Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/A8SUoLKnYOhQAgti1fHQk-sSp68.roa
File: A8SUoLKnYOhQAgti1fHQk-sSp68.roa (raw, json)
Hash identifier: S+7B+YrwIV/bF3P5ocHPbfMjKZMA+c5uiAmyguEMSU8=
Subject key identifier: 03:C4:94:A0:B2:A7:60:E8:50:02:0B:62:D5:F1:D0:93:EB:12:A7:AF
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01824A5902714199088EB8B468715D240170
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/A8SUoLKnYOhQAgti1fHQk-sSp68.roa
Signing time: Fri 29 Jul 2022 14:25:23 +0000
ROA not before: Fri 29 Jul 2022 14:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 89.117.88.0/22 maxlen: 24
89.117.215.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4a:59:02:71:41:99:08:8e:b8:b4:68:71:5d:24:01:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 29 14:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03c494a0b2a760e850020b62d5f1d093eb12a7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:87:40:30:3a:50:6f:75:92:b1:95:17:55:
5b:3c:1b:4d:41:b5:52:55:49:f3:c1:b5:96:4d:c1:
81:73:1a:98:62:47:ef:6e:74:da:21:c2:81:34:c9:
cc:0b:85:45:07:05:ae:05:8e:27:f3:71:0a:d1:17:
2f:c9:46:b7:3d:2c:a3:2a:3a:de:d2:e8:8d:64:b7:
79:25:63:82:52:86:7f:92:08:19:82:0d:0f:c6:70:
ae:a1:13:23:91:21:2d:3d:15:f9:c1:68:f3:ef:f1:
b9:2c:78:c3:46:85:4d:17:a4:55:b5:69:58:18:23:
4a:ae:c3:51:5d:ed:78:5d:78:dd:bf:81:18:45:6b:
00:0d:dd:c6:25:c2:ee:b0:c6:43:b1:e4:d0:b3:bb:
44:f5:9c:76:ca:b5:05:42:ba:a6:5f:d1:61:ad:a9:
d5:48:d4:f0:0f:2a:fc:53:23:2d:c5:90:c9:ae:ac:
5c:c2:f4:b7:92:bc:65:3b:bc:1b:e5:ba:51:4a:e5:
5e:f0:14:10:30:2a:4e:41:66:e4:15:ce:5d:50:4c:
4b:c2:49:c6:07:83:40:6a:a9:98:70:15:9b:21:a3:
c6:89:ae:65:40:80:27:8d:bc:0c:1a:61:85:90:d4:
da:17:78:36:be:63:39:18:74:63:29:27:a8:5f:c5:
62:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C4:94:A0:B2:A7:60:E8:50:02:0B:62:D5:F1:D0:93:EB:12:A7:AF
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/A8SUoLKnYOhQAgti1fHQk-sSp68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.235.0/24
89.117.88.0/22
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7b:cf:63:40:a9:f9:e2:3e:08:28:96:d6:3e:aa:45:0e:dd:
fd:e9:c9:46:d7:fd:e1:2d:c7:55:00:54:d1:dc:d7:b6:45:e1:
25:fd:c8:0c:cd:11:90:07:d7:8c:e4:0c:a7:b0:4d:f4:e7:66:
c2:1f:d3:0f:8c:a2:a2:55:b6:ec:15:81:0a:09:7b:65:87:55:
02:8f:5c:8e:79:73:f2:69:9f:4a:7c:71:fc:50:3f:6f:e0:ce:
01:9b:14:32:37:6a:2a:10:c5:30:a6:49:05:61:33:48:78:9c:
89:68:18:99:13:2c:7b:89:f2:5d:84:61:a9:99:78:72:51:f9:
d2:92:4b:17:f3:51:f3:e0:51:f6:8b:76:89:74:d4:6a:c2:74:
a9:4a:44:75:32:fb:40:fa:fa:6d:93:f9:7b:24:3b:a9:37:68:
90:a9:1c:58:54:8e:c9:66:8f:2e:9d:67:f9:21:ea:b7:1e:4b:
7c:63:ad:6f:be:e9:3d:db:1a:4a:5d:dd:f0:af:b3:9b:24:58:
4c:cc:12:04:b0:5f:ad:b6:7e:b1:38:b1:3d:ce:9f:df:94:be:
ff:21:9b:a5:61:07:a1:ef:39:0a:2e:ee:5e:77:56:84:74:c7:
3b:be:fa:5b:99:9d:52:fc:24:1d:b2:66:c8:d9:b5:5f:0e:e4:
4a:27:8d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org