Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4QB-5PgwZHX7AsY-6a0xUUCD7wQ.roa
File: 4QB-5PgwZHX7AsY-6a0xUUCD7wQ.roa (raw, json)
Hash identifier: H9gH3JDK/MmzDtbSYDaJqpuIq+M+BZj27Up+iAqYocM=
Subject key identifier: E1:00:7E:E4:F8:30:64:75:FB:02:C6:3E:E9:AD:31:51:40:83:EF:04
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182826F8510192DE1A9D755A79DAF97D00A
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4QB-5PgwZHX7AsY-6a0xUUCD7wQ.roa
Signing time: Tue 09 Aug 2022 11:48:42 +0000
ROA not before: Tue 09 Aug 2022 11:48:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 89.116.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:6f:85:10:19:2d:e1:a9:d7:55:a7:9d:af:97:d0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 9 11:48:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1007ee4f8306475fb02c63ee9ad31514083ef04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5d:04:56:41:b9:02:af:91:92:91:38:a3:3d:
38:08:35:35:ab:0f:df:87:22:dc:85:22:a0:d7:b8:
3e:28:bb:27:4c:a0:17:8d:d1:56:d6:10:32:9d:ca:
ad:6d:03:56:27:bf:b0:3f:24:dc:aa:8c:6a:8c:4c:
7e:e7:00:29:a8:0a:76:88:e0:41:7e:bf:a9:3c:92:
3f:22:7e:88:a0:02:6c:41:bd:1e:6e:e2:18:c9:c6:
15:57:01:1f:b5:67:38:1f:6f:d7:8d:6f:1e:89:ab:
4c:a8:8c:f3:56:d9:25:94:4c:76:40:02:54:e9:33:
4c:69:a8:71:47:51:f6:75:5f:cd:e4:3a:d1:e8:3a:
ad:17:6e:0f:e4:cc:2a:7c:46:7b:42:b0:5c:e3:89:
ac:1c:1f:35:60:61:bc:56:87:0d:b1:2a:fc:03:5e:
1a:55:a1:a9:30:78:bd:1e:57:90:84:c4:81:f5:42:
d3:5c:7d:68:f2:8b:97:59:20:47:65:fc:e4:91:d4:
a4:55:38:ba:27:6b:3e:a4:4b:ae:4d:77:99:89:33:
cd:92:82:7a:1c:67:8b:b5:76:23:45:7d:89:99:f2:
63:b4:53:af:4a:66:95:d0:07:67:16:9e:f6:75:de:
d9:b5:78:2a:d9:f4:ff:1c:60:65:a1:25:71:d5:dd:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:00:7E:E4:F8:30:64:75:FB:02:C6:3E:E9:AD:31:51:40:83:EF:04
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4QB-5PgwZHX7AsY-6a0xUUCD7wQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.135.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:43:0c:fe:95:c1:8b:ef:7c:10:ba:89:f7:79:ef:8f:31:57:
a1:bf:3d:3b:ea:e9:e7:24:d0:e5:c8:e8:0e:bc:1a:c9:93:d3:
8b:9e:d8:aa:20:dc:10:77:1d:3c:27:a8:03:8b:b3:f8:58:8c:
43:03:6f:d3:d8:24:d0:aa:57:48:64:5c:fb:0d:45:d6:6c:a1:
29:e9:f2:f7:55:b2:dd:c7:aa:be:04:7e:79:69:ca:ed:79:7d:
b3:a8:ce:78:d6:fd:d0:0f:1c:ea:ca:53:3a:a3:3d:95:35:79:
9a:fb:56:8d:ea:16:e0:8f:27:0a:48:11:57:73:c3:fd:89:84:
c9:ca:46:db:3e:cd:55:cd:27:a1:48:ca:8d:22:f6:ba:09:67:
e7:c4:34:29:e0:59:76:a0:72:71:cc:cf:f3:43:d4:b3:2d:fa:
e5:4b:23:6f:59:b9:8e:c7:fb:11:b7:86:bd:39:c5:12:ce:74:
46:83:ce:19:01:d7:0d:a2:2e:0e:64:21:a9:6d:b3:99:ea:9c:
ae:b2:8e:55:ab:d2:07:cf:b4:19:f2:ee:7b:90:b9:53:4e:2c:
94:59:c7:6e:1b:47:ef:17:ab:d2:1e:dc:78:ad:44:b8:02:4b:
b1:7c:9b:d0:d4:7e:ea:79:5f:5a:17:4e:7b:db:de:54:8f:55:
ca:a3:c7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:28 2025 by rpki-client