Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/CozTaVzK8M0fO2DCFB4JKduANtA.roa
File: CozTaVzK8M0fO2DCFB4JKduANtA.roa (raw, json)
Hash identifier: 9p+qPhP2DWpGFp8aJ0/DP2mLtWrx+v+z9Kmx4uBEwoY=
Subject key identifier: 0A:8C:D3:69:5C:CA:F0:CD:1F:3B:60:C2:14:1E:09:29:DB:80:36:D0
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182C959198CA04C4A36C225B9F2BA5DDC87
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/CozTaVzK8M0fO2DCFB4JKduANtA.roa
Signing time: Tue 23 Aug 2022 06:17:15 +0000
ROA not before: Tue 23 Aug 2022 06:17:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 89.117.70.0/23 maxlen: 24
89.116.130.0/23 maxlen: 24
89.117.112.0/22 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:59:19:8c:a0:4c:4a:36:c2:25:b9:f2:ba:5d:dc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 23 06:17:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a8cd3695ccaf0cd1f3b60c2141e0929db8036d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3d:13:2d:c3:0f:45:33:fd:bb:36:bc:e3:9e:
33:60:c6:68:9d:cb:7a:4e:db:71:cc:c4:ef:dd:e7:
7e:f5:21:91:df:be:94:4d:66:92:47:a2:83:0f:da:
65:5a:bf:90:e7:fc:a7:54:66:e0:99:7f:77:5a:b3:
b0:40:cc:33:af:bf:28:fa:e1:95:74:24:39:97:36:
7c:f2:88:36:b0:0c:1d:18:64:13:e1:f9:42:d9:66:
9d:bd:13:22:41:1e:1f:60:03:72:4c:9d:5d:39:2b:
74:8d:92:d4:b3:86:a8:bf:49:e8:97:75:66:4f:d9:
1b:f3:5a:e5:4c:bc:4b:46:e5:2f:a0:11:8f:80:ba:
4b:ed:39:88:90:41:72:af:d3:0d:c3:50:85:53:9e:
6c:9d:9e:da:b5:cc:00:fb:ec:bb:94:80:f2:72:5e:
f0:dc:96:01:b9:ae:bf:45:89:f6:dd:9e:99:27:b1:
c6:72:4f:97:81:c7:5e:5e:45:5a:04:c2:f8:db:cc:
69:f2:44:fc:ef:78:08:03:ac:06:06:fc:b4:1d:a4:
c6:e4:d1:d3:e0:1e:62:61:78:ee:89:e0:56:fa:a6:
b9:08:fb:8a:98:7d:a8:3f:ca:41:6a:7e:4e:95:30:
8d:bd:c7:d4:03:b8:6f:88:a0:b9:6c:62:e0:45:9a:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:D3:69:5C:CA:F0:CD:1F:3B:60:C2:14:1E:09:29:DB:80:36:D0
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/CozTaVzK8M0fO2DCFB4JKduANtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.182.0/23
89.116.130.0/23
89.117.24.0/23
89.117.70.0/23
89.117.112.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:6a:26:ea:e6:35:0d:de:d1:cd:fe:7e:06:0d:eb:66:9f:3b:
74:94:1d:79:24:3e:a5:4b:be:2d:ae:42:56:1a:63:1c:39:9c:
17:31:d3:b7:8e:08:4b:05:7e:a4:2d:4c:52:e6:ef:9f:c9:7f:
24:e3:f6:11:b3:77:b3:1b:48:3f:b6:7f:19:7c:34:4a:8f:f9:
bc:8a:9b:7e:18:93:c3:00:ed:b3:83:ee:bd:75:f1:03:a8:4d:
dd:3a:7b:8d:3a:61:2d:dd:80:b7:cb:d3:1d:67:5d:48:d1:a2:
3f:cd:10:c3:d1:5c:df:35:e6:b1:e5:fc:d0:64:9b:37:a5:48:
58:12:4a:bd:25:35:7f:d4:c4:ef:3a:84:06:d0:74:d8:81:40:
fb:27:44:fa:4b:80:d2:3b:55:a7:51:a6:d4:f5:d8:19:8c:a1:
96:62:c9:90:23:96:ff:06:09:e9:b2:b2:ec:a3:01:ba:03:83:
6d:30:a0:b5:a3:08:a1:7b:eb:cd:7f:ad:c8:4e:21:69:27:04:
20:87:a3:a6:96:3f:e7:10:38:71:e7:8f:d6:17:12:45:bb:3e:
b6:03:43:8d:78:27:88:cc:10:2c:c8:cc:f9:83:7d:56:30:72:
3d:50:44:0e:2c:e6:1c:85:2e:b4:1b:23:fd:c9:a5:61:13:58:
cc:1f:11:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org