Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/FgIpVmlVsaS0nLzjq5HgSycyABI.roa
File: FgIpVmlVsaS0nLzjq5HgSycyABI.roa (raw, json)
Hash identifier: LZRTZv9fDyo2FhG+xbrKuER0Z8MqwE0r/RDtAO3vVc4=
Subject key identifier: 16:02:29:56:69:55:B1:A4:B4:9C:BC:E3:AB:91:E0:4B:27:32:00:12
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182F81955C5FF9859E39D9513B00740B274
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/FgIpVmlVsaS0nLzjq5HgSycyABI.roa
Signing time: Thu 01 Sep 2022 08:09:45 +0000
ROA not before: Thu 01 Sep 2022 08:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 89.116.123.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:19:55:c5:ff:98:59:e3:9d:95:13:b0:07:40:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 1 08:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=160229566955b1a4b49cbce3ab91e04b27320012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:76:1f:03:6a:7d:87:71:b8:37:e7:9f:6c:
09:81:3d:fa:33:58:9f:f2:81:b8:ef:bc:f0:08:3e:
2d:96:25:ca:a7:7c:bb:49:8b:32:0a:90:29:9e:53:
af:93:48:18:dd:d8:4c:c6:87:39:82:58:2f:49:44:
5f:f6:e1:d2:d0:96:6f:4a:36:05:90:38:96:8a:3b:
63:3c:b6:4a:f5:14:15:58:ea:70:9e:62:dc:7a:2e:
cd:b9:51:39:79:45:93:85:c9:50:62:6f:45:66:17:
49:1f:58:f5:a5:c8:24:56:ff:0d:67:bc:df:e1:fa:
ea:d8:1a:94:c0:95:03:8a:10:24:d4:6a:5d:2c:49:
91:7c:22:8d:92:49:ec:0c:0a:ea:97:47:e2:49:2c:
69:85:38:7a:95:d2:47:61:bf:55:24:58:1d:cd:92:
6a:85:23:21:e2:14:4b:b5:86:ca:f6:28:b7:84:8a:
98:09:09:5f:cb:8e:ac:1c:ec:02:a7:77:37:07:63:
98:79:d9:3a:b1:0a:2b:01:f0:4f:ee:0f:99:f2:f2:
0e:20:7f:51:07:97:79:2f:99:35:3b:5b:5d:a4:a9:
72:5b:39:de:88:dc:1e:b9:86:4d:f6:7f:fa:18:7f:
14:12:09:1a:1f:38:92:ff:f8:ab:5a:fa:a6:60:c6:
89:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:02:29:56:69:55:B1:A4:B4:9C:BC:E3:AB:91:E0:4B:27:32:00:12
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/FgIpVmlVsaS0nLzjq5HgSycyABI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.123.0/24
89.116.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2f:04:b2:ee:f9:a3:33:4a:3b:be:32:45:46:fa:0b:34:54:
f4:58:bd:7d:f2:c4:c4:d9:09:ca:7f:d6:0d:a5:e3:a7:4f:22:
bf:21:9f:89:c3:2e:67:f5:26:74:f8:d4:58:87:38:3d:3a:7a:
9f:6e:2f:bc:1e:72:0e:72:f7:e7:d1:b1:62:f3:18:19:a9:65:
57:64:0e:f7:e3:e4:39:01:89:57:5c:ab:d8:40:bc:96:88:f9:
83:f7:2d:39:a3:2c:12:07:8d:71:1b:fc:c7:38:83:b0:a0:cd:
39:b0:f4:4d:1e:5b:91:e4:e5:bb:61:a9:34:0a:e6:2f:19:90:
69:8d:53:1d:da:8a:79:96:f9:2f:82:4e:74:65:50:a1:a7:8b:
f9:bc:e8:77:68:cf:0b:fa:43:11:a7:dc:c8:93:b7:9c:b3:6b:
5b:fd:a0:6c:2c:ac:a0:ee:2f:9e:4b:cb:3d:d3:01:ec:da:6c:
b4:3c:06:c3:28:c3:83:9c:48:50:d9:9c:06:e7:07:f2:18:41:
0e:61:b6:b2:94:e5:35:af:9c:6f:ef:08:dd:c0:20:f9:c6:27:
9a:9b:37:86:44:92:9c:a7:18:7e:03:f9:76:d5:a3:d2:3c:4b:
c3:4f:43:77:fb:81:75:52:04:ad:7a:3c:ed:38:00:ba:7e:4f:
a4:25:a6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org