Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3fa6c6-49a5-4932-a4aa-8a4f1767f29d/1/X4l7cStq-qXseMKP_etLxDGpI8c.roa
File: X4l7cStq-qXseMKP_etLxDGpI8c.roa (raw, json)
Hash identifier: 7eO/4IlIgyUIWt+t0N9nAU6JiH8I37AgDVC/yVKK3gY=
Subject key identifier: 5F:89:7B:71:2B:6A:FA:A5:EC:78:C2:8F:FD:EB:4B:C4:31:A9:23:C7
Certificate issuer: /CN=2340a348268db5034affe720767b6701f346ebfe
Certificate serial: 01CE2CA0
Authority key identifier: 23:40:A3:48:26:8D:B5:03:4A:FF:E7:20:76:7B:67:01:F3:46:EB:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0CjSCaNtQNK_-cgdntnAfNG6_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3fa6c6-49a5-4932-a4aa-8a4f1767f29d/1/X4l7cStq-qXseMKP_etLxDGpI8c.roa
Signing time: Sat 01 Jan 2022 15:02:08 +0000
ROA not before: Sat 01 Jan 2022 15:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44489
IP address blocks: 89.31.40.0/21 maxlen: 21
185.173.248.0/22 maxlen: 22
2a0b:7f00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30289056 (0x1ce2ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2340a348268db5034affe720767b6701f346ebfe
Validity
Not Before: Jan 1 15:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f897b712b6afaa5ec78c28ffdeb4bc431a923c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:92:4c:1b:52:8a:76:57:d2:80:82:18:d2:8a:
45:cf:bd:84:07:24:23:92:26:5d:53:0b:85:92:f5:
3c:e8:7a:cb:ac:93:dd:d5:72:c2:80:2b:bb:eb:7a:
29:d4:54:e6:2a:d0:77:9c:d8:c7:10:2a:93:d1:4c:
43:c1:65:a6:7d:e6:3e:dd:e1:2b:97:11:be:8d:73:
70:e0:f1:c2:47:24:0f:8f:8b:9e:9b:91:67:f2:05:
57:e8:73:95:d0:39:d3:26:82:4b:17:43:12:36:05:
3d:04:b7:8a:ca:ca:15:db:95:c3:c7:c7:9e:29:b8:
22:06:b8:91:93:e8:ec:ac:49:d7:0f:f0:d1:f0:87:
c0:3a:e9:ed:bd:89:52:16:be:82:c9:48:11:b0:e3:
81:2e:86:f3:c4:b9:ac:75:89:77:77:c7:df:ac:56:
d9:f4:c8:1a:e9:22:58:59:61:0c:07:d4:db:44:1b:
ef:c7:f7:32:53:54:57:09:c7:84:be:29:1b:a6:1b:
90:e2:b9:24:e0:a5:01:d7:b1:62:a8:3b:14:d7:a5:
5c:d8:d3:90:a2:52:e0:d3:de:1e:ff:85:42:65:39:
b7:c7:77:64:04:c6:49:d5:ef:b5:9e:b3:70:6b:3c:
d9:bb:c0:61:52:dd:98:e0:43:4c:b6:58:81:2a:6e:
32:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:89:7B:71:2B:6A:FA:A5:EC:78:C2:8F:FD:EB:4B:C4:31:A9:23:C7
X509v3 Authority Key Identifier:
keyid:23:40:A3:48:26:8D:B5:03:4A:FF:E7:20:76:7B:67:01:F3:46:EB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0CjSCaNtQNK_-cgdntnAfNG6_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3fa6c6-49a5-4932-a4aa-8a4f1767f29d/1/X4l7cStq-qXseMKP_etLxDGpI8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3fa6c6-49a5-4932-a4aa-8a4f1767f29d/1/I0CjSCaNtQNK_-cgdntnAfNG6_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.40.0/21
185.173.248.0/22
IPv6:
2a0b:7f00::/29
Signature Algorithm: sha256WithRSAEncryption
85:10:99:32:cf:fe:50:c5:1c:09:da:05:e0:9d:dc:54:2b:ae:
66:36:c1:97:ec:5f:26:31:4e:74:41:ad:00:54:c4:c6:25:01:
85:86:24:11:7c:39:22:47:9e:5d:7c:4a:75:ac:3f:5a:c0:ec:
b1:d8:7c:50:2a:75:3d:ab:bf:9f:1f:1b:30:76:16:7c:c7:7f:
e8:14:d8:81:92:d8:11:cd:42:ae:15:e4:54:1d:fa:dd:04:1a:
f0:f5:60:f5:f0:19:88:e5:e3:09:a7:16:c2:5a:21:be:a8:d0:
f1:eb:e7:60:4b:df:24:f1:30:21:73:f3:bb:48:6a:cf:b7:4a:
7b:2d:f4:18:aa:de:b2:60:a6:9f:e3:31:bf:a5:91:93:27:37:
c7:43:37:03:a6:10:30:30:a8:c9:58:74:eb:4b:4a:0c:25:c3:
7a:b0:aa:71:f1:12:10:17:bc:45:ec:33:3e:11:2b:3c:ab:68:
07:f2:d0:d3:b5:f0:ec:87:67:2f:64:f5:12:ec:92:5c:5b:20:
f2:bf:21:07:a8:ed:2f:40:66:89:fa:70:23:4b:6a:92:3b:5f:
42:cf:93:a1:20:84:b9:5c:da:49:b5:b4:32:69:5d:b1:ba:b4:
c2:bc:66:d6:6f:30:c7:eb:06:5e:d3:67:3e:a2:c2:15:f3:55:
6f:18:ba:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:31 2024 by rpki-client on console-ams.rpki-client.org