Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/sbQDLR7g7e_l1ajLVaksElLKneU.roa
File: sbQDLR7g7e_l1ajLVaksElLKneU.roa (raw, json)
Hash identifier: Nsb3J0ir1V0nmEFcc0/cH5WXuegCjOuVtX7Di5GeY+U=
Subject key identifier: B1:B4:03:2D:1E:E0:ED:EF:E5:D5:A8:CB:55:A9:2C:12:52:CA:9D:E5
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 0185431584827D69DB6BC53A416C79456022
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/sbQDLR7g7e_l1ajLVaksElLKneU.roa
Signing time: Sat 24 Dec 2022 07:42:41 +0000
ROA not before: Sat 24 Dec 2022 07:42:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14576
IP address blocks: 89.19.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:15:84:82:7d:69:db:6b:c5:3a:41:6c:79:45:60:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Dec 24 07:42:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1b4032d1ee0edefe5d5a8cb55a92c1252ca9de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:ce:56:d6:8c:cc:76:35:c1:57:e8:c0:69:
dc:7a:3a:4a:08:2d:14:e8:62:d5:3e:c9:45:4f:b5:
4a:2d:04:64:b5:e9:ba:de:30:1f:e4:83:a3:84:c5:
a8:04:49:d8:90:75:d4:89:c8:ee:ef:9a:6a:8b:e7:
31:17:8d:ac:c1:06:45:1f:66:55:de:9b:56:ca:49:
40:97:6e:ff:87:a2:b3:09:a4:ce:03:15:7e:e2:f8:
e3:0d:f7:2f:a9:3c:9a:97:09:39:53:a6:3c:0e:d1:
7e:fa:aa:bc:00:4e:80:73:f6:d1:e5:d7:83:eb:50:
45:a9:c2:cd:7f:74:1e:00:6f:27:dc:93:ae:96:9a:
54:9d:9e:2e:88:6e:e6:3e:cf:74:c7:dd:73:f3:44:
05:cc:de:83:49:d1:e9:97:a6:7b:a5:a6:64:c8:e9:
cb:76:b8:96:60:d1:fb:9f:72:c4:97:c5:91:01:8f:
16:00:5e:b4:67:a8:01:5a:45:30:40:ff:0c:7b:fd:
75:4e:60:1d:57:a0:5b:cd:c0:61:af:ef:75:de:5f:
7f:32:f2:c8:30:80:88:3f:6b:de:1b:c5:d9:2f:b8:
e4:b5:54:03:57:9b:31:cc:e4:bd:e9:a0:9c:64:11:
af:8c:99:cc:56:b5:b1:56:bb:50:2e:52:fe:38:9b:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B4:03:2D:1E:E0:ED:EF:E5:D5:A8:CB:55:A9:2C:12:52:CA:9D:E5
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/sbQDLR7g7e_l1ajLVaksElLKneU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:37:52:0f:1a:3b:23:a8:e1:55:23:7e:16:01:3f:cf:72:33:
f4:a6:3a:90:ea:02:01:f2:89:42:48:0f:70:e5:37:72:14:27:
f6:c2:46:29:23:57:68:71:87:13:80:4e:6d:f7:3e:cd:1a:ce:
52:4d:76:a8:24:44:b4:d5:8c:36:9a:4e:b1:cf:7e:0b:ac:fb:
d5:87:f0:a2:36:ae:0d:bf:0c:34:c4:6b:be:97:84:c4:c1:a8:
8e:1b:5b:27:01:b6:f5:1c:f6:b1:d7:eb:85:36:d5:f9:0e:0c:
a2:29:b9:37:6c:e4:ae:42:a8:5a:98:64:bb:61:4a:00:d9:4c:
30:d0:30:38:9e:67:7b:c9:f2:0b:8d:97:da:b3:76:99:06:6b:
30:6b:f6:5a:57:9d:0f:47:d1:d4:2c:14:7c:b5:db:43:7d:f3:
dc:fd:ad:5b:df:d7:4b:00:23:74:56:00:39:af:ea:66:5f:0b:
09:61:00:61:f3:b1:f3:07:fa:dc:09:3e:07:56:23:63:e2:88:
d6:8f:60:7d:31:43:2a:1e:6c:d0:bf:6d:69:98:83:f2:8e:95:
f3:c9:c6:ee:45:7a:e1:3e:e0:56:25:fa:0b:66:91:f1:74:87:
08:5a:9a:32:7b:0b:4b:03:13:0d:ba:71:cf:6c:ea:84:e3:af:
3e:f1:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org