Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-XiDopKpy_Fk1n1JWabnbiXuSis.roa
File: 1-XiDopKpy_Fk1n1JWabnbiXuSis.roa (raw, json)
Hash identifier: +6OEbaqVLMDAVtdQ/RW6ZG27/i01SiAb6CxQGofFvOg=
Subject key identifier: F9:78:83:A2:92:A9:CB:F1:64:D6:7D:49:59:A6:E7:6E:25:EE:4A:2B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183D063C6F6E1651E6D2D28608C3AC33696
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-XiDopKpy_Fk1n1JWabnbiXuSis.roa
Signing time: Thu 13 Oct 2022 08:09:03 +0000
ROA not before: Thu 13 Oct 2022 08:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12735
IP address blocks: 89.117.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:63:c6:f6:e1:65:1e:6d:2d:28:60:8c:3a:c3:36:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 13 08:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f97883a292a9cbf164d67d4959a6e76e25ee4a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:a6:d9:ba:5a:1f:12:3d:c3:11:f4:d2:1b:
09:f8:0f:8c:af:6e:5e:69:7a:7c:ef:4c:3b:e8:a4:
29:76:ff:68:67:38:72:d3:df:12:f5:cb:5f:52:ae:
c6:69:16:88:25:a1:8e:b5:b5:d7:fa:93:f1:5c:58:
eb:ef:5e:e6:0d:73:aa:80:55:08:6b:0a:8a:78:bf:
b6:f0:19:7a:13:64:a4:d0:bb:a6:0d:22:28:d1:82:
b2:a5:b3:96:1e:7b:c1:40:c5:2b:bd:66:f4:f0:4e:
c9:db:04:c5:51:54:92:c5:35:f1:37:d8:f2:0b:ec:
f6:f9:ae:ae:60:e5:86:e2:b2:9f:04:b9:96:76:9f:
b8:58:20:76:6c:c9:0a:a6:7a:55:90:8f:74:e7:3c:
04:03:87:a2:89:99:e6:a8:5a:62:97:16:40:c9:fe:
d4:e3:db:bd:95:66:2f:d4:98:6e:2e:2e:bc:35:a1:
7b:51:4e:21:83:f4:ba:fa:bd:31:23:19:29:ef:7a:
6f:dd:b5:b8:9c:b9:b1:8f:32:d2:11:b7:61:73:38:
67:fa:7c:73:b9:79:71:5a:f5:7c:dc:39:ee:a0:1b:
0a:65:76:f2:d9:15:b5:46:ab:23:1b:ad:2c:e6:c0:
a4:bc:42:16:56:af:e9:36:0e:2f:3b:a6:9e:ea:5c:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:78:83:A2:92:A9:CB:F1:64:D6:7D:49:59:A6:E7:6E:25:EE:4A:2B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-XiDopKpy_Fk1n1JWabnbiXuSis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.5.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:86:82:74:01:27:72:b6:44:1f:d5:63:f3:2c:c9:f3:d1:f3:
a9:d3:c4:e3:19:91:85:79:a8:29:36:52:61:9f:d0:d1:1b:97:
f1:ab:68:d6:ae:d0:05:29:2e:3d:90:0d:73:ce:d8:6f:73:10:
0c:71:a1:58:31:71:02:74:23:d1:64:fd:83:77:d2:ba:c2:e3:
2e:a3:12:96:da:da:ce:a9:b6:55:0b:03:c4:91:4c:f8:af:d3:
a3:22:a4:eb:e7:ee:84:59:e5:81:5e:06:53:63:44:f3:14:92:
21:52:84:61:63:b0:21:8b:f1:8c:db:71:c8:66:a8:07:d6:68:
18:e4:1d:ee:51:73:92:f5:7f:5b:64:8d:ff:f3:7f:6e:a8:dc:
0d:45:d6:f3:cc:99:93:af:a8:ca:e9:6b:45:bb:2a:8c:de:ba:
cf:d9:e9:8b:09:c3:99:a7:f0:5d:11:cb:6b:08:49:72:ef:73:
c2:b0:d2:15:fb:c9:c3:cb:7c:b6:75:e0:59:9f:80:2e:ed:2d:
37:40:45:77:ea:79:2b:e0:3d:d1:e6:c5:ea:8a:aa:a1:7a:5c:
87:d9:92:6b:fd:2b:83:e4:00:0c:42:4e:24:98:bd:73:25:c8:
5f:45:3a:f1:1b:7f:80:73:2f:cf:9b:cc:55:15:ff:ba:66:38:
13:37:59:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org