Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/82_K9_GD2syIpgUaLDvquknh8BA.roa
File: 82_K9_GD2syIpgUaLDvquknh8BA.roa (raw, json)
Hash identifier: klazPgz9jxYnp42YpyYhxrSoAW5c3yHGAf9DMRt0wX4=
Subject key identifier: F3:6F:CA:F7:F1:83:DA:CC:88:A6:05:1A:2C:3B:EA:BA:49:E1:F0:10
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B256594
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/82_K9_GD2syIpgUaLDvquknh8BA.roa
Signing time: Wed 01 Jun 2022 08:14:21 +0000
ROA not before: Wed 01 Jun 2022 08:14:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 89.117.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187000212 (0xb256594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 1 08:14:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f36fcaf7f183dacc88a6051a2c3beaba49e1f010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:5e:70:a6:9f:5d:5d:34:2c:5f:d5:5b:f1:
e4:32:6c:3d:f2:5e:6a:b8:2f:26:f8:b6:68:7e:6e:
b8:75:1a:fd:36:12:9b:bb:c3:44:d4:4b:d0:05:ac:
37:f2:ef:02:9a:9e:cd:b5:88:3f:c5:b6:5d:65:cb:
4d:e8:20:1a:2e:6f:69:3f:50:38:37:ce:ef:6d:62:
b8:6a:39:d1:d1:1d:da:14:e1:d6:7a:1d:ae:be:de:
24:07:44:f3:3c:62:32:68:31:f6:4e:0d:89:42:03:
f3:4f:41:9d:e8:6a:63:77:b8:4a:87:35:57:e5:82:
83:5b:9f:e8:92:dd:cb:eb:9c:fe:0f:35:a4:a0:c0:
2e:34:98:7b:e9:5f:82:32:c2:e8:82:1e:d1:e7:97:
09:ce:ed:48:4b:a4:21:9b:bd:a7:75:68:a5:a5:04:
46:67:15:87:b6:56:32:28:46:b3:6b:d3:ff:fe:19:
aa:bf:a4:94:d1:1d:31:4a:7a:3c:cd:8f:e7:aa:9f:
b7:1f:e6:ad:4a:3b:da:bf:b6:88:d6:12:75:b9:48:
db:47:e4:66:42:b4:a3:33:9c:f6:da:18:1f:7e:bd:
6b:93:1c:cf:ba:d4:b2:6a:56:fe:3a:5a:22:fa:b1:
e2:de:92:1e:32:54:e1:e2:e5:23:7c:5b:54:b0:72:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:CA:F7:F1:83:DA:CC:88:A6:05:1A:2C:3B:EA:BA:49:E1:F0:10
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/82_K9_GD2syIpgUaLDvquknh8BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.112.0/22
Signature Algorithm: sha256WithRSAEncryption
78:8a:a9:1f:05:12:c2:af:b7:f6:f9:73:f3:2c:77:f4:80:73:
c1:67:28:71:ee:b5:72:cf:68:54:19:fa:2b:69:f4:29:c0:8f:
54:e8:72:4e:3e:f0:45:71:a2:3a:be:d4:b6:1b:39:3f:88:b6:
33:f8:c6:0c:7f:8a:67:f2:40:51:f1:8e:fe:f5:2e:aa:0f:9e:
ae:d5:36:b4:84:ac:6f:90:b7:af:8e:bf:8d:6d:50:31:7f:2f:
f2:f6:30:2a:e5:86:cd:1e:ed:05:e9:4b:04:73:0c:e2:fd:61:
0a:34:06:c2:62:9c:44:c5:ad:4a:34:31:50:4a:41:f1:0a:4a:
df:ec:54:9e:03:a9:5c:0d:b4:16:4e:99:84:47:6b:a3:74:28:
dc:27:db:38:f5:d5:93:1d:14:34:6f:ef:0c:95:3a:49:5e:7f:
34:02:17:59:a7:5b:d3:c7:b3:74:61:b7:a4:55:e3:04:af:7e:
cf:0b:09:f2:a6:7c:a7:55:58:7d:b1:3e:a5:22:7a:9d:f5:19:
55:66:39:f8:c9:b5:f8:4e:64:db:fb:6e:b8:18:3a:2e:45:34:
34:10:56:2b:dd:6b:ff:fa:71:aa:85:75:42:60:f0:48:2b:0e:
9b:53:9a:65:d0:fe:2f:18:83:99:ed:67:1f:94:9a:9e:20:7d:
92:c3:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org