Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/JLb1ViI44Ac1tvQgWqTvQeNY8Ss.roa
File: JLb1ViI44Ac1tvQgWqTvQeNY8Ss.roa (raw, json)
Hash identifier: Q1MRlUr68BbH3BjgxXEqATz1d0sbsp9fj2hOV87bk6I=
Subject key identifier: 24:B6:F5:56:22:38:E0:07:35:B6:F4:20:5A:A4:EF:41:E3:58:F1:2B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0181DA6559C86B2529054E5B51F32F00C311
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/JLb1ViI44Ac1tvQgWqTvQeNY8Ss.roa
Signing time: Thu 07 Jul 2022 20:41:24 +0000
ROA not before: Thu 07 Jul 2022 20:41:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 89.117.96.0/22 maxlen: 24
89.116.44.0/22 maxlen: 24
89.116.63.0/24 maxlen: 24
89.116.61.0/24 maxlen: 24
89.117.126.0/24 maxlen: 24
89.116.60.0/24 maxlen: 24
89.116.62.0/24 maxlen: 24
89.117.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:65:59:c8:6b:25:29:05:4e:5b:51:f3:2f:00:c3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 7 20:41:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24b6f5562238e00735b6f4205aa4ef41e358f12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:59:cf:fe:bc:a3:69:3d:3f:24:ec:32:53:
1e:07:6a:1b:72:c8:3e:1c:3e:e6:63:e7:32:14:9f:
4f:13:3e:de:b2:91:b5:7f:91:ce:d2:56:58:7c:03:
ca:61:63:0b:47:f8:53:17:5f:6d:cc:03:93:ad:0c:
9c:5e:bb:51:9d:3f:ce:8a:08:07:ee:b3:e7:d9:e7:
ad:0c:ab:dd:31:6c:97:e4:68:6a:27:3c:82:49:b1:
fb:d9:cf:08:16:88:a6:c1:e1:8a:72:29:5c:70:77:
77:bf:b9:d1:38:dc:c7:e3:47:93:e0:e0:23:16:4d:
ca:52:41:84:82:62:05:d3:59:99:9a:0e:e2:42:5a:
d7:01:e4:3c:65:bd:bf:dc:3e:32:19:f1:14:c8:e1:
b7:35:ea:ca:ff:22:6e:d9:97:37:e4:87:5d:fa:b3:
c8:a5:91:8a:33:4d:c3:e6:6c:9b:00:ff:8b:86:42:
49:90:47:e1:5b:75:89:90:fb:dc:14:10:35:24:07:
e0:58:3a:76:62:24:9f:51:cd:60:52:54:13:67:8f:
9b:4d:ed:0b:e0:05:3b:0f:d0:ef:74:bb:9d:32:c1:
2c:a3:35:be:23:1d:d4:dd:f0:d8:86:3e:1c:04:08:
b7:df:b1:2a:1a:af:1f:d3:e8:ac:81:f5:0d:6d:bd:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B6:F5:56:22:38:E0:07:35:B6:F4:20:5A:A4:EF:41:E3:58:F1:2B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/JLb1ViI44Ac1tvQgWqTvQeNY8Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.44.0/22
89.116.60.0/22
89.117.96.0/22
89.117.126.0/24
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:aa:6e:4f:33:87:fc:b9:53:1e:41:2a:be:54:54:1d:de:27:
bf:00:27:5b:1b:f0:3f:a8:fe:f5:76:d9:f2:b3:48:23:60:cb:
3e:3d:91:19:35:02:a1:3a:2c:83:c6:3b:85:f9:99:3d:ff:cd:
f7:dc:52:bb:68:db:d9:19:d2:7e:40:05:82:cd:76:b6:89:89:
11:f3:bb:45:ba:05:a3:6a:33:f5:92:0a:40:2b:f4:c0:34:c3:
91:d7:88:17:08:15:6e:51:99:4e:57:4f:27:f2:8f:9b:c4:53:
ae:30:cd:e6:b7:d6:f0:ee:2a:da:da:53:58:c1:6f:7a:95:84:
64:ff:8d:e9:70:d4:12:72:0b:6f:d8:37:b2:7d:65:ec:89:35:
de:39:75:43:69:17:cb:4d:b6:59:89:22:48:8e:e5:eb:34:12:
c8:8d:b2:c7:6e:56:8b:b5:a8:bd:cc:b0:bf:99:71:e9:11:73:
72:e8:4e:88:3e:1a:29:56:cc:5e:69:3a:b1:e6:03:5d:b7:10:
5c:f5:d2:3c:7e:db:5c:d2:30:4c:e2:11:f7:ad:4a:79:ce:ac:
35:c3:bf:5f:4d:5d:c4:40:e5:8b:92:5e:cf:86:fc:ae:7e:39:
67:87:1a:98:ed:06:7a:6c:95:93:f9:01:e0:65:d8:66:e5:9c:
0d:38:14:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org