Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/I0I7y3xgz9pnHx3EFRSaPNfOr6w.roa
File: I0I7y3xgz9pnHx3EFRSaPNfOr6w.roa (raw, json)
Hash identifier: Sb5jg6PJBZX4KbCNtwl2g1oHVGp6+WLItxc/4HZ8cqQ=
Subject key identifier: 23:42:3B:CB:7C:60:CF:DA:67:1F:1D:C4:15:14:9A:3C:D7:CE:AF:AC
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 018267AC558088EFD51A9C78CC5657196DC6
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/I0I7y3xgz9pnHx3EFRSaPNfOr6w.roa
Signing time: Thu 04 Aug 2022 07:05:23 +0000
ROA not before: Thu 04 Aug 2022 07:05:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43431
IP address blocks: 89.117.129.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:67:ac:55:80:88:ef:d5:1a:9c:78:cc:56:57:19:6d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 4 07:05:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23423bcb7c60cfda671f1dc415149a3cd7ceafac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:be:15:30:a6:64:d9:20:cc:cf:9f:13:59:d0:
ca:55:c5:ec:1f:18:ab:8c:3b:57:fa:b1:46:8f:a0:
b2:b4:30:8d:68:7c:86:78:c5:7e:70:79:1f:c4:a2:
67:8c:14:aa:36:d9:9e:57:2b:a5:4c:4d:9e:eb:80:
dd:1e:ce:60:51:83:cd:50:95:a9:f5:2c:93:e8:c2:
61:c3:5a:f0:ff:9a:0d:5b:38:29:b5:34:32:99:87:
a6:c1:0b:68:49:f9:7c:f9:ad:e2:0d:1c:84:01:f1:
78:40:17:1d:d3:8f:66:49:05:6d:8d:be:12:86:e0:
15:f8:92:82:1f:03:03:eb:e0:96:0f:2a:cf:67:01:
db:a5:01:55:5c:5f:fb:3b:60:13:0a:02:07:c6:4f:
6a:ea:59:c5:f4:b3:38:42:e5:19:b2:c7:03:77:f9:
34:08:80:d8:9f:27:d1:1d:42:71:ac:e4:f1:11:f3:
34:a8:d1:bd:a7:60:50:c0:92:15:00:ab:49:8a:41:
b0:11:b8:fb:10:47:14:48:f3:7c:fd:65:d2:6b:22:
8b:7b:45:b6:66:2e:38:c8:0d:68:ab:2c:48:67:e4:
d3:d7:4e:c0:4c:5d:20:47:db:b5:12:ca:96:6a:36:
f5:65:c3:b4:f2:e3:df:ec:8e:ef:07:a3:15:26:af:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:42:3B:CB:7C:60:CF:DA:67:1F:1D:C4:15:14:9A:3C:D7:CE:AF:AC
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/I0I7y3xgz9pnHx3EFRSaPNfOr6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.183.0/24
89.117.129.0/24
Signature Algorithm: sha256WithRSAEncryption
33:97:f5:3d:c9:87:d3:90:f9:30:08:a7:45:33:07:9f:61:b4:
62:64:13:cf:d4:75:61:b9:c6:c5:74:1b:9c:db:07:fa:36:e2:
6c:09:da:20:a9:e3:93:83:80:22:fc:1c:e4:9c:b8:88:a4:6e:
88:70:da:1f:cd:ae:9b:49:4e:ad:21:83:d5:6a:d3:08:fc:2a:
f6:42:13:17:47:61:41:1a:87:f5:8a:40:06:5a:e6:22:ff:fa:
f5:40:75:e1:a2:db:51:a6:75:b0:b3:e1:da:9f:ec:10:bc:63:
92:44:57:cc:ac:6c:54:dc:71:26:3f:55:17:50:49:e5:2c:0e:
47:1d:6f:33:ad:db:e2:ca:5f:58:fc:c3:3a:8d:05:dd:8e:1f:
9f:e1:ab:f5:ce:1a:7c:89:61:74:ee:ba:b8:af:90:30:f6:ae:
4c:11:c0:a2:39:fe:5c:1b:b8:16:61:62:a8:a4:3d:f5:a5:3a:
78:c0:37:05:85:a4:f8:45:e9:e2:06:8e:e8:95:48:6e:61:91:
eb:93:d7:bd:ad:ae:dd:34:f3:99:86:30:0c:1f:06:b4:da:34:
3f:f4:aa:e4:72:e5:a0:6c:73:6e:36:28:a8:e8:84:8d:f6:5d:
d6:08:43:92:d8:f2:a9:ee:c9:0b:75:24:5c:38:12:df:82:a9:
ff:54:24:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org