Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5mlBP4NHOmnl9h_ISDyDjb-Z49Q.roa
File: 5mlBP4NHOmnl9h_ISDyDjb-Z49Q.roa (raw, json)
Hash identifier: Y69QgzQI00gGRHZI9EctIMTWhPpR42Vfbr4hu5NuxNg=
Subject key identifier: E6:69:41:3F:83:47:3A:69:E5:F6:1F:C8:48:3C:83:8D:BF:99:E3:D4
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182D59CA6C0275E915E662F69CDCE4720F7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5mlBP4NHOmnl9h_ISDyDjb-Z49Q.roa
Signing time: Thu 25 Aug 2022 15:26:29 +0000
ROA not before: Thu 25 Aug 2022 15:26:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 89.117.104.0/22 maxlen: 24
89.116.44.0/22 maxlen: 24
89.116.48.0/22 maxlen: 24
89.116.60.0/22 maxlen: 24
89.117.152.0/22 maxlen: 24
89.116.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:9c:a6:c0:27:5e:91:5e:66:2f:69:cd:ce:47:20:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 25 15:26:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e669413f83473a69e5f61fc8483c838dbf99e3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:0c:48:70:51:85:6a:a6:57:1c:06:ca:29:
a4:bf:9e:30:4d:54:63:4a:69:68:ba:c3:7f:69:96:
65:ff:76:49:f3:b5:c3:23:d8:26:9b:63:ee:a7:6b:
6a:d8:6e:25:5b:d1:dc:98:82:06:78:b0:67:3c:65:
88:03:b3:f1:47:52:cc:f5:04:bc:f3:cf:38:32:88:
e0:0f:07:5b:78:7b:5a:f2:06:01:06:13:27:0d:ff:
ad:9c:39:85:c0:4f:cd:33:75:98:13:17:2d:98:4c:
35:bf:a4:13:4f:a7:3c:f1:7a:f6:bf:7d:8b:6e:5d:
57:5d:2e:b0:95:02:e9:70:70:ac:37:af:56:c1:8e:
5c:f5:4a:42:0f:f6:21:e4:17:66:93:ed:e2:8a:08:
6d:4a:9a:84:c9:f6:a4:6f:c7:64:65:6f:ef:fb:2e:
0c:96:78:b2:74:53:39:61:28:47:98:37:5f:9b:24:
01:f8:51:00:19:96:67:e4:ee:44:53:d4:99:f0:e6:
61:fe:34:79:7d:99:74:50:be:c0:70:45:bd:1b:2d:
a3:ce:d8:90:6f:61:1b:76:26:80:f4:17:f7:75:2e:
8c:3b:bc:e3:25:4f:f0:3c:39:e6:88:b5:71:2c:03:
2b:7b:98:2b:0d:7f:87:e6:40:c2:ab:fb:7b:e3:c6:
b7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:69:41:3F:83:47:3A:69:E5:F6:1F:C8:48:3C:83:8D:BF:99:E3:D4
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5mlBP4NHOmnl9h_ISDyDjb-Z49Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.44.0-89.116.51.255
89.116.60.0/22
89.116.212.0/22
89.117.104.0/22
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
95:fc:7b:7b:35:9c:33:ff:f3:53:11:c8:86:93:c7:ca:c2:93:
7f:f1:97:68:d6:07:7b:1b:08:df:71:e3:2e:29:f1:df:8c:bc:
3a:02:b6:3a:48:a9:4e:94:b0:9c:f4:84:d5:d4:db:a1:33:4d:
58:b2:06:b6:3f:7a:cd:97:ec:95:0b:18:ca:0a:4a:6c:67:6b:
ae:0a:81:25:bd:f6:a3:c3:e7:d2:b0:02:8f:d0:44:b2:58:ec:
14:98:9b:d3:95:7d:d9:66:08:71:51:9a:e6:78:ea:4e:33:be:
bd:ae:a8:19:3b:82:45:75:1f:04:08:b4:4b:a6:70:cb:3e:55:
08:5b:92:fa:0f:84:f3:62:d9:12:f6:25:17:39:1f:f0:62:df:
7d:12:f8:45:72:9a:98:a5:f1:0e:dd:68:7d:50:28:11:de:48:
08:ce:1a:8b:6f:37:86:c1:41:1b:22:47:ea:64:58:88:e2:1f:
c3:5a:7d:b8:01:d8:f0:80:ab:4b:cd:f2:33:24:3e:d8:f1:e9:
77:d7:a2:fd:99:d6:2a:8f:cc:ef:7e:eb:ea:7c:b8:55:31:12:
82:4b:f8:4c:78:ca:d7:ef:51:99:30:12:bd:cb:0c:c9:7c:21:
19:ac:d0:79:43:3e:59:e9:64:f1:99:35:88:8f:88:b0:2a:25:
bc:83:7b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org