Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/j7rR65GKfIt-HddFOk190g2kCYY.roa
File: j7rR65GKfIt-HddFOk190g2kCYY.roa (raw, json)
Hash identifier: EF/PGkJUNT3RP4vtnExPExAA/63aYMRKA9DD1NNC100=
Subject key identifier: 8F:BA:D1:EB:91:8A:7C:8B:7E:1D:D7:45:3A:4D:7D:D2:0D:A4:09:86
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 088EB4B8
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/j7rR65GKfIt-HddFOk190g2kCYY.roa
Signing time: Tue 15 Feb 2022 12:15:34 +0000
ROA not before: Tue 15 Feb 2022 12:15:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 89.19.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143570104 (0x88eb4b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Feb 15 12:15:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8fbad1eb918a7c8b7e1dd7453a4d7dd20da40986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:20:85:21:65:87:88:14:7b:da:a2:99:f9:
83:74:26:b8:ac:11:3f:53:f4:75:8d:3b:19:0b:e9:
84:b9:f0:7b:43:1a:49:bb:c6:99:f4:ea:57:28:27:
14:df:bf:be:a4:62:be:54:bc:b9:b2:79:3f:ab:57:
b1:a2:d5:d7:9c:5f:5d:7f:b7:39:79:3e:26:4a:68:
b4:5d:9f:a9:30:ee:a5:91:cc:f4:66:e0:68:df:de:
99:f4:9a:8a:89:8c:af:35:05:ee:73:4c:2c:f7:3b:
61:cb:45:d7:dc:e9:1c:76:be:87:cd:f9:26:3b:ac:
8c:55:89:9d:4d:a0:f1:ab:4e:c7:1d:f3:8a:7f:6d:
9c:76:8a:1f:1c:d0:37:8c:63:53:b0:c4:6f:5c:6c:
db:4d:1a:84:e8:db:33:2e:49:ef:55:3e:ef:e1:7c:
74:34:f6:fe:9a:79:77:09:4a:71:31:e3:8f:79:76:
68:a1:e3:90:2e:61:c7:e7:51:5a:2b:fe:47:89:f2:
6a:df:c0:f0:99:76:50:fd:95:87:d9:5d:02:dd:63:
b4:b9:2b:1a:3a:d5:bb:71:29:8e:f0:96:ed:28:c5:
cc:89:de:2c:5d:47:1b:63:c1:b4:1d:d7:8d:6b:54:
72:7f:62:cf:26:d1:eb:c0:59:19:4e:f2:63:35:83:
87:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BA:D1:EB:91:8A:7C:8B:7E:1D:D7:45:3A:4D:7D:D2:0D:A4:09:86
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/j7rR65GKfIt-HddFOk190g2kCYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:7e:15:61:23:77:71:3d:cf:e9:7d:78:14:99:2c:6c:fe:c5:
19:53:2f:6f:c0:27:42:fb:f7:49:b3:16:1d:3e:a1:6b:d9:74:
3d:fa:31:22:9f:b4:43:b6:70:7e:01:40:55:d0:0e:0d:20:57:
18:75:2f:9f:13:3c:07:e9:80:14:82:7a:36:13:08:70:fc:3a:
cf:56:5b:d2:3d:b3:61:da:b6:0c:c2:49:1f:ce:16:2b:6c:bd:
b9:c0:c4:8b:a3:73:6a:3f:92:00:3d:4a:a2:7f:3d:50:46:1e:
9d:14:35:84:8b:68:82:3b:df:3a:dc:c1:00:8b:7a:6a:d1:e1:
ea:e5:0d:c0:a6:c9:8e:e6:d4:55:14:e4:7e:1a:65:a2:b5:d9:
2d:e3:e4:ab:a0:58:4d:32:71:f8:09:fd:65:82:a3:c5:d5:f3:
b8:57:2d:e3:c7:38:92:43:55:ea:a9:ab:c4:f8:e4:f3:25:1f:
46:5e:a7:0f:39:6d:91:69:e3:62:a4:f0:c5:13:4d:20:a6:65:
dd:d9:56:02:e9:5b:6d:cc:7f:62:b4:c6:52:17:97:8e:af:70:
53:24:fa:69:41:9a:17:8a:ec:bf:47:f1:2c:0a:a1:f1:e6:3c:
dd:db:bd:b9:74:10:fc:73:91:e4:c9:ee:48:01:f8:b7:67:25:
b2:1e:ad:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org