Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/G9NWP7vlUGTiknC_nriISYSenA0.roa
File: G9NWP7vlUGTiknC_nriISYSenA0.roa (raw, json)
Hash identifier: wRxfSrWUq8p754Tzw9Mbig0P93ZZpIl+6JpqjBQP240=
Subject key identifier: 1B:D3:56:3F:BB:E5:50:64:E2:92:70:BF:9E:B8:88:49:84:9E:9C:0D
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01840B6807D2F7E149AC8BF52CE1F26FE94D
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/G9NWP7vlUGTiknC_nriISYSenA0.roa
Signing time: Mon 24 Oct 2022 19:11:17 +0000
ROA not before: Mon 24 Oct 2022 19:11:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 89.117.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:68:07:d2:f7:e1:49:ac:8b:f5:2c:e1:f2:6f:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 24 19:11:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bd3563fbbe55064e29270bf9eb88849849e9c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:e0:8b:25:c7:20:c4:96:8c:73:5e:8d:54:
79:b4:a4:b7:4c:10:3a:3a:a4:a2:1c:ea:db:49:71:
c2:a8:6f:ed:ed:cf:02:71:74:b9:7e:ee:0f:8c:5a:
c7:91:14:8c:cd:0d:44:14:d5:e5:34:09:71:6b:8d:
c7:69:4f:ba:bf:e9:21:7f:43:35:56:a8:b0:91:99:
ab:fb:f6:f0:2f:76:38:c9:a6:63:24:15:d0:ce:79:
63:fb:4d:45:4d:c3:f0:ed:62:a6:19:c8:01:82:ff:
9a:be:a2:fc:a1:21:73:7c:03:b7:39:cc:a5:6b:4f:
c8:16:44:06:4c:27:09:63:9d:9d:d2:76:3c:4a:cf:
d1:b5:c6:fb:33:82:ae:01:4b:7d:22:48:f2:bb:97:
19:4f:89:c4:52:8a:17:27:ae:e4:a5:f7:50:5e:03:
66:bb:c0:19:6e:86:67:b6:fd:b1:49:87:c0:a6:20:
6f:24:f6:94:a8:56:e4:37:9b:09:97:3c:a4:cf:92:
1e:c0:71:be:03:36:b0:f1:9c:62:98:14:fb:5c:e5:
99:23:53:e8:05:64:17:30:14:1b:1d:b3:4c:e3:da:
4f:12:35:a2:eb:3a:cb:c4:79:b6:fb:b7:7d:ba:1c:
14:2f:09:52:b3:7e:62:6d:55:3c:7e:4c:31:f3:d6:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D3:56:3F:BB:E5:50:64:E2:92:70:BF:9E:B8:88:49:84:9E:9C:0D
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/G9NWP7vlUGTiknC_nriISYSenA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.111.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:0d:3e:59:a0:4b:98:e9:9d:75:a3:b5:ca:7c:21:21:44:04:
17:83:c2:23:f0:31:ff:8c:38:f9:d6:b9:1f:d3:e7:f2:51:e7:
ef:ce:72:32:19:fd:b3:d8:3a:d4:66:7f:47:ff:ea:74:21:6f:
1f:fa:92:9f:9c:01:e0:2b:f2:bf:c2:46:f6:3a:47:58:26:f6:
40:af:4c:c6:81:14:57:7a:8c:7c:6a:55:ef:fa:c8:0b:08:96:
9c:33:7f:a7:44:2a:e1:c7:6f:20:36:85:97:a3:0d:de:9c:0f:
b8:f7:0c:33:a9:a5:1e:d6:01:3b:ad:3f:4d:85:c1:c3:1f:3b:
94:31:1e:e0:5d:fb:b1:99:d9:81:89:15:9a:15:22:38:06:de:
16:9a:c3:7c:2e:7b:0f:a2:3e:74:f4:49:3e:ab:78:fc:b5:26:
9e:7d:8f:b7:65:65:f8:71:e9:de:3a:46:09:f7:7a:9f:c6:a9:
ca:63:a5:cf:96:ca:f0:b6:15:f1:57:8b:82:79:ff:70:5a:fe:
fb:a2:8c:a3:9c:d7:7a:82:26:23:19:5d:d1:7d:1b:8d:0f:d5:
af:c2:0b:7d:4a:62:33:5c:6b:52:91:03:a1:37:0a:4d:43:76:
e3:e9:fc:87:f1:eb:9a:b1:0e:93:9b:a4:68:2f:2c:57:fa:d4:
c3:94:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org