:94:4d:c0:14:73:60:7a:6d:24:bc:68:c3:af:
bd:e1:0c:99:2b:2f:c0:63:98:2d:15:c8:a0:59:09:
34:43:5d:8d:a1:68:da:e1:32:9e:85:d0:3b:8c:21:
c1:90:f4:c0:1e:b0:97:27:f4:55:9b:8f:57:39:66:
cd:92:2d:40:0e:a2:b2:b6:25:74:23:9c:ae:e1:79:
89:07:4a:09:27:4b:ef:00:79:31:c3:dc:eb:db:f0:
4e:12:64:10:90:83:bb:c3:3a:96:4e:81:44:b0:d2:
87:51:a7:db:6e:9d:4d:ff:40:6f:05:12:7c:af:12:
ec:fd:93:9b:77:a9:29:bd:8b:e9:a8:4d:91:ab:d1:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F6:21:D2:39:B2:35:08:FC:8E:A5:13:08:48:D7:B2:9B:BD:1B:4A
X509v3 Authority Key Identifier:
keyid:89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/j_Yh0jmyNQj8jqUTCEjXspu9G0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.249.55.0/24
89.104.97.0/24
89.104.118.0/24
89.223.1.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:a2:0f:9d:9b:69:f1:39:9e:6d:2e:b9:be:6c:f6:d8:76:8e:
a9:42:77:f3:3f:60:90:b7:2d:bd:71:6d:7a:cd:69:6e:47:37:
bd:7d:33:9c:87:f5:c1:8d:28:1d:c7:ab:78:b6:37:56:7e:ed:
79:5e:14:64:43:0a:2d:fd:ba:f0:07:9a:ec:79:c8:20:f5:4c:
62:25:a2:a8:1a:aa:1f:63:e8:1b:82:f3:ba:11:29:82:cf:64:
f4:83:b8:de:d2:71:6a:9a:73:32:c2:24:84:2e:e1:4b:af:ea:
1d:0d:9e:38:da:ec:93:80:5c:67:0f:7b:2e:10:c8:ea:b8:4d:
f1:8b:0f:4d:85:a2:d9:40:e3:ab:21:37:34:fb:7e:ed:40:ea:
71:05:14:85:34:99:03:e6:df:7a:07:99:d2:d6:61:e3:ae:49:
08:ac:91:ce:0f:59:03:6d:2d:dc:2f:61:8d:25:02:42:bb:53:
90:5a:1e:db:72:42:7e:e5:4b:bb:2c:be:29:cc:99:58:86:9c:
93:54:e9:73:d6:8a:07:6d:1d:b4:e0:33:12:43:a5:21:ec:6d:
e1:db:da:66:31:37:72:a4:8f:55:b5:17:4b:4b:88:15:6b:f9:
5e:91:2b:f2:a1:1c:f9:ed:ff:49:b3:14:5e:67:e1:e2:b2:7e:
a9:a9:83:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:32 2024 by rpki-client on console-ams.rpki-client.org