Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/AEXjCha7vC3Yby3MdOddjpoY4R4.roa
File: AEXjCha7vC3Yby3MdOddjpoY4R4.roa (raw, json)
Hash identifier: vKzQAnxckMQOmTGjcXOl+j0MAwn1TQyBjoGzUwrZXio=
Subject key identifier: 00:45:E3:0A:16:BB:BC:2D:D8:6F:2D:CC:74:E7:5D:8E:9A:18:E1:1E
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A9DEA2C
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/AEXjCha7vC3Yby3MdOddjpoY4R4.roa
Signing time: Thu 05 May 2022 13:40:38 +0000
ROA not before: Thu 05 May 2022 13:40:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 89.116.60.0/22 maxlen: 24
89.117.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178121260 (0xa9dea2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 5 13:40:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0045e30a16bbbc2dd86f2dcc74e75d8e9a18e11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:5d:42:d3:74:1a:ce:a9:67:60:a6:bd:bc:
81:ec:d2:57:5e:7b:bb:fc:51:d4:83:fc:4c:e9:39:
98:4a:cc:b2:22:85:78:76:d5:58:87:9e:03:6c:e1:
35:95:7a:1d:06:f2:8f:12:09:55:6f:b7:22:fa:06:
73:f2:93:88:56:96:34:9f:db:f7:76:52:9a:50:9c:
6d:c0:1e:de:8d:14:56:f4:2c:3f:a1:16:e4:dc:ad:
f3:4a:67:4d:b0:e7:d6:2b:ca:8e:05:32:39:f1:99:
b7:24:8f:29:dc:b2:b1:84:75:b3:5a:b8:90:83:e0:
ed:9d:27:be:76:f2:69:11:d9:a3:a9:e9:86:d3:17:
93:71:c9:3f:94:52:d5:2c:5a:c2:43:f0:22:a2:64:
1b:46:3f:98:36:4d:fc:ca:fd:a9:c7:e9:47:bc:6d:
a7:33:ad:e2:73:80:8c:f1:4f:af:31:10:a3:b1:64:
34:95:0a:67:70:2c:ce:6f:16:6d:cb:3e:48:fe:eb:
4e:3d:59:61:1a:7c:32:41:d5:e2:a2:c0:eb:3b:43:
e6:6a:c4:9c:08:3b:71:c2:88:f4:cb:ae:63:8e:4f:
50:5a:b3:12:a8:6f:38:69:56:b9:64:29:77:df:3c:
fd:75:cb:7b:e0:76:8d:26:96:23:17:67:29:e4:dc:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:E3:0A:16:BB:BC:2D:D8:6F:2D:CC:74:E7:5D:8E:9A:18:E1:1E
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/AEXjCha7vC3Yby3MdOddjpoY4R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.60.0/22
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
09:a0:b1:53:c8:76:de:cd:bf:c0:52:71:09:6e:e2:42:5d:76:
c7:0a:64:51:a1:7b:8a:4b:bf:f4:85:b9:e8:7b:f4:cd:d0:5c:
67:8a:80:5b:dc:05:6b:88:c4:ac:89:97:f2:cf:02:4e:f2:59:
10:19:fd:2d:d0:09:e8:c0:d9:04:b9:f5:c1:77:36:73:97:70:
4c:1f:e1:a7:fd:68:69:d6:b0:89:3e:90:06:5c:a3:d1:8e:41:
62:c3:05:ba:b0:ba:ce:65:73:6d:5d:ad:59:ee:7f:2f:50:d6:
14:04:23:de:16:20:32:50:bd:42:d0:c4:f8:4f:3e:1e:24:e8:
ef:a0:09:47:5f:fa:7e:08:bc:35:3c:5e:20:a1:db:c3:bf:fe:
50:06:2e:bf:ed:ce:1f:f6:53:5d:39:c1:84:77:b3:1b:61:ec:
e2:31:35:e5:f3:7f:52:66:6f:47:5c:4b:3c:c7:02:65:59:f9:
63:d8:c7:2b:3b:a8:4e:d8:7a:55:50:0b:57:70:ab:08:b4:2b:
eb:47:34:c6:56:2a:2a:8d:f2:f7:86:7d:e0:99:ef:41:a3:9c:
7d:f3:6d:11:3f:65:f9:67:ac:19:70:88:b6:7c:8e:cd:c1:b2:
c3:42:1f:12:42:18:5a:6e:ad:17:da:ee:5e:8b:e0:51:2f:43:
cd:98:df:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:52 2025 by rpki-client