Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5yX9NL-8cLj8hhkt1PkTJp2HJH0.roa
File: 5yX9NL-8cLj8hhkt1PkTJp2HJH0.roa (raw, json)
Hash identifier: aoCoueGq2YgXCMJ6/vYO2Z4JIJVFDblHMJBDAq8+kC0=
Subject key identifier: E7:25:FD:34:BF:BC:70:B8:FC:86:19:2D:D4:F9:13:26:9D:87:24:7D
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0BAB9752
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5yX9NL-8cLj8hhkt1PkTJp2HJH0.roa
Signing time: Thu 30 Jun 2022 12:19:55 +0000
ROA not before: Thu 30 Jun 2022 12:19:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 89.117.104.0/22 maxlen: 24
89.117.132.0/22 maxlen: 24
89.116.72.0/22 maxlen: 24
89.117.160.0/22 maxlen: 24
89.117.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195794770 (0xbab9752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 30 12:19:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e725fd34bfbc70b8fc86192dd4f913269d87247d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:f6:e8:f8:13:4f:4e:ac:f8:04:d1:0a:67:
82:3d:7b:51:1c:62:ea:3d:eb:6f:b1:a9:48:8c:49:
49:42:a2:e2:6c:df:6c:18:47:e9:ae:92:9e:21:be:
e3:e1:7e:2c:a0:f2:e8:2f:8e:3d:38:66:54:42:f7:
c9:07:0c:39:93:00:d3:d2:2b:76:7b:0e:e1:aa:2f:
e7:e6:e9:f8:03:53:e1:64:f8:43:36:e3:40:3f:ab:
fa:7c:78:1c:65:3f:44:9c:4a:62:dc:91:77:0f:a1:
4c:91:5b:07:ee:70:e4:62:c3:ae:9a:55:da:9c:4f:
79:8c:54:e5:5f:57:62:d6:85:0a:59:bb:fd:ed:73:
b7:0f:1c:cf:7c:fc:b2:b4:40:9d:08:ca:17:7d:6a:
f4:5b:81:51:13:1d:e6:9e:55:91:a4:bb:c3:86:f9:
6d:59:e3:0e:c5:60:cf:6e:85:b5:d6:67:ee:c5:3e:
d0:06:9b:37:d8:c5:dc:7d:4b:7c:60:fa:cd:2f:16:
70:6e:dd:ec:7c:82:02:43:cb:6d:af:c3:94:d9:46:
02:49:09:c5:72:82:f2:22:10:b7:63:84:0d:ea:b1:
bc:95:c9:61:f6:8f:60:1a:b6:e6:fd:1b:48:27:9a:
f2:bc:c5:01:f7:ff:db:10:35:23:e0:dc:92:55:f4:
d0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:25:FD:34:BF:BC:70:B8:FC:86:19:2D:D4:F9:13:26:9D:87:24:7D
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5yX9NL-8cLj8hhkt1PkTJp2HJH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.72.0/22
89.117.64.0/22
89.117.104.0/22
89.117.132.0/22
89.117.160.0/22
Signature Algorithm: sha256WithRSAEncryption
18:22:a9:44:55:04:97:98:19:79:92:af:ba:9c:2f:71:e2:e7:
6e:88:29:03:74:77:54:a8:17:36:62:e0:ba:71:7a:2e:3f:de:
37:15:0b:05:5c:27:a8:f4:35:f2:39:a5:63:58:8b:70:4e:ad:
d5:a8:e6:f7:17:44:e6:5e:b6:6e:54:8b:de:e3:cb:f6:b2:1f:
83:d5:d2:1c:fd:02:04:a0:8a:66:c4:ec:6c:ab:fd:a7:0b:54:
ea:cb:92:43:9a:be:7a:21:89:16:f0:fb:4e:80:05:86:e8:e9:
f5:c7:4a:a2:42:ad:08:42:ab:fe:14:c3:b6:52:26:f2:3c:fc:
5e:e8:eb:df:fe:0e:e1:77:c0:f0:b6:ee:6a:62:83:34:ff:88:
49:af:ae:f8:34:52:8e:b9:cc:96:b5:d2:24:0f:70:a7:aa:1f:
0e:ca:c4:38:1f:47:d0:48:e7:1b:12:bc:cb:2a:4d:0e:32:9f:
0d:47:7c:8a:2b:0c:73:1b:0e:98:16:bb:61:af:10:0a:7d:f2:
47:da:cc:9e:fa:18:32:6f:cd:f2:12:9b:34:46:cd:2d:a3:a3:
a3:ab:d7:64:f7:9e:73:3b:2c:e2:34:9d:28:9a:df:8b:ec:5c:
5d:83:31:04:63:22:7b:ac:00:f7:b3:3e:2b:a9:4a:7a:6b:27:
aa:cd:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org