Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7a3b1c-8001-46b8-a335-d3a096a5eb2f/1/M0jacRsX_2LLxfzVCFgXSPQLMoc.roa
File: M0jacRsX_2LLxfzVCFgXSPQLMoc.roa (raw, json)
Hash identifier: jcOrLwNXP+5MGAW6kqfpbcMUFdNCbbFw17dbuPa4hX4=
Subject key identifier: 33:48:DA:71:1B:17:FF:62:CB:C5:FC:D5:08:58:17:48:F4:0B:32:87
Certificate issuer: /CN=5c412f72ea7410581906488ba77db7b82267e4aa
Certificate serial: 018829794800FF950BCE61E73D7E60688593
Authority key identifier: 5C:41:2F:72:EA:74:10:58:19:06:48:8B:A7:7D:B7:B8:22:67:E4:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEEvcup0EFgZBkiLp323uCJn5Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7a3b1c-8001-46b8-a335-d3a096a5eb2f/1/M0jacRsX_2LLxfzVCFgXSPQLMoc.roa
Signing time: Wed 17 May 2023 11:29:54 +0000
ROA not before: Wed 17 May 2023 11:29:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49121
IP address blocks: 89.106.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:79:48:00:ff:95:0b:ce:61:e7:3d:7e:60:68:85:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c412f72ea7410581906488ba77db7b82267e4aa
Validity
Not Before: May 17 11:29:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3348da711b17ff62cbc5fcd508581748f40b3287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:3e:a7:81:bc:f4:6c:d2:2b:41:67:f5:b0:
f3:6f:ad:e2:ae:35:af:c8:30:e8:34:97:ee:a7:e7:
07:56:ab:54:32:17:fc:f5:07:63:19:03:ef:ef:ca:
03:2e:f7:13:6f:01:0a:8e:9c:38:72:ef:ad:7d:b6:
84:24:c1:da:6d:74:58:54:44:0b:1d:41:d9:60:db:
61:97:35:7d:7b:3d:cb:fc:df:5f:cd:6a:a1:ae:e9:
1e:84:c6:8e:bb:e0:f5:c6:99:e8:7a:0c:6d:48:a3:
4b:62:48:af:4a:f5:56:27:84:e6:46:91:43:44:c4:
f2:50:d5:68:7f:fc:08:1f:0d:a0:41:f4:3a:a7:56:
87:68:c7:86:b5:2e:bc:fc:51:8d:77:10:d6:24:fb:
67:05:e5:7a:32:e9:a3:2f:6b:19:d7:ed:8a:50:a5:
a2:0d:cc:82:55:d4:07:f5:a3:0f:21:fb:77:40:f1:
9e:aa:49:e6:08:8a:50:94:29:2b:c1:cb:1a:23:12:
30:e1:6d:a9:ee:8e:20:10:8d:58:7e:e2:32:f5:0e:
19:c8:ee:69:aa:6d:f2:e6:71:f9:81:e2:66:db:c9:
55:ec:18:2d:7c:1f:4c:08:a9:1f:f2:b4:f0:d2:51:
8a:6b:a4:20:49:28:71:d4:a5:9e:93:20:75:b8:f4:
13:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:48:DA:71:1B:17:FF:62:CB:C5:FC:D5:08:58:17:48:F4:0B:32:87
X509v3 Authority Key Identifier:
keyid:5C:41:2F:72:EA:74:10:58:19:06:48:8B:A7:7D:B7:B8:22:67:E4:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEEvcup0EFgZBkiLp323uCJn5Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7a3b1c-8001-46b8-a335-d3a096a5eb2f/1/M0jacRsX_2LLxfzVCFgXSPQLMoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7a3b1c-8001-46b8-a335-d3a096a5eb2f/1/XEEvcup0EFgZBkiLp323uCJn5Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.202.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a8:35:b9:2c:83:89:e3:fa:28:9a:61:b0:8e:1d:35:e6:74:
c8:ef:65:61:03:70:11:dc:75:db:aa:9c:92:de:b1:27:df:98:
60:ac:7e:cd:4d:d4:05:ad:51:15:10:58:12:3c:62:bb:85:98:
5a:d1:22:16:c2:c4:cb:f4:ff:0a:10:3f:78:e1:74:28:f9:13:
5f:d1:fe:0d:fd:62:0b:7a:83:64:ce:f0:7e:16:24:33:f2:e6:
8a:ef:f8:ac:ba:79:61:05:83:b9:fb:76:6b:a1:e6:cd:bc:08:
15:ec:b8:1e:a8:09:17:12:c4:37:ce:03:7f:ad:e2:77:05:68:
20:01:ef:d0:47:18:cd:48:0d:ef:19:8e:e9:06:48:37:df:39:
57:86:e0:de:69:22:f3:95:c2:c3:8d:b6:d2:7c:22:0b:91:fb:
91:0a:47:a5:9c:4d:65:c2:43:06:5b:26:e4:5d:88:71:94:03:
f6:67:4a:ed:08:64:21:a6:0a:1a:d0:6a:ec:e4:4a:ed:4f:ff:
79:d4:d7:16:dc:8a:1b:6d:08:57:10:13:45:57:09:0b:7a:e5:
59:55:e5:7d:59:2b:79:80:3a:dc:7e:be:d5:05:f0:f7:ee:e5:
9f:3c:5b:d7:ef:13:df:e1:58:bd:d8:e7:d3:25:db:80:37:cf:
4c:67:fc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org