Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/NLwrttZJ00ena1X3h9-xrP8QG5I.roa
File: NLwrttZJ00ena1X3h9-xrP8QG5I.roa (raw, json)
Hash identifier: z6FX/koacGE1x05ZKjMItY5vTVL9BDTdFvpFguqO4g0=
Subject key identifier: 34:BC:2B:B6:D6:49:D3:47:A7:6B:55:F7:87:DF:B1:AC:FF:10:1B:92
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182CA36A95EA6BC5633C2D15F686FD024CC
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/NLwrttZJ00ena1X3h9-xrP8QG5I.roa
Signing time: Tue 23 Aug 2022 10:19:16 +0000
ROA not before: Tue 23 Aug 2022 10:19:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 89.117.226.0/23 maxlen: 24
86.38.189.0/24 maxlen: 24
89.117.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:36:a9:5e:a6:bc:56:33:c2:d1:5f:68:6f:d0:24:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 23 10:19:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34bc2bb6d649d347a76b55f787dfb1acff101b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:38:b2:79:65:6b:47:ca:78:a8:23:05:df:f6:
f7:20:bb:5b:67:71:83:df:af:6e:59:db:fe:58:f9:
f0:da:88:57:59:64:28:c0:2c:a5:9c:36:f9:96:d8:
a6:0d:e7:c5:69:8b:81:91:3a:4d:1b:bc:41:61:28:
75:6b:65:2f:c9:ed:4a:6b:3d:fb:ca:a0:5f:82:16:
20:6d:8d:26:b6:0c:ba:5f:92:f7:c6:38:67:03:ba:
35:51:8c:ca:3e:a9:e6:d2:2c:e1:c2:bb:6b:ca:54:
16:3c:f1:24:58:85:8a:5d:f1:9f:53:70:1f:70:b3:
f1:f7:a4:8f:d8:bf:3a:11:01:39:f6:97:13:cc:5f:
7a:e7:ae:33:a0:d0:07:71:64:00:c1:5c:53:8d:1d:
5c:9e:b1:ef:dc:7d:16:39:9d:46:d5:57:08:de:87:
4d:15:ba:f8:b7:53:b0:75:06:da:d2:8e:4a:6d:df:
f7:07:c6:f7:22:21:b5:5f:17:91:56:03:aa:f2:50:
9a:a8:6e:f7:17:68:d2:be:c3:18:13:a6:f5:5b:96:
a2:46:90:99:60:11:a5:09:3e:88:b6:47:9e:db:2c:
31:b4:66:48:29:f0:6e:85:07:9c:8c:55:17:c4:fc:
4b:86:39:64:ae:56:65:8d:65:df:01:04:77:73:df:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BC:2B:B6:D6:49:D3:47:A7:6B:55:F7:87:DF:B1:AC:FF:10:1B:92
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/NLwrttZJ00ena1X3h9-xrP8QG5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.189.0/24
89.117.158.0/23
89.117.226.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:cd:67:69:e2:72:b3:76:dc:86:a9:43:5b:be:97:d7:b6:38:
ea:e8:b1:b9:96:c9:88:e6:d7:04:a1:dc:1c:85:dd:72:c1:b0:
ef:1d:d6:d2:71:8d:81:fa:48:26:48:2a:bc:59:31:7d:6e:ef:
c1:f2:d2:c8:bf:f9:72:7d:7f:4a:c0:36:4d:c7:ca:05:6d:21:
1d:6e:5e:f6:8b:63:bd:1a:32:21:73:fa:ee:49:fc:2f:4a:0e:
03:4b:e6:12:6f:30:a5:f9:c2:cd:59:86:a1:72:18:3b:5f:eb:
b6:dc:dc:41:06:d8:d2:94:dd:c4:86:2f:51:46:9b:d3:51:2d:
23:1d:51:48:7c:e6:f5:82:e6:3d:51:89:8a:8a:15:86:a2:c2:
e1:37:71:cf:3b:f3:c9:ec:f2:62:77:06:f5:08:f8:15:60:a5:
59:a5:6c:b2:d6:d2:8e:d8:33:ac:46:7c:6d:3e:0f:a5:c1:da:
62:96:cd:ab:35:73:1c:b9:07:80:22:5f:76:97:cf:21:48:ab:
29:f6:cb:99:bd:99:db:5b:e7:ce:9c:d8:41:ef:b6:5e:7d:03:
bd:f6:37:28:45:e5:5e:4c:8c:e6:b6:24:b9:69:59:61:f4:1a:
4d:0f:44:08:a9:3e:a1:bb:64:07:53:94:6d:0a:f1:1b:0d:cd:
71:2f:b5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org