Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f72326-e47f-4436-b0f2-6bc5de79b54e/1/8zZDIcr2dnBwQoXbuMYC5qjkwXM.roa
File: 8zZDIcr2dnBwQoXbuMYC5qjkwXM.roa (raw, json)
Hash identifier: M4425JFjU9rpvwzIhxtuY8VSmCGCmCu3vzwgj1HYVs0=
Subject key identifier: F3:36:43:21:CA:F6:76:70:70:42:85:DB:B8:C6:02:E6:A8:E4:C1:73
Certificate issuer: /CN=dfda2ff3d9f3c590554417a5f5a8c9d68c7a5453
Certificate serial: 018538DD618DC72BA4ECB153FE5DFE6F1897
Authority key identifier: DF:DA:2F:F3:D9:F3:C5:90:55:44:17:A5:F5:A8:C9:D6:8C:7A:54:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39ov89nzxZBVRBel9ajJ1ox6VFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f72326-e47f-4436-b0f2-6bc5de79b54e/1/8zZDIcr2dnBwQoXbuMYC5qjkwXM.roa
Signing time: Thu 22 Dec 2022 08:05:10 +0000
ROA not before: Thu 22 Dec 2022 08:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200348
IP address blocks: 185.179.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:38:dd:61:8d:c7:2b:a4:ec:b1:53:fe:5d:fe:6f:18:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfda2ff3d9f3c590554417a5f5a8c9d68c7a5453
Validity
Not Before: Dec 22 08:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3364321caf67670704285dbb8c602e6a8e4c173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:82:9f:d6:5c:24:5e:66:0e:47:95:50:42:
7b:95:d5:f7:b6:aa:03:94:2a:e7:a5:e0:37:77:a5:
65:34:88:96:cc:16:62:4c:97:e7:29:d7:bc:3b:ee:
81:e2:85:b8:47:81:6b:3a:75:18:fb:f9:ee:09:df:
5c:a1:0d:0c:89:d9:37:cf:d2:4a:3c:12:36:17:21:
bb:dc:96:e6:65:f8:7b:a9:6b:db:56:cb:37:81:bd:
92:8c:f0:0f:cb:4d:33:55:2e:44:7c:ce:56:fd:67:
c2:7b:8d:23:a8:cd:dc:cd:c8:a2:27:28:e2:7f:31:
ab:9a:e2:57:93:56:40:60:0a:66:81:88:94:8f:70:
f1:3f:aa:fc:d9:ef:54:0c:fd:68:3b:c0:55:e4:70:
86:5f:ac:59:91:eb:24:60:7b:0d:53:37:70:9a:b0:
f3:f2:6c:cc:cd:4c:ba:30:b5:92:aa:0c:30:d2:d2:
35:c4:84:19:ff:22:a8:ff:0b:7a:2e:ad:d4:c8:3d:
2b:14:53:80:1d:77:1c:c0:12:ee:12:13:c8:5d:cb:
b9:92:be:89:81:67:69:97:8f:39:f8:1e:65:e1:27:
24:0d:1d:4d:b3:85:c2:f1:e9:71:95:ce:2a:02:c2:
84:51:ea:f9:3a:27:40:c7:91:51:9d:b8:f6:b8:9c:
ee:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:36:43:21:CA:F6:76:70:70:42:85:DB:B8:C6:02:E6:A8:E4:C1:73
X509v3 Authority Key Identifier:
keyid:DF:DA:2F:F3:D9:F3:C5:90:55:44:17:A5:F5:A8:C9:D6:8C:7A:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39ov89nzxZBVRBel9ajJ1ox6VFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f72326-e47f-4436-b0f2-6bc5de79b54e/1/8zZDIcr2dnBwQoXbuMYC5qjkwXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f72326-e47f-4436-b0f2-6bc5de79b54e/1/39ov89nzxZBVRBel9ajJ1ox6VFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.89.0/24
Signature Algorithm: sha256WithRSAEncryption
78:00:79:da:25:fd:4a:7e:07:47:52:30:21:39:47:36:8e:5a:
6d:c2:df:b6:81:1c:8f:98:41:89:d2:3c:73:ea:fb:0a:24:a4:
16:ec:59:2b:90:fe:71:ac:30:d3:a9:98:a5:bb:0e:4d:01:3d:
b2:d7:40:6b:41:fc:99:2c:2d:77:59:4d:6a:3a:72:80:af:da:
15:76:31:91:9b:74:86:34:fc:27:47:e7:36:c4:d6:ab:3d:2f:
87:fb:96:7f:42:0c:9e:7b:d3:24:09:60:8b:be:44:3a:ab:b1:
eb:01:23:31:fd:33:74:fa:39:fd:2b:83:4d:0c:6d:24:e1:03:
ee:bf:47:ae:cf:ab:41:00:8a:77:05:fb:47:42:17:db:11:8c:
f4:c8:7a:c7:52:0e:2c:b4:92:31:7e:c9:de:fc:00:74:5d:ec:
6d:39:c1:83:c7:6e:b2:53:74:0e:20:4b:f8:ac:a9:4c:7e:bc:
94:51:86:9f:31:74:12:1d:bd:c5:cf:49:20:83:b4:fe:ce:07:
0f:f3:47:94:ec:42:7b:5b:c9:00:5b:eb:bf:00:08:31:32:7a:
4f:92:a6:3a:2b:d4:37:5e:c5:42:c3:3a:88:08:91:00:8a:2d:
9e:c4:ad:0c:31:6c:cc:7c:84:35:39:2e:c0:03:d3:fc:f1:f3:
39:1c:44:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:55 2024 by rpki-client on console-ams.rpki-client.org