Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/4NJoeCBbz-l6mX0kbn4ONK7wBk0.roa
File: 4NJoeCBbz-l6mX0kbn4ONK7wBk0.roa (raw, json)
Hash identifier: rQ6FmCQerfoFJp9HlfPf15h38LYIfFeGUij/xl0gtbc=
Subject key identifier: E0:D2:68:78:20:5B:CF:E9:7A:99:7D:24:6E:7E:0E:34:AE:F0:06:4D
Certificate issuer: /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial: 01837F91C0BA95BC7C039ECE9547C6217634
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/4NJoeCBbz-l6mX0kbn4ONK7wBk0.roa
Signing time: Tue 27 Sep 2022 15:30:01 +0000
ROA not before: Tue 27 Sep 2022 15:30:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.40.161.0/24 maxlen: 24
89.39.242.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
185.170.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:91:c0:ba:95:bc:7c:03:9e:ce:95:47:c6:21:76:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Validity
Not Before: Sep 27 15:30:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0d26878205bcfe97a997d246e7e0e34aef0064d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:30:56:3c:61:83:b5:5d:1a:4b:65:1b:d7:
3f:c2:e9:3e:ba:59:9c:70:b6:30:31:88:97:a0:23:
0b:77:14:48:31:bc:92:0d:69:64:6a:c3:b5:46:16:
de:1a:83:e5:df:de:ff:29:0c:31:5d:d4:9c:eb:dc:
a5:79:ff:48:7b:06:34:4a:ac:b4:41:76:9e:36:b9:
0a:8e:b6:21:81:79:db:90:c2:48:cd:2f:fe:dd:a5:
1b:55:3e:3b:97:e0:34:7a:52:21:d3:1d:8f:2f:cd:
9b:d6:80:9c:f6:a1:c5:37:bd:10:21:36:52:c4:1f:
28:f9:55:a6:9a:e4:bf:0b:02:39:7f:3a:25:7f:fc:
8c:fc:cb:4a:17:f5:2a:e4:09:82:ce:e2:cf:c8:b8:
76:ae:82:9f:af:19:55:8e:8d:2e:15:07:b7:23:9f:
12:f6:98:1b:2b:82:39:74:b5:96:7e:18:78:21:3d:
b0:62:4d:f1:63:fc:e0:23:b4:86:f0:25:8c:2d:a1:
0c:38:64:bd:f0:4e:0c:47:fb:93:c5:e2:c5:59:84:
f5:90:81:14:5e:d2:90:63:a2:50:25:bd:4c:0d:b0:
c9:a2:70:5d:ec:c4:1a:5e:15:23:66:3a:72:80:b9:
89:97:3a:03:d4:15:2d:46:1f:cc:17:87:5e:0c:7c:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D2:68:78:20:5B:CF:E9:7A:99:7D:24:6E:7E:0E:34:AE:F0:06:4D
X509v3 Authority Key Identifier:
keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/4NJoeCBbz-l6mX0kbn4ONK7wBk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.242.0/24
89.40.35.0/24
89.40.161.0/24
185.170.65.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:82:c2:55:7d:d4:83:03:89:48:10:fe:6c:b7:dd:97:37:ad:
2b:cf:bf:7e:b5:cc:f6:e0:f3:12:58:09:ea:63:75:88:80:5c:
54:fd:86:cc:8b:a3:56:24:0c:72:10:42:40:4b:05:fd:a1:8f:
a3:7d:76:50:1c:32:2a:0a:49:76:1a:44:32:85:ee:3e:08:d0:
13:20:e0:0a:3a:f4:2c:7b:e5:6e:92:92:7c:8a:6b:ba:91:e6:
41:35:fe:67:2f:4e:56:41:82:4d:f8:e7:96:63:78:40:5f:ad:
ac:6a:b0:ec:a9:bb:9e:a0:85:48:ca:de:a0:5a:61:a0:ef:0e:
ab:a2:85:ad:d6:38:81:44:86:8a:89:e9:5d:cb:26:bd:53:dc:
1d:60:b7:bd:8c:e1:8f:49:aa:b3:75:92:4f:19:c1:25:bd:46:
73:13:98:bf:01:d4:97:96:b0:af:31:db:9c:43:1d:76:44:fb:
bd:c9:1c:86:b4:8f:a3:fc:e9:07:fb:25:6d:62:45:ab:8a:66:
cf:b5:3f:b5:42:ee:20:01:c9:2c:a8:2d:de:b2:8b:36:97:89:
9b:21:4f:c7:8d:67:cd:d3:33:e6:00:b2:ca:09:32:fa:ed:a5:
16:67:3c:96:dc:f8:69:10:4a:b9:e8:cb:65:03:e4:b7:e0:1a:
b7:76:71:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org