Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/jpDVRRhm4v-7vDfJfORxkon4nJE.roa
File: jpDVRRhm4v-7vDfJfORxkon4nJE.roa (raw, json)
Hash identifier: yTsgqNLKDpCFfbfhryksfhRVHErDGEK8HKe2FQYRfio=
Subject key identifier: 8E:90:D5:45:18:66:E2:FF:BB:BC:37:C9:7C:E4:71:92:89:F8:9C:91
Certificate issuer: /CN=23accae620e9e49f1ab69a1e6979c288bc0136ba
Certificate serial: 018562A7CBC1E4A6F6CB3D6D6FC030BFD47C
Authority key identifier: 23:AC:CA:E6:20:E9:E4:9F:1A:B6:9A:1E:69:79:C2:88:BC:01:36:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6zK5iDp5J8atpoeaXnCiLwBNro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/jpDVRRhm4v-7vDfJfORxkon4nJE.roa
Signing time: Fri 30 Dec 2022 10:50:41 +0000
ROA not before: Fri 30 Dec 2022 10:50:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41626
IP address blocks: 86.111.230.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:a7:cb:c1:e4:a6:f6:cb:3d:6d:6f:c0:30:bf:d4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23accae620e9e49f1ab69a1e6979c288bc0136ba
Validity
Not Before: Dec 30 10:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e90d5451866e2ffbbbc37c97ce4719289f89c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:f6:c1:8e:9e:fb:77:cf:d1:00:8d:e4:41:
5f:f9:97:93:25:c6:95:bd:d5:7c:94:8d:be:9e:02:
70:08:3d:32:3b:cf:97:b3:16:92:b9:57:fe:31:10:
55:48:71:9b:c0:01:42:0b:7a:8f:28:5d:de:ae:7a:
e2:db:d3:54:d2:4d:a4:75:74:3d:5f:df:28:2e:a4:
72:cb:a1:9c:49:9f:5b:a6:32:c5:83:35:04:e7:9f:
bb:8b:95:c6:6f:52:0e:81:bb:3e:70:b6:22:5f:b2:
7c:e4:b4:ad:a4:ff:10:a7:32:40:ec:c5:23:fa:a9:
81:69:63:ab:fa:67:75:ec:10:43:42:9b:6f:95:42:
1a:db:8f:b7:94:6e:1c:f3:b1:db:bb:a8:59:16:60:
ee:06:66:f0:ce:77:5d:19:f3:8c:8d:f1:0a:1c:31:
3a:1b:cf:7c:c4:f7:38:f5:8d:c2:9c:fc:8e:eb:ed:
b9:d4:ac:94:ea:9d:00:bb:09:84:5e:c0:c5:81:34:
ce:09:2f:81:f1:89:12:dc:b3:7b:85:30:0d:16:9a:
6f:bb:12:ab:79:f3:19:19:2a:dc:01:18:e6:72:8d:
50:79:5e:c3:bd:00:29:1d:0e:eb:e2:dc:ad:fa:41:
7a:03:bb:c5:83:80:ff:bd:3e:f1:98:f2:25:eb:96:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:90:D5:45:18:66:E2:FF:BB:BC:37:C9:7C:E4:71:92:89:F8:9C:91
X509v3 Authority Key Identifier:
keyid:23:AC:CA:E6:20:E9:E4:9F:1A:B6:9A:1E:69:79:C2:88:BC:01:36:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6zK5iDp5J8atpoeaXnCiLwBNro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/jpDVRRhm4v-7vDfJfORxkon4nJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b8070d-b598-4440-b424-1162f027218f/1/I6zK5iDp5J8atpoeaXnCiLwBNro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.230.0/23
Signature Algorithm: sha256WithRSAEncryption
62:59:41:f3:34:53:cc:eb:8e:fe:35:7c:cc:6c:f4:ea:ba:35:
05:a2:65:9b:d3:e3:98:a1:2a:00:27:18:da:3c:bf:bb:91:64:
89:8a:20:56:9c:d9:e4:31:80:62:b3:05:fc:6a:60:ec:0d:bc:
08:a8:ff:56:de:4c:ec:1d:06:ca:0f:8b:2b:bc:a8:a2:c4:ce:
23:8f:f6:9c:38:9b:d7:3a:b3:45:f0:83:b3:86:8f:01:68:5f:
d1:ec:ea:09:0c:e7:99:4e:8c:5f:f7:d1:0f:39:b8:81:bb:4b:
8a:a6:35:02:88:7a:2b:c4:65:8e:5d:f7:50:e6:30:56:08:c9:
90:20:fc:3c:82:df:90:f2:ff:01:8f:a9:ec:54:3f:15:bc:47:
20:a0:df:9a:28:e8:e6:b0:7c:4f:d9:e0:88:cf:0d:a8:7f:df:
a0:fd:64:8a:c7:3c:04:54:68:13:62:a9:ee:0c:92:68:04:7b:
f0:df:fb:28:03:c4:69:7e:7d:24:c9:e4:bf:ff:cc:ab:f4:0c:
f8:13:7f:3c:2f:7d:d4:54:a3:d8:0c:56:c6:32:3b:7b:58:85:
11:b0:ea:3c:b6:c5:61:e9:33:7c:50:f4:9f:20:dc:c8:49:f0:
58:16:de:4d:03:a0:40:60:8e:af:56:dd:5e:85:58:6b:2a:9d:
c5:7b:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:53 2024 by rpki-client on console-fra.rpki-client.org