Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/x4d-s4X_VbgyDSQtKadNF_3VWmM.roa
File: x4d-s4X_VbgyDSQtKadNF_3VWmM.roa (raw, json)
Hash identifier: v20KVCs+ku3PvpXSxLr+eskPWL7qEB96S8ggZAkCu8I=
Subject key identifier: C7:87:7E:B3:85:FF:55:B8:32:0D:24:2D:29:A7:4D:17:FD:D5:5A:63
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 081B2175
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/x4d-s4X_VbgyDSQtKadNF_3VWmM.roa
Signing time: Sat 01 Jan 2022 13:04:49 +0000
ROA not before: Sat 01 Jan 2022 13:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32181
IP address blocks: 89.19.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135995765 (0x81b2175)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jan 1 13:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7877eb385ff55b8320d242d29a74d17fdd55a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:19:6e:bd:f1:4b:d1:a1:ec:35:2e:77:88:
b6:a6:e9:d5:4f:e8:f2:dc:ce:6f:96:12:ae:72:ec:
6f:09:b6:76:cf:23:ca:c6:70:4e:6d:86:6f:72:11:
23:6c:5e:8f:04:0f:9a:8c:b8:6d:c7:c1:c7:c1:7b:
d6:4d:0d:3d:a1:b2:d4:07:2a:4b:ff:b8:7d:3f:79:
06:05:a5:af:71:b4:a3:33:de:a0:75:b8:3a:88:75:
69:d7:37:b0:73:42:f6:b0:ca:7c:94:b2:a4:b5:65:
75:be:e7:9c:af:99:22:ac:9c:51:f9:c2:12:e6:94:
9b:73:93:53:c2:a1:a4:94:5b:5a:78:4d:a0:2a:ef:
a5:d5:fd:f3:9b:0c:12:88:a9:c7:6f:da:60:e3:2c:
d5:d4:4d:64:f9:cb:29:c6:4c:21:71:99:c2:43:a0:
eb:fd:27:b2:91:bc:0e:c6:34:3e:e3:2f:12:15:0e:
7d:37:ef:8a:da:16:20:f3:57:31:09:6f:9a:9b:c8:
b2:24:20:88:ce:08:a7:51:88:bd:b1:43:a2:14:f0:
d0:e4:ba:aa:01:64:e8:15:b0:80:07:40:d7:fc:26:
10:ac:50:d0:b8:0a:34:f8:0c:fb:74:a3:ab:03:09:
97:6b:1f:71:72:3b:d9:53:a6:73:8e:a6:b5:4a:93:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:87:7E:B3:85:FF:55:B8:32:0D:24:2D:29:A7:4D:17:FD:D5:5A:63
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/x4d-s4X_VbgyDSQtKadNF_3VWmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.34.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c9:d6:65:36:25:cb:e6:3d:70:58:83:f3:14:a7:bb:2b:77:
38:a8:9e:ed:43:07:64:fe:6c:95:9a:c1:ef:65:9e:0b:b1:4c:
52:cf:ef:35:56:c9:6e:88:39:57:ea:20:aa:bf:61:38:5e:45:
44:26:6e:33:27:5e:bf:6a:b2:61:e3:79:43:53:15:d4:9f:5a:
07:88:f3:13:bc:9f:31:a0:99:ee:0b:8b:c4:56:e1:fc:f5:37:
17:7a:8a:4e:cd:e0:11:b1:eb:49:38:e4:e1:4e:66:ff:20:d9:
6b:b7:32:1b:db:f6:23:dc:b9:a1:e6:e6:81:74:0b:71:41:62:
c6:98:e0:c7:2e:59:1b:48:85:68:49:3b:51:c5:68:d7:65:f6:
a0:c9:6f:73:59:93:15:9a:6c:9d:ba:ec:0d:c8:94:97:d0:2d:
33:c7:f4:a4:be:ca:bc:fa:94:78:f3:8d:bf:dd:a6:83:38:7c:
c6:11:74:d6:9e:03:00:2f:ad:54:00:81:13:44:f2:16:77:98:
53:12:43:cb:11:7f:ff:f8:c4:5a:09:07:07:c8:fb:94:1d:65:
f6:f1:0d:65:5d:33:9e:e0:89:48:7f:d5:bd:fd:ab:53:b9:c1:
f2:3c:35:e6:f3:e8:44:e7:49:81:1b:a1:b2:9c:85:24:85:dd:
87:0f:3f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org