Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-UP2n5pbUl1xKbE5wlXMehmAGmE.roa
File: 1-UP2n5pbUl1xKbE5wlXMehmAGmE.roa (raw, json)
Hash identifier: qVCG6LcMim8pdS9EJT9IZNAUD/NsaH/ujUadus5hROA=
Subject key identifier: F9:43:F6:9F:9A:5B:52:5D:71:29:B1:39:C2:55:CC:7A:19:80:1A:61
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09972FF3
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-UP2n5pbUl1xKbE5wlXMehmAGmE.roa
Signing time: Wed 16 Feb 2022 20:19:37 +0000
ROA not before: Wed 16 Feb 2022 20:19:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142617
IP address blocks: 89.117.101.0/24 maxlen: 24
89.116.248.0/24 maxlen: 24
89.117.111.0/24 maxlen: 24
89.117.15.0/24 maxlen: 24
89.117.144.0/21 maxlen: 24
89.117.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160903155 (0x9972ff3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 16 20:19:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f943f69f9a5b525d7129b139c255cc7a19801a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:77:20:12:f2:e3:12:75:2d:57:b7:e5:6d:
fb:3e:a0:8c:b0:b7:6b:46:db:2b:6b:ac:75:5f:09:
49:3e:02:15:fd:b3:a0:64:eb:a1:84:de:42:34:82:
e1:80:b5:f1:f3:64:85:58:33:98:b8:6b:98:2a:a3:
ae:cf:76:a5:f3:d8:2d:e5:f3:50:9d:50:f4:b1:94:
d8:57:91:98:cd:a4:4b:a7:88:86:e9:f9:9c:c6:32:
fa:96:84:14:22:90:25:62:a7:d2:ff:d4:fc:b8:60:
c8:2a:a8:e6:c2:b1:62:83:3d:9c:60:5d:41:7f:1a:
de:99:f5:32:1d:ef:fb:6f:2b:b4:e9:71:82:09:d2:
43:66:e0:d0:d5:97:ef:ae:ce:e7:d8:d5:37:2d:db:
2e:13:47:d6:2b:46:0e:47:3d:8c:bb:06:19:7e:25:
9b:56:24:34:39:e5:5f:b7:e3:fc:87:7b:54:4c:68:
9e:4c:2f:36:02:48:ca:5b:bd:b5:1e:8b:d7:d2:cc:
77:cb:f7:1f:d4:a2:df:ca:da:ec:b4:dd:3b:37:3b:
ea:02:f3:64:ef:18:72:a8:c6:4e:fb:4c:dc:23:24:
0e:b0:39:63:1e:f1:18:b8:bb:34:cd:90:9a:8a:0f:
86:47:0a:d9:1a:ca:c5:b3:de:1d:cb:17:83:54:d3:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:43:F6:9F:9A:5B:52:5D:71:29:B1:39:C2:55:CC:7A:19:80:1A:61
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-UP2n5pbUl1xKbE5wlXMehmAGmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.248.0/24
89.117.15.0/24
89.117.35.0/24
89.117.101.0/24
89.117.111.0/24
89.117.144.0/21
Signature Algorithm: sha256WithRSAEncryption
30:99:6f:2d:35:18:83:26:a2:87:99:dc:0d:07:68:4e:ec:4a:
34:f2:70:21:56:8c:29:dd:b9:0a:fe:96:ec:84:75:90:82:a3:
df:d4:d9:7a:02:18:26:02:27:f2:53:b0:c5:0f:99:c2:c9:0e:
ff:46:46:7b:e4:55:82:72:90:be:6c:e1:34:bc:8c:39:85:92:
6f:b6:f7:b7:3e:ed:9a:67:ef:33:65:ae:ac:90:e1:e6:ad:4c:
1a:c4:f3:d7:f3:9f:e7:6d:f1:95:51:64:e8:11:0a:b2:d8:2d:
8f:3f:4a:73:af:ea:1d:6f:fd:db:36:b2:69:19:a3:8d:e9:7c:
b2:c7:de:6f:55:e2:53:0d:fe:ad:37:7c:13:15:0e:67:56:b9:
fc:41:04:77:3c:b0:76:92:52:bf:26:d4:8e:b3:44:3c:5f:73:
a6:d1:44:07:45:77:ee:f6:29:50:48:4e:2e:4e:a4:5e:5d:f0:
f5:b4:9e:97:ae:be:7a:3e:3c:8b:3c:36:24:52:de:45:73:c0:
05:1d:fa:4f:d6:60:f8:f1:a0:3e:44:a9:11:c0:11:62:66:c0:
55:23:21:d0:3f:89:0a:35:b5:77:d9:4f:b8:76:6e:06:f0:29:
7f:30:f5:6b:6d:af:e9:8c:10:2f:27:73:b3:94:fa:8f:22:77:
fc:25:bd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:17 2023 by rpki-client on console-ams.rpki-client.org