Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/7Uo9CiwZHsO_7mqB2lT_NPFMH3c.roa
File: 7Uo9CiwZHsO_7mqB2lT_NPFMH3c.roa (raw, json)
Hash identifier: BxsVA3TBLi5aOPBYLEALFFCgKooQ86qc/BCkkbZV7H0=
Subject key identifier: ED:4A:3D:0A:2C:19:1E:C3:BF:EE:6A:81:DA:54:FF:34:F1:4C:1F:77
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 046DFF25
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/7Uo9CiwZHsO_7mqB2lT_NPFMH3c.roa
Signing time: Tue 14 Jun 2022 13:02:44 +0000
ROA not before: Tue 14 Jun 2022 13:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212174
IP address blocks: 89.35.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74317605 (0x46dff25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Jun 14 13:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed4a3d0a2c191ec3bfee6a81da54ff34f14c1f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:30:7c:2e:f0:c8:cd:ab:63:ec:d5:60:6f:
ae:f7:35:c4:2a:94:40:05:84:fe:d7:dd:2b:42:2f:
ad:71:c6:b7:4d:07:9b:aa:e6:c5:2e:14:97:8b:57:
cf:72:bf:85:97:2a:1a:0d:ce:fb:39:ff:fb:c4:b6:
14:de:9f:68:66:ac:a5:b0:ec:52:28:63:36:a9:d6:
0c:74:9e:d7:03:b4:cd:ef:f0:07:53:9b:39:16:f1:
ac:e7:96:fe:8f:51:3e:15:ba:40:ba:b9:f6:84:1a:
77:16:c2:68:a5:18:4c:7c:48:f2:9f:b8:9a:a9:f9:
9e:46:0e:03:55:90:23:55:bf:6f:7d:0f:99:78:59:
98:8a:da:c7:da:bc:85:02:db:09:45:5e:49:2f:fa:
6e:1d:3c:bb:6f:20:0f:bc:48:71:8c:e8:5c:af:be:
ef:b7:de:e1:36:02:1d:ec:ce:63:59:14:54:cb:5c:
c5:10:82:30:a3:48:84:c1:7d:94:3a:59:6c:1a:96:
4e:84:56:15:5f:17:dd:96:6c:f2:9b:55:12:1d:f2:
81:a5:a1:42:ee:4c:d9:f5:6f:db:2e:49:9d:eb:c9:
24:d2:4d:0d:8b:64:de:8c:ed:44:5c:49:4d:39:50:
32:f5:88:ae:95:fa:64:eb:9c:e3:3d:53:48:8f:f6:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4A:3D:0A:2C:19:1E:C3:BF:EE:6A:81:DA:54:FF:34:F1:4C:1F:77
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/7Uo9CiwZHsO_7mqB2lT_NPFMH3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.233.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:c3:5f:7d:a6:f5:e9:5c:d7:9e:38:4e:ea:3d:92:b6:3f:fd:
18:f4:83:18:1e:89:8b:97:3c:fe:08:4f:4d:d9:76:0d:05:8f:
c1:c9:1f:5a:07:49:c0:f1:5c:d8:8b:23:de:05:5c:6a:5b:62:
85:32:1e:e8:7b:41:2b:35:95:fb:a3:a0:0b:e7:7a:1f:f2:a2:
c7:b4:9b:c6:37:c5:d9:fe:24:68:e4:33:4c:eb:e2:1c:21:c3:
c8:3f:10:36:3a:72:db:48:bb:1c:b8:0e:28:b1:12:c5:63:30:
8e:1f:a9:d8:d7:60:15:ba:16:77:fb:d0:d1:a3:90:d7:b5:68:
5c:e2:40:cd:86:ec:02:f9:27:ae:35:31:e9:50:8c:46:f3:6f:
1d:8c:50:85:3e:d0:13:1a:a5:c0:23:8f:24:77:d8:54:d9:22:
8b:83:7c:22:d8:0f:45:3e:a3:d6:b6:e8:3e:a4:55:2a:40:f6:
b7:49:8f:71:e2:ab:68:83:26:a9:fe:c2:d8:83:7b:c3:1c:2d:
0a:5e:c3:73:05:59:56:89:63:51:2d:88:61:07:79:53:90:aa:
e3:92:f9:f7:90:de:e7:26:55:4e:bd:bc:46:5e:e3:e1:e6:ae:
6b:8b:fc:f2:6d:39:03:dc:86:49:2e:76:c4:b5:57:09:b0:d1:
b0:81:7b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:33 2024 by rpki-client on console-ams.rpki-client.org