Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/715IEg_bteX4hrrxfq_ho4qK4Aw.roa
File: 715IEg_bteX4hrrxfq_ho4qK4Aw.roa (raw, json)
Hash identifier: lCpTUHtJvgB99aggcmXmzJQzAyf75JoPnUIfdyC/L0g=
Subject key identifier: EF:5E:48:12:0F:DB:B5:E5:F8:86:BA:F1:7E:AF:E1:A3:8A:8A:E0:0C
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0BA7EF7E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/715IEg_bteX4hrrxfq_ho4qK4Aw.roa
Signing time: Wed 29 Jun 2022 07:53:02 +0000
ROA not before: Wed 29 Jun 2022 07:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204372
IP address blocks: 89.117.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195555198 (0xba7ef7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 29 07:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef5e48120fdbb5e5f886baf17eafe1a38a8ae00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:08:99:f8:1b:e5:eb:f0:d3:fe:1b:8b:5c:1c:
8f:f0:ba:8e:15:7c:4c:63:b3:1d:c4:5b:24:ae:d4:
4f:43:f5:1a:63:be:16:f4:2f:b1:67:30:51:32:01:
a3:84:86:82:84:ef:a3:64:3a:80:98:d5:5c:10:04:
0d:58:93:7d:cf:68:cf:00:6f:87:ec:37:5d:81:7e:
de:d3:ec:bc:df:4b:35:43:bd:42:d9:72:62:c6:2d:
72:b4:93:fc:d7:60:1a:84:97:42:65:1a:79:e4:52:
4c:12:38:37:ec:d2:4f:dc:a2:71:2c:f0:7f:56:07:
91:11:14:83:f8:c6:7d:17:18:0e:a3:84:a0:6d:ad:
79:07:45:14:74:9d:0d:8c:c2:e3:dd:ac:ed:3b:b4:
d1:8e:e2:05:d3:e2:50:99:0f:91:69:7a:1e:34:a5:
56:31:0c:e4:7d:8b:f4:27:ce:62:c5:23:16:33:c5:
44:c5:24:90:82:3c:b0:fd:ef:2c:e7:c7:88:9e:2e:
38:da:e8:07:91:4a:36:72:4f:bf:49:02:e7:48:44:
78:04:7a:91:a7:0c:e5:1b:9e:d5:4a:df:37:45:6f:
51:6e:96:23:20:4d:15:c6:2b:46:4f:b0:41:1f:9a:
f7:e1:2a:f7:3b:86:33:c6:84:61:7d:a3:5e:8d:1a:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5E:48:12:0F:DB:B5:E5:F8:86:BA:F1:7E:AF:E1:A3:8A:8A:E0:0C
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/715IEg_bteX4hrrxfq_ho4qK4Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:6c:cc:42:6a:c8:00:12:7f:68:bd:18:d2:2c:db:46:bf:98:
c1:98:4e:f5:47:33:b2:62:11:dd:d9:4c:71:44:83:1a:cb:22:
d0:d9:95:ed:95:77:ec:78:77:58:b7:60:87:b1:7f:50:e1:eb:
20:b8:8b:4e:20:19:8a:11:78:c2:7d:c3:e2:8a:bc:c8:76:fa:
8a:19:53:9f:89:43:eb:ac:45:d4:bf:b3:bc:66:a8:9d:28:4e:
4c:1b:5e:6d:43:26:0a:ba:aa:0f:22:24:b5:92:47:dd:d5:ec:
25:6e:d2:83:3b:9a:f1:e6:9c:01:40:da:34:2a:7e:9a:d6:ec:
b1:14:ff:28:90:4e:a4:4f:93:4c:5c:76:ac:32:9c:f6:6d:23:
9c:2d:4f:10:91:11:e5:1c:4d:eb:54:b2:67:72:63:fb:0e:a3:
f8:63:4b:32:5a:73:21:ed:a7:33:1b:93:b5:0b:af:72:93:b5:
74:e4:6f:32:c8:a5:fe:80:b0:dd:e6:da:c1:5f:dc:1b:4c:5c:
1f:92:67:bc:b8:4d:6f:be:61:ab:32:6b:03:37:18:93:0a:67:
bd:c3:a5:a3:4d:84:6f:ff:83:7c:77:71:e3:72:df:ff:99:e1:
4a:e5:c4:a4:e8:54:90:89:4b:86:14:26:4d:48:c2:db:3f:25:
a7:df:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org