Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/EYS8mgRiZRGsICfXcZLmN3KkTWM.roa
File: EYS8mgRiZRGsICfXcZLmN3KkTWM.roa (raw, json)
Hash identifier: RQ4AAQG6LdzJ4PVSfr1mDDMytAhhj/RlDhe56myU/AA=
Subject key identifier: 11:84:BC:9A:04:62:65:11:AC:20:27:D7:71:92:E6:37:72:A4:4D:63
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A2B96A1
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/EYS8mgRiZRGsICfXcZLmN3KkTWM.roa
Signing time: Wed 06 Apr 2022 05:25:32 +0000
ROA not before: Wed 06 Apr 2022 05:25:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.216.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
89.117.226.0/23 maxlen: 24
89.116.52.0/23 maxlen: 24
89.116.164.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
89.117.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170628769 (0xa2b96a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 6 05:25:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1184bc9a04626511ac2027d77192e63772a44d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0b:49:78:06:55:6b:73:3b:0e:13:1f:f2:e7:
af:1d:29:a3:98:1f:7a:e8:0c:27:79:64:0e:72:52:
b0:b3:2a:38:92:7f:ed:8d:3c:49:58:28:ed:7b:fb:
6d:93:3a:4d:0f:3d:b1:d3:c1:1b:16:b0:b7:0f:25:
77:10:d2:61:cf:d8:ba:34:c9:48:b0:64:bc:c8:b3:
88:c7:4f:f3:75:88:07:9a:ae:93:75:2b:da:34:8e:
60:3a:8a:3d:bf:39:fa:55:66:82:58:25:c4:30:68:
ad:94:d7:1b:ae:2f:37:bd:67:3e:42:2d:23:73:90:
3a:e4:a5:28:2e:12:72:2e:a5:1c:f6:26:4a:f7:5d:
c8:f9:97:b1:dd:ef:e8:7b:af:e6:63:9f:cb:19:35:
0f:7f:70:9e:51:de:eb:52:e4:76:59:de:1e:29:4e:
78:69:03:89:9e:5b:b1:29:6a:73:1a:65:39:e4:8d:
d3:73:be:19:34:b8:01:cd:cc:bf:57:90:a2:b7:a2:
d4:e2:9f:0c:99:6c:23:4b:90:f2:85:28:da:8d:23:
be:5b:91:4a:73:42:4f:46:ff:50:cd:b7:5c:f3:44:
0c:0b:8f:fa:4e:f5:ba:ff:7d:e5:14:62:54:a8:20:
d1:fa:1c:93:45:e0:84:27:39:7c:2f:3d:af:55:cd:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:84:BC:9A:04:62:65:11:AC:20:27:D7:71:92:E6:37:72:A4:4D:63
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/EYS8mgRiZRGsICfXcZLmN3KkTWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.52.0/23
89.116.146.0/23
89.116.164.0/23
89.117.70.0/23
89.117.158.0/23
89.117.168.0/23
89.117.216.0/23
89.117.226.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:a0:0b:10:5e:2e:ee:9a:5e:f5:2b:b0:ae:c5:56:3d:4f:5c:
6f:29:34:d8:54:b6:4e:85:14:e1:b9:e1:56:01:6e:a3:62:c0:
ae:58:e7:96:ef:4d:9c:a1:92:40:bf:08:3a:c7:cb:20:12:06:
aa:0f:f0:4e:df:a5:a6:b0:e0:cb:99:b7:b5:b1:bd:8c:ab:b6:
d7:fa:bd:49:2a:44:06:21:69:a6:47:09:34:a9:40:16:cf:80:
34:34:a6:42:e8:a2:24:96:4f:d8:4e:2e:60:ee:e6:49:78:99:
13:1c:00:ca:95:fc:30:5b:20:64:b3:b1:cf:ce:ea:07:60:3c:
d1:90:6b:d6:7a:db:50:d2:0f:f4:98:2b:7d:f4:df:28:9b:04:
e4:a8:d8:2e:b1:ae:01:48:c5:49:56:3b:ed:72:1d:ee:ea:fe:
a8:ac:61:ed:a5:e1:61:30:3e:61:f5:1d:c8:95:01:de:58:5c:
57:08:9a:dc:11:52:3c:29:4f:84:b6:5f:84:9d:28:13:82:12:
5e:55:2b:ca:16:79:72:ed:6d:40:ce:49:cc:85:13:cc:a6:ac:
db:64:a5:a9:9b:c8:e7:a6:90:73:1f:d3:86:14:c1:2f:8e:17:
24:76:87:02:47:6d:32:fc:85:4d:af:f1:a9:2c:5b:5a:af:62:
5f:d4:c7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org