Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/L3r--4Eb2JkMZXgblnASvpvkDFg.roa
File: L3r--4Eb2JkMZXgblnASvpvkDFg.roa (raw, json)
Hash identifier: WcFJV2mLQeDaSgsE5yLEGUC05WCvEtL90+qJNkDarbU=
Subject key identifier: 2F:7A:FE:FB:81:1B:D8:99:0C:65:78:1B:96:70:12:BE:9B:E4:0C:58
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 08EB3312
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/L3r--4Eb2JkMZXgblnASvpvkDFg.roa
Signing time: Tue 22 Mar 2022 15:56:41 +0000
ROA not before: Tue 22 Mar 2022 15:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35830
IP address blocks: 89.19.35.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149631762 (0x8eb3312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Mar 22 15:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f7afefb811bd8990c65781b967012be9be40c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ea:9f:3e:79:67:21:9a:48:a8:4b:62:e3:cb:
ce:e7:52:fb:9e:37:2a:f6:26:2a:dc:77:61:bf:8c:
ad:c8:33:85:17:e3:ef:2c:ed:73:df:43:0f:1c:1e:
9c:71:ff:43:3a:29:95:d5:31:71:82:79:e0:e6:e5:
bb:98:9b:e4:30:bb:b5:72:29:55:08:d2:b6:40:e3:
44:6b:a7:0b:7a:d2:74:95:16:6e:93:85:3f:b7:0e:
90:55:68:69:a3:e8:51:9c:4f:2b:a9:2b:5b:c4:9d:
dc:b8:0a:b9:22:1b:21:97:e6:07:96:83:0c:5a:8a:
aa:90:37:d8:9b:86:1e:72:f8:10:52:0c:59:b0:26:
cd:b0:41:0a:8c:e6:62:cc:89:78:3d:64:ec:ad:73:
b4:5a:87:b8:1e:3a:ba:54:02:24:b1:9f:ad:05:c2:
0f:fd:b8:e1:b3:89:c8:6c:cd:07:ed:d1:24:25:6c:
24:79:06:7d:2f:c9:0a:91:e2:b1:95:4f:be:92:a8:
c6:d1:43:d4:82:3b:dc:53:2b:76:ed:89:8c:8e:43:
60:2e:da:ce:8b:c2:65:41:46:5a:ab:89:a1:d9:a4:
d5:90:d3:e8:56:a4:95:ce:e6:bc:3d:60:61:86:38:
5b:93:32:ef:f6:fd:15:44:25:ac:0c:dc:85:75:ce:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7A:FE:FB:81:1B:D8:99:0C:65:78:1B:96:70:12:BE:9B:E4:0C:58
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/L3r--4Eb2JkMZXgblnASvpvkDFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.35.0/24
Signature Algorithm: sha256WithRSAEncryption
86:0c:72:46:70:59:4a:a7:54:43:6e:54:16:36:9e:03:1a:5e:
eb:dc:de:a8:52:00:b7:68:f1:9d:4a:14:41:71:5d:28:15:27:
57:17:27:d8:3a:10:03:f4:ea:88:ab:ad:34:bf:95:ed:a6:da:
c3:0e:e9:81:fb:80:c5:5c:ef:db:c3:8f:9c:8b:04:eb:a2:57:
4e:5f:56:93:d9:9e:48:a6:00:c4:ba:d9:7a:9e:88:20:28:79:
4e:ad:42:32:d6:dd:0c:d0:39:18:6d:2c:e7:40:72:ed:47:1c:
cb:02:22:d3:95:a2:64:8f:1d:68:6c:7a:96:cb:a6:36:52:68:
87:bf:9b:1b:d1:6e:de:e6:c5:e5:27:bc:a0:36:6b:35:76:70:
c9:20:d9:38:ce:02:0e:7b:d4:98:b0:6f:95:c4:d2:56:14:98:
de:23:59:6a:61:58:2b:97:28:b5:e5:d5:a0:5c:98:af:76:de:
88:be:a0:65:97:54:4d:32:ed:fe:92:31:6f:30:50:ef:8b:56:
d7:5e:18:44:b0:aa:be:b3:ed:88:8e:25:b8:43:70:d4:33:38:
d5:6d:87:bd:21:e6:00:b4:28:35:86:65:0f:1c:7b:d4:0e:8e:
cb:98:b0:e1:bb:31:ea:62:c8:59:c3:00:cf:64:e6:b4:db:3f:
c2:6c:db:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org