Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS199545.roa
File: AS199545.roa (raw, json)
Hash identifier: whAr9UxZYCIg73X58LO97TtXXERLI5F/YqEGViH+KeY=
Subject key identifier: 76:C0:FB:D7:3A:6F:54:82:D0:29:9F:94:A6:EE:0F:FB:8A:7F:50:DD
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 6B7DFFD069230F890993BE7FE362AAD1576D47B3
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS199545.roa
Signing time: Tue 06 Jun 2023 09:26:01 +0000
ROA not before: Tue 06 Jun 2023 09:21:01 +0000
ROA not after: Tue 04 Jun 2024 09:26:01 +0000
asID: 199545
IP address blocks: 89.23.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:7d:ff:d0:69:23:0f:89:09:93:be:7f:e3:62:aa:d1:57:6d:47:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:21:01 2023 GMT
Not After : Jun 4 09:26:01 2024 GMT
Subject: CN=76C0FBD73A6F5482D0299F94A6EE0FFB8A7F50DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:ff:a1:67:04:76:90:59:22:90:dd:7c:80:
0e:a7:b6:3e:40:2e:a5:fb:88:d3:1e:dd:b3:1a:f8:
e8:c7:7f:8a:ed:ef:db:07:41:94:83:3a:40:6c:a5:
18:98:3a:36:12:eb:de:03:cc:aa:64:4d:2b:0e:40:
92:2c:02:ff:88:73:7c:fb:82:47:26:b8:31:35:1f:
3e:45:3f:64:b9:dd:f1:bf:0c:4b:fb:b3:22:eb:9f:
23:16:17:2d:ed:1d:2e:13:46:a0:0c:12:c3:2f:94:
9c:25:4e:4b:59:9a:6c:24:7c:6b:1e:04:71:61:ae:
5a:51:b0:a2:ba:53:8e:b1:12:65:90:8f:3e:db:d8:
79:e2:bc:90:e6:0a:55:0d:dc:52:f3:e2:09:12:52:
37:e1:a3:e2:b1:bd:be:6c:a9:c5:4d:4f:44:6a:aa:
f1:e2:1f:83:35:59:e6:7c:7a:ca:9c:e2:20:69:5d:
a0:ac:4e:cd:75:66:15:d5:46:a3:05:de:f2:d6:1d:
9c:16:b0:2f:bf:6c:dd:d2:39:f2:74:06:37:d1:12:
b4:84:9d:05:4d:12:63:d8:e8:5d:5f:33:d3:88:ce:
2a:4d:85:72:e3:3a:11:94:e5:0d:53:3b:ad:9d:1b:
ba:23:20:4a:42:79:f4:91:8d:33:cd:ac:5d:92:02:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C0:FB:D7:3A:6F:54:82:D0:29:9F:94:A6:EE:0F:FB:8A:7F:50:DD
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS199545.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.86.0/24
Signature Algorithm: sha256WithRSAEncryption
27:7c:87:8d:1b:d0:6d:f0:04:e5:98:55:db:cc:34:10:32:e3:
a8:08:bc:8f:37:05:87:d1:da:ff:e9:5e:cf:a7:50:3b:4b:84:
10:54:e4:72:21:8b:80:42:ce:f8:df:3a:f0:c4:8e:05:58:76:
4d:5c:40:b9:8f:a9:85:a8:1e:33:b1:8a:67:9b:21:fa:86:89:
ea:09:31:16:24:6d:19:3b:1d:7e:98:f3:f6:85:e9:33:2a:fc:
51:f9:24:e9:b5:23:c5:c5:bd:e2:69:84:27:f1:13:dc:97:51:
64:cf:08:db:90:66:9d:02:b3:6e:5d:fd:4b:ac:a8:7c:65:f7:
1a:af:70:38:85:68:25:cf:b5:85:ad:b8:0b:75:28:23:d8:44:
c6:46:02:71:91:cd:65:c5:23:be:3a:1b:c4:20:d0:36:ed:65:
f9:bf:3b:e7:9c:27:fa:91:25:b4:dc:4a:33:39:04:a7:77:85:
e3:51:be:bf:3c:20:dc:06:10:e7:d7:9d:d1:02:c0:f7:59:45:
b7:a6:72:c0:34:3a:6a:13:50:d6:00:a6:3d:69:9f:70:aa:1b:
ae:ba:23:1c:69:41:a5:f9:1a:dd:6e:ae:35:d9:06:50:2a:ed:
48:3f:a4:71:3b:f6:0a:c5:c4:ae:51:60:fe:ba:76:f9:a8:6d:
de:c5:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org