Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/KQzdmi5w_MwOxuh0rL9KTUxNbgU.roa
File: KQzdmi5w_MwOxuh0rL9KTUxNbgU.roa (raw, json)
Hash identifier: u6fQW+TdgX2Tmq1MWlFElz6gXTqban3idHjt+vhVZ3U=
Subject key identifier: 29:0C:DD:9A:2E:70:FC:CC:0E:C6:E8:74:AC:BF:4A:4D:4C:4D:6E:05
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182D9AD9C1344225772CCE0ACB424FCA9B9
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/KQzdmi5w_MwOxuh0rL9KTUxNbgU.roa
Signing time: Fri 26 Aug 2022 10:23:29 +0000
ROA not before: Fri 26 Aug 2022 10:23:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51847
IP address blocks: 89.116.89.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d9:ad:9c:13:44:22:57:72:cc:e0:ac:b4:24:fc:a9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 26 10:23:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=290cdd9a2e70fccc0ec6e874acbf4a4d4c4d6e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f6:5f:4d:69:d6:b7:10:39:e4:2a:01:bf:69:
ee:37:f5:67:69:a6:10:07:a1:2f:a3:d9:4f:05:e9:
f1:5b:e1:53:08:32:4b:dd:16:2e:47:3a:ea:08:b4:
1a:18:4e:c8:eb:de:e1:6b:20:c8:df:d9:27:9d:ee:
1b:d6:aa:2b:a8:0b:97:9a:8a:40:7b:da:a2:02:9e:
e0:e3:ad:1d:5a:a9:e5:85:cc:38:1f:46:52:51:aa:
cb:e6:9a:8f:66:7d:2a:4f:ec:ca:09:f0:6e:10:47:
31:04:4a:79:ce:04:dc:77:51:e4:fe:d8:07:31:14:
f3:02:be:5a:72:30:31:b5:05:e8:19:dd:8f:b5:98:
ca:05:00:7e:67:9f:e4:a4:5f:bb:2b:24:18:d4:41:
7b:e3:c9:33:08:3f:b2:83:63:44:f7:53:ce:ed:a3:
49:8e:36:de:47:12:44:cd:70:55:42:dd:6f:16:bb:
14:ee:5e:42:b2:ff:a7:90:f2:45:ea:fc:df:62:01:
04:07:fe:c3:0e:39:db:b4:cd:34:4c:d5:79:12:67:
8d:63:8c:e9:d1:83:0c:b8:cf:ef:14:f8:c5:99:17:
5b:01:65:a4:d7:84:57:67:a8:80:49:40:1f:b7:32:
c1:7f:0e:71:f1:ac:26:ef:23:3a:af:b4:66:b2:1a:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0C:DD:9A:2E:70:FC:CC:0E:C6:E8:74:AC:BF:4A:4D:4C:4D:6E:05
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/KQzdmi5w_MwOxuh0rL9KTUxNbgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.88.0/23
Signature Algorithm: sha256WithRSAEncryption
93:8d:29:70:8e:32:cb:18:9b:d5:b1:c0:de:c4:04:41:16:61:
f6:ee:79:db:45:3d:3b:4b:10:95:25:31:86:ff:5d:79:af:e1:
35:14:c1:5f:ab:41:13:d8:2c:1c:52:87:e5:81:a3:da:be:5d:
00:32:fb:cf:10:dd:18:c2:04:0b:ea:84:5e:e8:70:4f:09:6f:
ae:d5:ac:04:91:cb:33:63:79:52:2f:bd:6b:26:77:cf:38:17:
e0:bb:88:31:56:ad:20:20:96:54:46:8f:b8:e4:c0:47:43:df:
de:9d:86:2a:af:d3:c0:10:69:71:ea:f3:e0:cf:fd:2f:dd:a5:
2f:ff:c2:44:e0:b3:f8:f4:52:d4:e4:df:13:55:f1:b0:ef:2b:
13:77:3a:23:f6:9e:f3:48:84:b4:47:58:ee:f7:a4:db:b4:8f:
e2:44:47:b9:ea:54:e0:61:a0:e9:a7:c5:c4:87:26:63:1b:91:
a7:4f:00:59:9a:98:0f:9a:84:0f:e5:2c:a5:cd:bf:7e:f6:57:
42:ee:6f:0c:ac:2b:72:f2:40:06:64:28:a3:b7:50:9e:3c:1e:
fa:d5:50:cd:c0:9f:73:78:2a:2e:3e:62:20:f9:a0:6b:f2:9f:
12:3f:f0:c0:68:3c:82:3e:8f:a3:1e:3f:92:76:3e:c3:d8:66:
81:f2:5d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org