Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6127a6-206e-4606-9960-b394088444d8/1/dGKx4oMDiJj5q16k5zjVzFAqB5M.roa
File: dGKx4oMDiJj5q16k5zjVzFAqB5M.roa (raw, json)
Hash identifier: HasskyPfaVh727sdWWz7QXwM42T29IGy0U4J2KzihYI=
Subject key identifier: 74:62:B1:E2:83:03:88:98:F9:AB:5E:A4:E7:38:D5:CC:50:2A:07:93
Certificate issuer: /CN=5ab4349405298585f1efcb658537618f25d4335e
Certificate serial: 01856F5DDC2EF8E0DB4A2A4E29F450BCDC79
Authority key identifier: 5A:B4:34:94:05:29:85:85:F1:EF:CB:65:85:37:61:8F:25:D4:33:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrQ0lAUphYXx78tlhTdhjyXUM14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6127a6-206e-4606-9960-b394088444d8/1/dGKx4oMDiJj5q16k5zjVzFAqB5M.roa
Signing time: Sun 01 Jan 2023 22:05:00 +0000
ROA not before: Sun 01 Jan 2023 22:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 89.107.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:dc:2e:f8:e0:db:4a:2a:4e:29:f4:50:bc:dc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab4349405298585f1efcb658537618f25d4335e
Validity
Not Before: Jan 1 22:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7462b1e283038898f9ab5ea4e738d5cc502a0793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:98:97:06:6b:73:36:98:61:c4:cf:79:23:e1:
50:81:f0:6c:b6:d6:d9:1d:e0:a0:a0:49:54:e7:19:
b8:a9:5c:53:40:f5:13:a0:8b:0b:30:fb:2c:49:fc:
69:6d:b1:2c:b3:cc:e2:96:2d:c9:36:17:ce:49:b4:
af:a0:f6:77:f9:74:3d:bb:cd:ff:ab:2b:f6:f3:b0:
58:b0:7b:b6:99:77:77:bd:69:10:88:20:ed:c6:91:
31:3a:d6:86:66:a2:5c:35:14:11:81:4e:75:64:3e:
80:c7:11:bb:fa:c7:a3:b8:cc:14:54:6a:a2:54:42:
47:91:ae:d1:63:3e:47:ff:ba:5f:62:03:62:46:af:
fa:62:21:ba:b2:f9:15:44:a1:d3:d1:bd:3a:85:8d:
7c:00:a8:b3:03:54:5b:a7:78:47:8a:89:a1:90:1b:
28:94:2a:9d:02:0c:b2:c9:ea:32:04:09:b4:69:3f:
71:ac:3d:85:02:60:8e:44:36:37:9f:5b:3b:ca:e2:
44:14:e6:08:59:a3:84:87:9a:d4:2e:16:1e:c3:9a:
7e:43:c4:0e:e7:63:0a:09:74:bd:8a:14:76:6d:bf:
fc:76:84:24:f6:c4:d4:21:1a:e3:42:b5:bb:37:13:
df:8a:57:da:65:61:6e:96:d8:2e:8c:5d:f0:7b:8b:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:62:B1:E2:83:03:88:98:F9:AB:5E:A4:E7:38:D5:CC:50:2A:07:93
X509v3 Authority Key Identifier:
keyid:5A:B4:34:94:05:29:85:85:F1:EF:CB:65:85:37:61:8F:25:D4:33:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrQ0lAUphYXx78tlhTdhjyXUM14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6127a6-206e-4606-9960-b394088444d8/1/dGKx4oMDiJj5q16k5zjVzFAqB5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6127a6-206e-4606-9960-b394088444d8/1/WrQ0lAUphYXx78tlhTdhjyXUM14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.8.0/24
Signature Algorithm: sha256WithRSAEncryption
85:f0:39:63:5a:9b:68:04:ea:e9:ea:ee:ab:4a:91:df:4d:d4:
24:39:ac:88:39:b3:4e:a9:64:7b:3e:a7:c6:4c:00:ae:63:18:
48:ca:3e:77:6f:f7:ab:0e:bd:ff:c6:cb:af:8b:97:68:f7:a8:
d8:70:0d:81:3e:c6:11:51:05:fc:15:78:d3:aa:da:13:3c:b0:
5c:93:aa:b2:00:92:8a:00:e5:f3:be:06:77:50:f4:71:a0:dc:
11:2e:69:c7:c6:5f:a8:48:ca:b0:05:6a:cb:7a:76:42:39:76:
c4:be:9f:2b:5f:be:ab:a1:77:78:39:08:44:d2:12:75:a8:f6:
d9:63:84:03:6c:f0:67:17:cf:59:af:59:ad:67:ca:2c:38:43:
f6:27:f5:6a:f4:ee:a7:47:5c:ab:6c:08:aa:ef:d4:c7:53:40:
62:03:4d:6f:49:7f:6b:19:10:8f:41:90:90:0f:e7:f7:a6:fb:
f5:e9:92:85:c7:7c:83:57:60:60:92:23:b7:c3:fe:f9:68:b3:
08:7b:ca:7d:75:07:72:26:4d:17:91:23:8b:83:e2:47:6c:4c:
e5:26:d8:9e:0d:9d:a8:13:c5:41:0a:63:fd:76:52:d9:e8:6d:
f0:67:87:aa:57:83:61:89:38:f8:60:77:e0:b4:65:9a:e1:1b:
48:ae:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:35 2024 by rpki-client on console-ams.rpki-client.org