Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Mz_o-bjbeF3I0A-EmNYNOat56bw.roa
File: Mz_o-bjbeF3I0A-EmNYNOat56bw.roa (raw, json)
Hash identifier: 8CDZuPkq9UGRMWISVJ0PBUWMHk46N3URdLqfo96Gbdo=
Subject key identifier: 33:3F:E8:F9:B8:DB:78:5D:C8:D0:0F:84:98:D6:0D:39:AB:79:E9:BC
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 018360089740F7F698ADC2F1356DAE2AE43D
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Mz_o-bjbeF3I0A-EmNYNOat56bw.roa
Signing time: Wed 21 Sep 2022 12:31:59 +0000
ROA not before: Wed 21 Sep 2022 12:31:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 89.116.108.0/24 maxlen: 24
89.117.188.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:60:08:97:40:f7:f6:98:ad:c2:f1:35:6d:ae:2a:e4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 21 12:31:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=333fe8f9b8db785dc8d00f8498d60d39ab79e9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:f5:0f:7b:45:e7:87:ee:39:dd:f9:93:3b:
cf:f0:d3:e8:2d:a3:25:bb:14:43:51:d2:cc:0c:34:
c8:c6:33:cc:da:a8:33:96:0c:62:fe:a7:a7:ac:3d:
73:d8:2d:44:2b:82:bc:0a:eb:e8:0a:3f:1b:90:c7:
5c:2b:5e:6f:44:3a:43:1c:15:b3:5f:9e:1c:f4:d0:
d2:f5:5e:a3:b8:de:41:00:3f:c7:90:17:65:a9:d3:
f8:b3:9f:b3:93:bb:cf:e0:14:bb:1a:17:00:a5:92:
20:e1:91:70:57:b6:bd:bb:bb:91:e8:9b:46:dd:eb:
79:98:93:5c:2c:5f:e1:03:47:3d:b0:39:10:50:f8:
cf:4a:a2:dd:25:83:18:cc:9e:1a:46:bb:09:1b:39:
e7:5a:23:44:f4:27:38:1b:a0:c4:c5:df:50:0b:8f:
f5:7a:f4:38:4f:2b:50:2f:d1:9d:5e:7b:9c:b5:5f:
32:6f:86:b9:f4:10:05:ce:3b:31:e0:3c:26:0a:00:
d6:b6:73:72:ea:17:e2:85:1a:e4:09:25:27:45:cd:
33:1d:7e:2b:c3:b2:b3:3b:f1:3c:de:0d:09:8a:05:
13:23:cd:5a:c6:0b:ff:15:37:7a:e6:36:1e:6f:17:
ff:d5:73:8d:bd:c5:ce:80:02:ff:1a:af:98:b2:3d:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3F:E8:F9:B8:DB:78:5D:C8:D0:0F:84:98:D6:0D:39:AB:79:E9:BC
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Mz_o-bjbeF3I0A-EmNYNOat56bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.108.0/24
89.116.128.0/24
89.116.153.0-89.116.154.255
89.116.189.0-89.116.190.255
89.117.139.0/24
89.117.188.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:1f:63:43:be:2c:ed:24:49:e2:94:45:91:75:68:77:4d:53:
6c:10:93:e3:62:3f:34:11:5e:bd:7f:ac:24:97:65:be:55:81:
35:d2:b8:5e:38:d4:3e:89:6f:4b:e6:70:60:2a:05:55:d4:6f:
bf:1c:62:5b:ff:13:2e:2d:05:39:51:65:77:7c:98:ba:24:99:
d3:a7:62:c5:bb:f2:b4:4c:74:dc:b6:0f:df:07:fe:cb:85:8f:
ae:b1:f5:cb:b3:a3:0a:7a:76:0d:50:b2:13:40:67:b5:ba:26:
60:b3:7e:ff:fc:5c:41:43:79:ec:52:9c:2a:a4:c6:cf:2d:ac:
cd:b5:92:5e:a0:bc:d3:23:ca:10:d0:f2:ee:79:97:fe:58:9b:
8a:dc:77:12:b4:a4:11:12:ae:ad:0e:12:2e:a6:f7:43:88:8b:
fc:f6:8e:b9:cc:8d:b9:06:87:1b:2f:82:ec:83:20:6b:2f:14:
80:a9:05:1d:49:7c:85:cb:4d:c6:95:de:db:15:4b:a9:6a:ca:
00:88:1b:df:2b:47:ed:fc:c8:3c:d7:4f:64:de:04:54:2b:23:
47:58:ec:67:3e:b1:d4:4b:0a:af:7d:20:cf:9c:4e:25:37:82:
70:cd:d1:62:23:c3:06:16:50:46:85:4f:95:97:99:41:9a:24:
7b:8e:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org