Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/J5AaAzKSK5hfJk4zRDfYOgqkbEw.roa
File: J5AaAzKSK5hfJk4zRDfYOgqkbEw.roa (raw, json)
Hash identifier: vmUWx0D3pAQz9FY75qyCIM0rRypH8Dk96vWG8LnFZHY=
Subject key identifier: 27:90:1A:03:32:92:2B:98:5F:26:4E:33:44:37:D8:3A:0A:A4:6C:4C
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 01848EED6FFB3C53FA7F20AD7C0A8E6ED48E
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/J5AaAzKSK5hfJk4zRDfYOgqkbEw.roa
Signing time: Sat 19 Nov 2022 08:07:16 +0000
ROA not before: Sat 19 Nov 2022 08:07:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61002
IP address blocks: 89.35.60.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8e:ed:6f:fb:3c:53:fa:7f:20:ad:7c:0a:8e:6e:d4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Nov 19 08:07:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=27901a0332922b985f264e334437d83a0aa46c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:08:1f:ed:ba:1d:81:b8:44:4d:bd:62:e4:
73:f6:c0:75:7a:55:64:99:e2:f2:c1:35:5a:c2:95:
72:52:1e:7d:4e:c1:fc:49:e2:87:fa:b8:c9:11:58:
e1:51:e4:22:45:17:a9:7b:08:f0:e6:f2:d9:04:b7:
50:0e:f7:ea:b7:8f:9a:f4:18:c0:e4:e5:85:c6:41:
72:51:26:34:72:7e:87:52:b0:9c:97:e8:e7:c4:6b:
d3:d8:45:d8:f5:31:b4:58:7e:77:fd:14:ef:bb:50:
1e:38:9c:5e:1d:2e:43:8f:e2:6d:d7:a1:a7:f0:d9:
ea:e6:6f:b7:46:17:9b:a0:33:ad:75:52:dc:51:a9:
dd:ef:13:29:fc:68:70:9c:48:1e:61:31:dd:1d:97:
28:4f:f5:52:36:57:33:77:d1:0a:79:ac:a2:ae:94:
44:df:89:a9:1a:9d:72:61:49:33:36:be:5f:67:bd:
2e:05:0a:f5:9f:bf:74:ca:79:0a:8c:0c:91:52:96:
b5:93:0b:54:bd:d7:f0:72:7d:9b:03:b8:10:78:6a:
2c:ff:40:31:e6:f3:70:99:d2:bd:5b:5e:98:a0:f7:
e7:bb:96:4f:12:3c:64:6f:65:9f:bf:e0:c7:cd:90:
a1:87:65:3e:70:31:4e:e2:d0:20:7d:09:0e:36:fc:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:90:1A:03:32:92:2B:98:5F:26:4E:33:44:37:D8:3A:0A:A4:6C:4C
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/J5AaAzKSK5hfJk4zRDfYOgqkbEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.60.0/23
Signature Algorithm: sha256WithRSAEncryption
73:8e:d4:10:68:c6:80:9c:ed:b0:7c:28:60:f2:eb:f7:d3:6a:
db:d6:3f:9a:b6:ad:55:d9:9e:e7:c4:31:6a:0e:2b:03:5e:64:
5b:41:92:30:24:22:46:ae:5c:ba:d2:85:96:17:75:02:1f:e9:
b2:29:69:42:e7:4f:a2:0d:ff:d7:d4:e9:e1:e7:e0:94:d3:bd:
5d:52:f6:34:a5:4f:57:97:bb:46:e6:e4:b0:4f:52:48:d2:a1:
84:ff:d2:6e:f3:99:84:df:8a:e6:af:5a:19:9b:53:66:64:a3:
79:a9:75:47:6f:06:1d:cd:ac:fb:99:6d:ea:a9:c2:8f:74:6f:
4d:12:71:bb:c2:17:cd:0d:95:2b:3b:9a:0a:99:53:46:76:14:
4b:cc:25:a2:07:b1:ef:aa:aa:d9:13:af:3c:e8:99:71:37:62:
48:f7:e0:c4:3c:ad:35:cf:00:03:5b:a2:86:df:b8:03:e2:45:
d1:1d:1a:52:2e:12:1e:ea:59:68:2d:22:36:83:13:a3:d0:5a:
62:fc:ce:9f:86:de:01:04:42:2f:02:03:f1:47:0e:e9:b9:10:
e3:e3:8a:f4:8d:00:45:65:19:17:40:d8:71:a4:f3:c8:fe:b5:
0b:57:68:ab:f0:cf:fb:7d:d6:fc:33:31:4b:0e:1e:a3:dd:49:
90:57:4d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:33 2024 by rpki-client on console-ams.rpki-client.org