Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/IGo4kjUeQScnEfJ8d0zpA1ZtMJQ.roa
File: IGo4kjUeQScnEfJ8d0zpA1ZtMJQ.roa (raw, json)
Hash identifier: OnBrk5W3HLg5tofSFhDJc0n63QKlKNY0TUTNnEWstJY=
Subject key identifier: 20:6A:38:92:35:1E:41:27:27:11:F2:7C:77:4C:E9:03:56:6D:30:94
Certificate issuer: /CN=bb09489b611085b902f15b78e597ba914337acf5
Certificate serial: 0187B7333E667BC0BEC259CC3B50B8E6C20C
Authority key identifier: BB:09:48:9B:61:10:85:B9:02:F1:5B:78:E5:97:BA:91:43:37:AC:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/IGo4kjUeQScnEfJ8d0zpA1ZtMJQ.roa
Signing time: Tue 25 Apr 2023 06:56:41 +0000
ROA not before: Tue 25 Apr 2023 06:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47576
IP address blocks: 89.207.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:33:3e:66:7b:c0:be:c2:59:cc:3b:50:b8:e6:c2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb09489b611085b902f15b78e597ba914337acf5
Validity
Not Before: Apr 25 06:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=206a3892351e41272711f27c774ce903566d3094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3a:d9:1b:03:41:15:8b:c7:ae:4d:b1:77:42:
b5:2b:f0:66:3b:87:28:75:2e:a3:13:56:ac:be:83:
1e:23:01:32:b6:4d:04:16:83:eb:8a:76:71:e3:83:
64:e4:4c:be:38:9d:06:39:fe:e7:0e:ac:51:74:24:
c6:da:ab:5d:81:f5:59:6b:2b:0e:0d:a4:5e:7c:76:
7b:ba:8e:e0:e3:77:f3:f8:e4:01:9d:eb:a2:37:80:
9c:15:ae:49:d9:ef:fc:78:d0:a7:38:c6:e8:06:f8:
70:9c:78:38:85:45:f4:97:20:ea:55:15:d3:6d:69:
a6:44:2e:07:a5:3f:8d:dc:a3:90:43:ba:4b:d4:e9:
f5:22:0f:5a:2d:a7:b4:74:49:c0:f2:c4:c8:77:26:
5e:13:7e:59:84:20:a4:ac:87:f1:18:df:c8:46:76:
a7:e4:cc:3d:36:1a:6e:19:c2:1b:0c:b2:f6:0f:52:
b3:0f:3b:3c:af:19:8d:b9:46:1e:2f:39:43:cc:b7:
30:b6:83:10:26:fb:2b:03:c6:5f:87:a2:0f:3d:60:
e0:ea:60:9f:3f:52:92:8c:eb:06:6c:ff:4a:bc:ee:
a9:04:a9:bd:78:c9:91:13:53:69:a0:20:63:40:ee:
5b:28:70:af:4e:cf:cd:37:fd:d3:6b:f7:76:54:53:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:38:92:35:1E:41:27:27:11:F2:7C:77:4C:E9:03:56:6D:30:94
X509v3 Authority Key Identifier:
keyid:BB:09:48:9B:61:10:85:B9:02:F1:5B:78:E5:97:BA:91:43:37:AC:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/IGo4kjUeQScnEfJ8d0zpA1ZtMJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1fe4dd-91b0-42b8-b5d6-1637c7681720/1/uwlIm2EQhbkC8Vt45Ze6kUM3rPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.148.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:dd:65:c0:4b:21:66:8b:84:bb:76:e7:3c:44:49:b0:90:65:
c0:22:4e:cc:a5:32:74:7d:f0:52:3c:7c:f3:1f:df:8e:49:e6:
15:53:59:a3:6f:10:af:c6:42:c2:d8:aa:db:48:14:70:9c:0e:
c6:bc:a5:24:46:3f:c9:9a:a9:c0:a9:ec:7a:ab:66:91:fa:50:
29:57:5c:37:7b:25:25:94:79:92:32:6f:27:a8:dd:27:68:c7:
1c:b2:d0:de:53:5e:10:4b:4c:e6:d0:0f:c5:ca:7c:7f:99:21:
3e:26:59:23:89:7a:47:d0:69:64:56:ed:ca:b6:db:26:1f:1d:
9a:3a:ed:8f:59:d6:40:c6:18:eb:28:bd:aa:44:0b:ed:49:ea:
2d:ce:a6:17:dc:3b:12:35:37:96:56:86:69:f0:e2:4a:ed:03:
99:96:89:c4:4c:73:88:12:1a:2e:04:41:c3:7f:73:03:de:c3:
17:2a:13:b6:cb:42:ae:67:a3:d1:fb:91:fa:1a:9f:21:ce:6a:
8c:e3:f6:45:c7:3e:37:41:68:cc:e5:c2:54:f9:d7:9f:b3:a6:
bf:4d:f8:71:eb:76:bf:ad:80:7a:64:e7:0d:81:45:6b:e2:c3:
0b:be:1d:d5:47:04:3f:4c:5b:dd:09:a0:be:40:37:b5:09:83:
42:33:84:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net