Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/BgZ6XI1snxjpQVYRy_C_J6Iwfmk.roa
File: BgZ6XI1snxjpQVYRy_C_J6Iwfmk.roa (raw, json)
Hash identifier: ROz7+6mPvtR4P9/tQI4IbJppK8HmX/2hC6dmaYdmRz0=
Subject key identifier: 06:06:7A:5C:8D:6C:9F:18:E9:41:56:11:CB:F0:BF:27:A2:30:7E:69
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183D063CB33314F751E903E2347B43244B9
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/BgZ6XI1snxjpQVYRy_C_J6Iwfmk.roa
Signing time: Thu 13 Oct 2022 08:09:04 +0000
ROA not before: Thu 13 Oct 2022 08:09:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 89.116.239.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:63:cb:33:31:4f:75:1e:90:3e:23:47:b4:32:44:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 13 08:09:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06067a5c8d6c9f18e9415611cbf0bf27a2307e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:6c:e0:22:97:c0:ac:ce:a3:18:c9:d3:50:
fa:ac:7d:00:8a:e6:79:05:1a:5f:26:dc:46:de:9b:
3f:de:6e:60:fc:bd:e0:70:0b:de:38:be:8f:ee:4d:
e1:cc:d1:3a:08:f0:f3:a6:ef:f5:69:90:a4:65:91:
e3:14:39:ce:b1:3b:e4:b3:5a:91:7f:a7:b9:41:de:
f9:5d:cf:6e:47:6d:d5:16:df:f8:c5:13:40:24:66:
71:54:09:fe:b4:fe:6d:5a:b8:8a:10:04:e3:57:20:
3f:93:69:34:5e:a7:85:07:bf:e5:1c:dd:3b:45:4e:
44:e2:ad:4d:fb:09:23:e1:40:51:3f:e6:bc:00:4b:
1a:15:5d:ac:67:3b:d0:1a:e8:2f:c4:2d:dc:e8:4a:
2b:55:2e:e2:c2:01:5c:89:dc:d8:50:88:38:ad:19:
43:ee:fb:d5:49:97:64:10:c4:41:f6:cf:d3:55:c5:
2f:45:56:8b:56:f4:db:83:5e:61:25:70:09:66:e7:
ec:aa:c0:ec:99:09:3e:c5:eb:f7:42:09:77:50:95:
77:e6:5d:e3:62:b1:f2:e4:be:3e:5d:5b:e9:5b:4f:
bb:fc:0a:8a:25:ce:32:de:e5:bc:a5:08:c2:67:65:
1a:c7:40:f8:90:4c:b1:05:3c:67:70:09:1b:cd:e1:
99:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:06:7A:5C:8D:6C:9F:18:E9:41:56:11:CB:F0:BF:27:A2:30:7E:69
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/BgZ6XI1snxjpQVYRy_C_J6Iwfmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.177.0/24
89.116.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3e:b4:58:8b:34:a1:28:8d:d9:22:c6:b6:26:ef:cf:c4:02:
98:2c:a7:9d:9b:a6:ce:ee:66:43:f2:3f:08:e4:29:82:b8:a3:
cd:bf:a2:12:85:97:6b:a1:81:08:1e:6f:71:ee:b9:9c:dc:15:
81:1b:e5:8f:52:91:8e:81:5a:1f:d9:f8:e8:85:b4:6b:d9:50:
44:74:75:64:6b:65:8f:54:19:49:8d:e0:e0:aa:c9:2a:ba:4c:
bc:79:7c:28:50:6f:cb:ac:8e:56:a0:a0:f7:a7:08:a1:82:5b:
7b:85:74:a0:45:e5:b7:0a:56:45:e3:38:5d:33:81:30:99:c8:
c3:62:ad:df:3f:b9:2c:0e:0c:86:e1:31:9d:2b:c0:11:87:9a:
d4:f7:89:68:6d:2b:41:3c:34:de:87:39:fd:14:83:e9:4f:15:
34:9a:42:9b:87:c6:27:a4:53:07:51:92:db:0f:d6:f3:c4:5d:
98:ca:e3:be:e1:51:b4:d8:a1:df:1d:3f:e4:e7:8b:85:95:e8:
8c:d3:9d:89:bf:50:bb:54:01:e2:8e:fb:4f:68:33:84:4c:75:
f2:ba:21:67:24:c7:33:0a:d7:db:9c:94:27:36:6b:00:a6:e5:
f7:9c:11:dd:57:7d:9b:df:0a:bf:9b:47:45:d2:4a:c5:7b:b4:
93:67:c3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org