Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/jsDijW2QNSKYpIArpNi5l-Y6ASA.roa
File: jsDijW2QNSKYpIArpNi5l-Y6ASA.roa (raw, json)
Hash identifier: OaFJ96YnDOCLfa2NS86unsiJmHJteJX1VHWeWzoOLQc=
Subject key identifier: 8E:C0:E2:8D:6D:90:35:22:98:A4:80:2B:A4:D8:B9:97:E6:3A:01:20
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B2E5132
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/jsDijW2QNSKYpIArpNi5l-Y6ASA.roa
Signing time: Fri 03 Jun 2022 06:08:36 +0000
ROA not before: Fri 03 Jun 2022 06:08:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 89.116.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187584818 (0xb2e5132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 3 06:08:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ec0e28d6d90352298a4802ba4d8b997e63a0120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:bf:13:a9:8e:f9:7c:f2:2f:dd:06:68:00:
68:c5:ce:5f:08:b9:0a:56:4a:e2:33:fd:e2:24:08:
0b:1b:ae:ed:04:b8:00:ba:4b:ee:37:ee:03:c6:35:
ed:46:69:57:44:9d:91:4e:10:3e:6a:3e:39:7a:32:
ed:25:ae:21:f8:dc:04:ce:72:2b:70:5d:d9:3a:83:
89:81:24:a9:3d:6d:54:32:c3:cb:51:42:5d:e7:e1:
43:ad:2d:72:38:98:b8:03:d1:57:81:97:ee:5a:fe:
c8:16:a8:a1:95:f6:da:00:6b:09:bd:6d:c6:04:2a:
05:40:39:85:ac:7b:ab:9e:5b:90:32:d4:10:3e:98:
d5:79:44:f1:2c:73:5a:76:34:32:18:fa:05:bd:cf:
6d:c4:32:75:a3:84:9c:91:67:ca:ae:ca:7c:66:e3:
2e:44:15:85:97:92:e3:5d:b6:99:08:65:e9:00:0a:
85:be:53:87:e1:32:69:8c:99:b1:75:1a:ae:c9:54:
f4:7f:06:3e:ec:e7:59:16:db:ac:70:c0:29:d2:18:
8d:e6:07:fc:fb:65:90:58:fb:8f:4f:be:2e:f2:c1:
e7:b6:84:ba:2a:23:bd:08:fb:da:ff:ff:ff:d0:f7:
57:2a:d7:ff:e3:3b:5c:d8:74:2c:3a:f5:95:c4:51:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C0:E2:8D:6D:90:35:22:98:A4:80:2B:A4:D8:B9:97:E6:3A:01:20
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/jsDijW2QNSKYpIArpNi5l-Y6ASA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.241.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:46:5e:5a:f4:2a:90:ce:9f:42:0a:70:91:73:d0:63:20:2b:
e3:e3:bb:4a:65:d0:01:89:b1:90:ba:c5:8f:76:56:d6:4b:99:
5d:c2:52:b3:07:98:07:5b:7a:2b:90:3b:ed:1a:0a:a2:c5:67:
fe:c3:76:60:71:15:40:63:e5:3e:dd:28:14:35:22:65:9d:d0:
18:e5:0d:a7:ff:4d:e5:e3:39:f9:65:13:4f:07:2a:e9:5d:7d:
14:ad:50:6c:cc:50:e8:31:8c:c9:5d:5e:cf:f9:03:74:d9:05:
d4:dc:2e:f1:eb:9b:5d:9e:28:8e:e3:35:7b:62:c1:7d:d9:cd:
0c:2a:2c:bb:06:c2:ee:e0:7a:97:bb:05:78:fb:e5:fb:47:11:
91:33:22:ad:1d:6b:26:75:31:0e:49:35:80:e0:8d:e1:e9:a9:
47:29:92:15:4f:ee:4a:a6:05:f0:51:b0:cd:2e:a0:ca:bc:ce:
a7:dd:b0:8c:37:05:c3:34:d4:3f:b6:91:2c:63:1f:4c:42:29:
cf:10:a1:41:32:75:2e:6c:37:4e:ab:2d:47:97:1c:4f:b2:42:
8c:78:60:8e:fd:92:3c:95:42:8e:1f:a3:70:4a:35:7b:ff:07:
c2:79:53:93:ad:30:b0:a8:e2:d9:ff:ff:b4:1d:17:de:3e:4d:
19:61:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org