Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/8_SgTuQYIasZmnuHq7kE8cU_hDc.roa
File: 8_SgTuQYIasZmnuHq7kE8cU_hDc.roa (raw, json)
Hash identifier: I4qUqpjYvUwqF+h1WXEii9p6QbcsIRNnuDWd7G7pmrE=
Subject key identifier: F3:F4:A0:4E:E4:18:21:AB:19:9A:7B:87:AB:B9:04:F1:C5:3F:84:37
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A731D69
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/8_SgTuQYIasZmnuHq7kE8cU_hDc.roa
Signing time: Fri 22 Apr 2022 05:59:55 +0000
ROA not before: Fri 22 Apr 2022 05:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 89.116.123.0/24 maxlen: 24
89.116.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175316329 (0xa731d69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 22 05:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3f4a04ee41821ab199a7b87abb904f1c53f8437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:78:3b:86:d0:72:09:38:88:c7:b6:df:ce:
4b:61:0e:8b:37:03:a8:22:95:ec:7a:30:b0:c2:36:
a3:1b:47:8c:f2:b9:27:80:ff:e4:a3:d8:e7:9b:78:
7a:29:b3:11:b0:f2:cb:50:6d:05:1a:69:15:1c:c4:
b6:12:70:b6:71:6f:ae:e0:95:2e:94:07:d3:e6:ff:
cb:a2:57:43:39:26:23:76:cb:4d:3b:35:70:bf:ab:
65:63:de:11:a4:7d:a2:cf:61:2a:38:d6:33:9b:d1:
3d:66:4d:d0:ed:05:87:e5:38:bd:33:55:95:34:f0:
c6:20:20:ef:ef:09:28:01:51:32:2c:d5:f4:3e:7d:
af:75:82:81:69:f8:18:79:4f:d5:be:3c:0d:0d:a8:
6f:a0:3a:f3:e7:a8:16:13:e3:29:ce:97:05:84:8b:
51:ef:fe:74:6d:bb:e2:11:c6:ff:60:7f:ab:c2:08:
23:4b:88:3d:01:96:ff:07:b3:56:ca:51:c4:1f:68:
47:a8:be:f2:7f:1a:58:24:b1:bd:4d:7d:c3:48:75:
90:60:75:48:5b:9d:3a:31:07:aa:33:bc:75:1b:0b:
2e:ef:47:bf:1d:87:bd:1a:77:c4:27:0b:f1:d3:d4:
65:6f:83:4b:1e:aa:b8:3d:e4:ae:a5:de:cb:b7:57:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F4:A0:4E:E4:18:21:AB:19:9A:7B:87:AB:B9:04:F1:C5:3F:84:37
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/8_SgTuQYIasZmnuHq7kE8cU_hDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.123.0/24
89.116.144.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:3d:0c:26:ba:33:67:69:e1:3f:15:8c:98:15:14:e3:5f:5e:
83:ca:09:29:20:a7:36:8d:c1:49:5f:26:19:90:48:10:66:64:
45:e3:35:52:46:a3:13:16:49:ce:8e:2e:34:7b:58:22:09:e1:
95:a7:86:87:e4:04:ea:d2:b5:e0:85:10:11:9f:53:94:bd:e4:
ca:a2:75:cc:1b:0b:1c:e1:97:a1:a2:8b:23:74:d5:45:d2:fd:
8c:16:23:d2:33:bd:04:28:84:f8:d2:48:2e:d7:8b:91:bf:06:
17:59:ce:b8:60:78:4f:64:59:ba:67:34:35:30:da:c1:9a:63:
ee:f0:78:0b:da:c8:5d:6e:a5:ae:51:15:20:82:66:a4:3b:2e:
ef:b7:c4:59:7e:ad:a3:5e:fa:40:b7:e9:0f:6e:14:58:cc:a2:
f6:62:33:c2:3f:8d:63:09:4b:88:8d:0d:be:5d:86:ef:84:0e:
f0:22:c6:43:87:3e:e7:57:9c:02:93:80:3f:fe:8a:96:be:b0:
51:45:37:a0:93:da:1f:02:19:21:f1:0b:f0:db:13:5d:95:ea:
b8:7a:fd:99:e8:ea:ef:60:7b:63:dd:6f:0d:3d:9b:42:3f:da:
5c:80:21:f2:15:fb:cb:68:6a:45:89:9c:50:2e:f0:e9:db:78:
16:4b:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org