Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/351907-b0a5-4633-8589-832db428efe6/1/KWc3WhtKy1rM8RlsLdC7mV4J3D4.roa
File: KWc3WhtKy1rM8RlsLdC7mV4J3D4.roa (raw, json)
Hash identifier: FRfdDWoY2oOl5a5hk6ufb9CB4z01UxLZjCH43/Ufosg=
Subject key identifier: 29:67:37:5A:1B:4A:CB:5A:CC:F1:19:6C:2D:D0:BB:99:5E:09:DC:3E
Certificate issuer: /CN=95d67ed12fb7a715210463c170f02577ebd13220
Certificate serial: 03C559F5
Authority key identifier: 95:D6:7E:D1:2F:B7:A7:15:21:04:63:C1:70:F0:25:77:EB:D1:32:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldZ-0S-3pxUhBGPBcPAld-vRMiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/351907-b0a5-4633-8589-832db428efe6/1/KWc3WhtKy1rM8RlsLdC7mV4J3D4.roa
Signing time: Sat 01 Jan 2022 05:06:34 +0000
ROA not before: Sat 01 Jan 2022 05:06:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59660
IP address blocks: 89.22.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63265269 (0x3c559f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d67ed12fb7a715210463c170f02577ebd13220
Validity
Not Before: Jan 1 05:06:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2967375a1b4acb5accf1196c2dd0bb995e09dc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:f6:1d:b6:e3:23:8e:86:08:55:8a:e8:0f:
fb:f5:18:41:f9:b7:2b:c8:07:7a:02:f1:6b:59:b0:
b6:87:b1:a8:a2:0d:4b:9e:c3:94:59:80:75:ea:c6:
1a:e7:8b:7e:ab:1f:01:8b:fc:3e:06:7a:fb:4f:f2:
fa:76:80:d8:f2:c5:f1:41:cc:55:0c:95:47:32:69:
80:9d:a0:ac:0d:10:33:49:28:e3:44:27:8f:10:c7:
b4:b4:74:15:dd:ff:13:c0:64:18:a8:62:af:cc:b2:
bc:c0:de:10:10:4a:62:dc:e7:61:84:ec:d0:f2:dc:
5a:ec:f8:60:0e:4e:72:b0:df:76:8b:a8:c0:5f:58:
a0:1c:d6:a0:e9:81:b2:b1:46:71:84:e7:8e:4e:ab:
2b:85:49:a3:53:fa:20:92:30:2f:e9:35:6c:9c:31:
86:8a:ea:11:2b:d9:45:08:e0:44:19:f9:92:3b:29:
3d:22:1c:b9:0d:a5:f7:dc:d7:af:30:6f:16:e2:3e:
57:e9:1c:93:23:85:91:bd:fd:32:be:0c:cc:62:8f:
d0:26:35:70:a3:f1:4e:bf:d4:f6:48:95:90:b1:ca:
f9:8f:5d:dc:55:ff:b4:f0:a8:22:46:73:69:f3:92:
e7:af:bc:5c:c2:14:fe:de:66:e3:02:51:2d:5c:6f:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:67:37:5A:1B:4A:CB:5A:CC:F1:19:6C:2D:D0:BB:99:5E:09:DC:3E
X509v3 Authority Key Identifier:
keyid:95:D6:7E:D1:2F:B7:A7:15:21:04:63:C1:70:F0:25:77:EB:D1:32:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldZ-0S-3pxUhBGPBcPAld-vRMiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/351907-b0a5-4633-8589-832db428efe6/1/KWc3WhtKy1rM8RlsLdC7mV4J3D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/351907-b0a5-4633-8589-832db428efe6/1/ldZ-0S-3pxUhBGPBcPAld-vRMiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.50.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8c:ba:41:18:e8:eb:c1:78:5e:13:aa:b6:48:39:93:de:df:
79:ba:28:70:48:5c:ce:cb:18:4e:f8:d1:0f:5f:97:c9:de:6f:
86:47:a5:16:38:7e:89:52:ed:19:65:40:c8:1a:56:4b:78:62:
8e:76:8b:5f:7f:08:32:29:e0:45:67:23:2a:7e:d8:b2:88:f9:
01:be:60:66:2e:19:ce:f0:ff:40:a0:19:48:19:b6:b3:90:07:
e8:71:c0:43:28:af:b4:fd:a7:ce:86:ad:c6:cc:db:0b:f1:3e:
15:27:f5:7c:16:76:d0:05:a5:78:fd:a9:33:d4:a2:cc:31:fd:
7e:ee:89:90:4d:f9:50:ed:9e:b3:be:34:49:14:a8:41:b3:6b:
2c:f0:6d:b9:7b:37:7c:01:80:e1:1a:35:d0:05:3f:fd:72:67:
8c:51:be:28:3b:a8:67:c1:ef:fa:a4:1a:37:be:9a:58:28:a7:
8f:59:04:d4:91:2b:7f:bc:b6:b7:4d:83:69:b6:8d:43:42:10:
8c:84:e3:5f:f9:17:8d:d2:7f:f3:c3:f0:3a:de:79:5d:02:73:
17:54:6e:f9:10:88:59:0f:72:f2:e1:d1:37:e6:58:27:a7:3a:
f3:8e:7b:fc:e1:d4:32:0b:a2:b3:5d:68:d0:1c:9d:81:83:09:
17:16:7e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:35 2024 by rpki-client on console-fra.rpki-client.org