Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5p4CIz3k0IS_n5kNSCKwpraL2zA.roa
File: 5p4CIz3k0IS_n5kNSCKwpraL2zA.roa (raw, json)
Hash identifier: 758Hk2RPEK0XPQ2ycpl5oOZcayJNNyHufSL3BleYOVM=
Subject key identifier: E6:9E:02:23:3D:E4:D0:84:BF:9F:99:0D:48:22:B0:A6:B6:8B:DB:30
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0853C5B2
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5p4CIz3k0IS_n5kNSCKwpraL2zA.roa
Signing time: Sat 01 Jan 2022 00:51:25 +0000
ROA not before: Sat 01 Jan 2022 00:51:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 89.116.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139707826 (0x853c5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jan 1 00:51:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e69e02233de4d084bf9f990d4822b0a6b68bdb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:d7:15:32:35:2a:37:91:17:c9:e9:da:34:
ea:ac:92:5f:a9:8d:34:cf:78:56:d7:88:c0:e4:9a:
26:c8:70:48:9f:68:a3:b5:40:8f:ee:40:2f:39:0e:
30:8b:b1:ee:24:e4:d5:1a:32:73:34:f1:68:9c:92:
82:50:77:c5:7e:c5:12:cb:38:dd:a1:a7:2b:bd:ed:
77:85:00:b8:03:5c:97:fc:9f:6f:6e:70:bb:1f:94:
7e:b7:1f:f4:e4:85:c6:6a:7c:f5:4d:4f:a1:6a:60:
fd:fa:91:47:b0:01:a6:60:d7:10:02:5a:b3:2a:a1:
20:b4:c9:e9:e4:c6:1c:13:02:ee:8b:ea:b4:fd:6b:
f3:59:ed:31:eb:c7:a8:77:c0:b3:4d:f5:6d:e5:73:
70:d6:16:48:1a:7b:92:4d:5e:f0:ed:34:73:8f:33:
14:f3:b4:eb:ce:f8:58:a0:6f:ee:a0:54:6a:8f:2f:
c6:08:4e:53:4c:f8:a0:9c:98:d2:b8:f3:83:2a:eb:
44:a3:92:8e:f6:06:81:5a:b5:77:50:f6:33:d2:a6:
c4:ed:16:64:bb:1d:1f:36:32:dc:50:33:c1:f0:59:
2c:a6:0f:3e:93:60:e5:50:ce:f0:30:a7:e8:ec:4e:
43:cf:ae:26:80:f4:45:ab:cb:dd:8c:fc:fe:84:25:
e9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9E:02:23:3D:E4:D0:84:BF:9F:99:0D:48:22:B0:A6:B6:8B:DB:30
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5p4CIz3k0IS_n5kNSCKwpraL2zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.100.0/24
Signature Algorithm: sha256WithRSAEncryption
83:18:3a:86:be:4e:d3:ee:7e:84:21:62:6f:58:0c:ea:22:78:
ef:21:77:e9:20:eb:2e:67:a9:5c:5d:ff:bf:51:9d:21:b8:73:
47:63:03:35:4b:4d:10:f6:83:6b:b5:5c:52:06:42:e0:30:eb:
3f:10:6c:0c:1b:42:8c:61:a8:5a:80:a1:80:1d:b9:f8:98:d5:
e3:1a:2c:72:04:ef:12:f3:3a:86:06:31:e9:a9:68:06:52:ae:
d4:aa:a8:01:b4:a2:7d:c5:f1:59:1b:46:f1:28:3e:e4:f8:9c:
3b:5c:79:5f:d6:ea:be:3e:55:e0:a4:4b:6e:21:c0:f9:20:f1:
85:db:a2:b7:ee:42:8e:96:cd:56:e1:91:5f:3b:7f:0f:39:af:
46:6e:37:85:7d:ba:af:ae:cd:97:71:90:43:03:b9:33:0a:79:
c1:3f:39:06:41:3c:02:77:46:f9:2d:85:f0:04:f4:25:55:cb:
4c:cd:be:0c:b3:21:7b:c8:2e:4d:6f:fa:51:c1:49:06:39:6d:
e5:66:69:b8:8a:68:57:d0:25:7a:38:88:ad:f2:be:bf:fa:2c:
ab:d5:26:63:55:13:93:7c:46:fe:87:15:65:5b:f7:35:87:52:
00:23:1e:3c:7e:23:5b:dc:b3:46:8f:a5:cd:2d:64:74:30:a8:
51:5a:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org