Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/NVYwLc4WdMYU0D3epW2xwPlmhYU.roa
File: NVYwLc4WdMYU0D3epW2xwPlmhYU.roa (raw, json)
Hash identifier: 1OJyvtU33rIqGIBdbkC42OEbqr4iB46iOEpb40+xeZg=
Subject key identifier: 35:56:30:2D:CE:16:74:C6:14:D0:3D:DE:A5:6D:B1:C0:F9:66:85:85
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01841AB09AA03C62B49B721D306CB387516A
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/NVYwLc4WdMYU0D3epW2xwPlmhYU.roa
Signing time: Thu 27 Oct 2022 18:24:52 +0000
ROA not before: Thu 27 Oct 2022 18:24:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 89.116.221.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
84.46.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:b0:9a:a0:3c:62:b4:9b:72:1d:30:6c:b3:87:51:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 27 18:24:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3556302dce1674c614d03ddea56db1c0f9668585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:57:e4:e0:17:37:9b:96:3a:36:62:d4:93:e6:
6e:0a:85:6a:79:1c:da:a4:88:aa:6f:0a:2d:0a:cc:
61:77:3d:34:49:29:39:84:99:0e:8f:c5:f7:2f:df:
95:9e:80:45:56:7f:c9:25:54:77:1c:d8:3b:0d:b7:
8a:82:a5:e0:da:93:78:89:e1:f0:c0:a5:57:88:6b:
eb:29:34:dc:aa:62:fa:d6:5c:fe:45:a2:57:0a:84:
84:71:f1:b0:d1:92:e5:09:6b:b8:e3:53:d5:1b:39:
aa:cc:7a:50:b9:90:16:8a:8c:d0:65:85:41:35:fc:
a7:69:41:33:5e:cc:cb:77:58:80:91:67:df:e3:cf:
f9:e0:24:1e:82:da:19:c1:bf:c0:8b:5a:59:72:14:
23:75:58:a6:9e:63:34:26:ac:4b:fb:9f:61:e8:8e:
09:a0:b8:5c:a0:b0:27:92:8e:f3:e4:01:8d:26:c8:
70:69:86:91:26:e2:a5:ff:c7:13:48:28:e8:5d:b5:
db:77:c2:91:20:8c:46:7d:6e:38:e8:d8:d2:59:79:
34:b6:a8:7f:7f:49:f3:b8:d4:d9:b7:40:2c:84:2a:
e7:99:be:80:3c:51:8d:e7:52:93:f9:84:63:1a:c9:
28:03:9e:5f:d8:38:f6:8c:95:2d:40:2f:5c:04:a0:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:56:30:2D:CE:16:74:C6:14:D0:3D:DE:A5:6D:B1:C0:F9:66:85:85
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/NVYwLc4WdMYU0D3epW2xwPlmhYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.200.0/24
89.116.54.0/24
89.116.135.0/24
89.116.221.0/24
Signature Algorithm: sha256WithRSAEncryption
70:11:42:02:c1:c4:3e:0b:2a:bc:12:85:66:f7:9f:b6:27:5b:
93:e4:2f:a4:2d:a4:d9:50:18:25:31:b6:1b:f0:b2:fb:33:55:
c1:7f:1c:2a:77:26:a7:f9:ec:73:8d:81:21:60:74:67:3f:87:
78:80:27:65:97:1b:55:65:c4:c6:82:5d:84:a8:e0:b3:a0:50:
05:18:21:96:7f:28:0e:28:5d:c2:0d:37:c0:ac:24:20:64:87:
40:ee:82:e7:e7:a4:16:af:97:fc:21:e8:c2:33:58:f7:fc:bf:
37:96:02:8a:10:2a:44:49:2f:e5:22:a4:24:f0:37:ee:fe:ef:
2f:2f:a6:6e:6b:94:97:2f:ea:77:b9:44:cd:0b:96:be:bd:5f:
69:13:8a:1a:1e:14:75:39:41:38:6f:67:8c:ed:93:34:79:a2:
7a:4b:d7:ac:a1:dd:7d:61:7b:34:ac:94:c9:9f:0c:e8:0c:bf:
11:cc:51:61:a9:ff:ec:4f:8e:16:16:27:4e:b1:80:8e:8b:fe:
3d:a6:0c:ce:db:53:a7:1d:23:bb:d5:90:37:41:e1:c0:0c:f1:
3e:65:0a:5f:8b:35:ec:d3:5d:f1:25:c2:eb:46:c1:09:b3:e7:
10:7c:e7:46:a8:93:d9:4b:4d:7e:54:a9:a1:8f:1d:3f:d9:73:
82:26:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org