Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS50868.roa
File: AS50868.roa (raw, json)
Hash identifier: sT1nNjAgiUxtZs50Na4VFPUSbIM2WJAOi4JEcivd4JE=
Subject key identifier: EC:43:CD:BF:EB:48:80:2C:7D:54:6C:44:AA:D9:E6:07:17:A3:39:B6
Certificate issuer: /CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Certificate serial: 6B693B9502C1AD88EB406AA558B79036DBB6197D
Authority key identifier: 4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS50868.roa
Signing time: Tue 06 Jun 2023 09:26:00 +0000
ROA not before: Tue 06 Jun 2023 09:21:00 +0000
ROA not after: Tue 04 Jun 2024 09:26:00 +0000
asID: 50868
IP address blocks: 89.23.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:69:3b:95:02:c1:ad:88:eb:40:6a:a5:58:b7:90:36:db:b6:19:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9948d82c74f5b80667b4a37394c8a56b7fe484
Validity
Not Before: Jun 6 09:21:00 2023 GMT
Not After : Jun 4 09:26:00 2024 GMT
Subject: CN=EC43CDBFEB48802C7D546C44AAD9E60717A339B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:fa:92:11:35:e3:87:a4:84:33:e7:90:ff:
2e:27:36:c0:71:b7:0b:c8:c4:14:1d:e9:54:03:f7:
e4:30:13:e1:e0:f9:63:8d:13:fd:9f:8b:10:49:c9:
ea:f9:49:f5:bf:41:70:cb:d4:f1:b4:88:44:70:a9:
9f:3a:aa:31:75:61:83:13:03:cf:c3:72:4a:20:d1:
55:6c:dc:23:aa:69:2f:e6:30:ff:28:f8:98:10:a2:
fd:12:c9:73:a7:4e:1f:f6:a2:ad:59:a2:93:e5:3d:
9a:bf:65:b3:48:be:bb:c0:62:af:d4:e4:00:55:4a:
88:a4:1f:5e:70:ac:bb:ba:e6:9f:85:5f:7e:e1:f6:
85:b8:0f:32:34:d0:1b:28:dd:3b:3b:3b:f8:51:88:
76:e2:b8:c6:e4:ea:6a:af:47:03:76:96:be:b0:8c:
7e:fb:1d:5c:48:13:94:97:47:31:39:68:c2:c1:14:
e4:95:be:e3:e0:2e:5d:c3:64:5c:03:f8:83:02:3a:
9e:f3:8c:d4:67:e2:bf:93:bb:30:76:85:7a:03:2c:
78:d6:1e:58:20:81:04:d8:b5:55:40:7d:37:1b:26:
61:d7:6a:ab:e4:8d:35:38:1e:af:69:b3:ca:eb:44:
13:20:5e:0e:ef:7d:ba:0e:45:40:12:9b:83:e7:11:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:CD:BF:EB:48:80:2C:7D:54:6C:44:AA:D9:E6:07:17:A3:39:B6
X509v3 Authority Key Identifier:
keyid:4F:99:48:D8:2C:74:F5:B8:06:67:B4:A3:73:94:C8:A5:6B:7F:E4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/4F9948D82C74F5B80667B4A37394C8A56B7FE484.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5lI2Cx09bgGZ7Sjc5TIpWt_5IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4556f416-aad6-41bf-aebf-80a2cc67a466/0/AS50868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.89.0/24
Signature Algorithm: sha256WithRSAEncryption
74:60:1e:58:64:a8:93:0e:8a:ac:c0:d7:2b:7b:fe:50:8a:9c:
fb:e8:11:13:9e:95:7d:48:bb:03:af:ac:d9:15:7c:40:5a:fb:
7e:fa:4a:b8:97:97:86:23:62:1a:8d:03:51:94:33:db:e2:f7:
c3:cc:18:09:02:2b:2e:e1:e1:73:e9:72:cf:fc:61:33:59:40:
37:e3:2c:7a:6c:86:e0:7d:25:6a:b1:a4:53:14:f5:79:ed:54:
09:88:36:a7:9a:c8:1e:d7:7e:7e:68:17:f9:82:a3:6b:9d:6d:
bd:85:98:bb:10:eb:44:7f:de:87:72:a0:ef:ae:1d:82:4b:b9:
d3:60:85:e9:65:85:e6:a5:a7:44:6d:c2:b3:51:d5:75:ee:6d:
69:1c:90:02:cf:54:67:5e:58:d2:0d:d3:06:8b:59:4b:f7:8b:
3e:2b:83:f6:4c:d6:d6:ae:0c:57:5e:4f:b9:27:26:c2:5b:0c:
65:8e:5f:70:2d:20:48:51:09:cb:e6:a3:fe:de:74:00:d9:eb:
bb:d9:12:12:65:2d:48:fc:4d:ca:b3:4a:e5:32:68:44:1c:6d:
9a:c0:31:48:86:f9:4f:64:e2:e6:79:ed:94:73:34:43:29:1b:
1d:a0:46:90:19:da:25:d6:ea:dc:88:b0:e9:6d:3f:61:33:4a:
09:60:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org