Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/t4wMWDlnnTagYn1zUUpUl0uvHh8.roa
File: t4wMWDlnnTagYn1zUUpUl0uvHh8.roa (raw, json)
Hash identifier: 1vRY8VUnHR5n1XueMBLuOlQI5q5GFu62EIldMbld/9I=
Subject key identifier: B7:8C:0C:58:39:67:9D:36:A0:62:7D:73:51:4A:54:97:4B:AF:1E:1F
Certificate issuer: /CN=e6a7ff16095332c5201bca9d54c16e1847a82f24
Certificate serial: 01867526B9A811AFB156AA412C917129676F
Authority key identifier: E6:A7:FF:16:09:53:32:C5:20:1B:CA:9D:54:C1:6E:18:47:A8:2F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qf_FglTMsUgG8qdVMFuGEeoLyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/t4wMWDlnnTagYn1zUUpUl0uvHh8.roa
Signing time: Tue 21 Feb 2023 18:05:17 +0000
ROA not before: Tue 21 Feb 2023 18:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 89.107.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:26:b9:a8:11:af:b1:56:aa:41:2c:91:71:29:67:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a7ff16095332c5201bca9d54c16e1847a82f24
Validity
Not Before: Feb 21 18:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b78c0c5839679d36a0627d73514a54974baf1e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:8c:51:61:4f:fe:fb:c9:77:fc:06:5f:aa:
e1:99:e3:76:f6:b8:4e:0c:05:af:47:bd:82:63:a6:
86:7f:cc:c5:ad:c9:4a:a8:ca:e5:e6:d1:a4:96:70:
2b:7f:9e:55:b4:c3:a6:a0:db:c3:2e:87:92:0d:84:
03:ec:f4:af:66:20:6e:7a:07:92:92:e3:c9:5a:29:
a5:15:92:84:8e:52:09:e6:5a:56:4e:89:77:0a:e9:
ab:2e:7c:7c:23:3b:6d:1a:d8:c8:40:3a:f7:83:04:
d9:33:19:c5:df:96:75:c7:7d:17:13:b3:69:ac:94:
4c:35:0a:48:24:dc:98:4d:cf:08:ac:3b:d8:04:23:
3f:e0:5e:cf:e7:5d:fe:ac:59:09:15:84:d0:81:df:
e1:98:e7:0e:14:aa:53:8d:72:70:a5:ff:60:fc:e8:
74:74:a5:d4:bd:a3:0a:9f:11:5d:f4:92:24:25:9a:
ca:bb:1e:9d:be:12:be:2b:3d:ce:7f:ae:78:62:46:
1d:af:ad:00:12:c1:b4:a1:70:b3:eb:bb:26:a5:3c:
e0:d3:be:fe:59:a4:18:48:ab:03:21:d3:03:6f:dd:
fc:48:14:20:a4:09:5a:56:b0:8b:57:27:c6:8a:44:
8c:24:74:7d:4e:f0:c5:e2:92:89:f1:65:33:6b:98:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:0C:58:39:67:9D:36:A0:62:7D:73:51:4A:54:97:4B:AF:1E:1F
X509v3 Authority Key Identifier:
keyid:E6:A7:FF:16:09:53:32:C5:20:1B:CA:9D:54:C1:6E:18:47:A8:2F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qf_FglTMsUgG8qdVMFuGEeoLyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/t4wMWDlnnTagYn1zUUpUl0uvHh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/82104b-4e44-4309-894b-b9d3e134e8ae/1/5qf_FglTMsUgG8qdVMFuGEeoLyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.10.0/24
Signature Algorithm: sha256WithRSAEncryption
16:34:c6:6e:81:d6:b3:e1:bd:80:f2:9a:cc:f5:2e:73:62:73:
c2:15:29:51:85:ff:d5:7b:a9:9d:0b:c6:c6:e6:76:b2:b5:f4:
52:f0:a6:0a:18:c9:f3:5e:f3:ae:e2:ed:2b:97:6a:91:9f:f7:
9b:a3:e9:a7:49:e0:17:30:66:0e:87:68:0e:de:db:95:ca:0f:
fb:b4:ee:cf:ec:fc:d1:e8:07:c0:2a:e9:39:89:84:59:91:59:
14:90:24:21:b3:d2:0d:bb:59:2f:7a:44:ae:3d:5b:6c:2d:0c:
b0:74:2a:8b:1d:bd:3b:75:4d:c2:cc:92:a1:e0:63:09:5b:23:
62:fe:95:69:1d:fd:4e:9f:71:8b:27:da:a2:b9:61:d4:6f:b3:
c6:cf:36:84:6f:65:10:78:8c:d7:7d:2e:69:d8:c5:e0:19:c5:
5f:00:c5:85:29:ca:5e:8b:10:fa:a8:aa:9f:83:23:a8:5e:e9:
3c:f2:51:49:59:e6:8d:c0:f7:aa:54:07:e7:5a:b2:34:b3:46:
ae:39:de:7a:ee:6b:26:4f:d1:0e:84:a0:25:04:fb:8f:f9:c1:
cd:cb:b2:ae:61:a8:b5:1d:14:b5:5e:0e:e5:bd:a9:01:cc:ce:
c8:9b:2d:ef:8c:a6:bf:d7:d1:d4:ce:cd:19:12:2f:61:a9:e1:
4a:4f:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 10:10:00 2023 by rpki-client on console-fra.rpki-client.org