Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/OWFRnjqdP31FuMRFyFkd2WBLjdo.roa
File: OWFRnjqdP31FuMRFyFkd2WBLjdo.roa (raw, json)
Hash identifier: xTRsQ7df0NHXoIma39a6zwwiFJe8xyNHaOYepBX9k+g=
Subject key identifier: 39:61:51:9E:3A:9D:3F:7D:45:B8:C4:45:C8:59:1D:D9:60:4B:8D:DA
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183D5B6983A077ACC5ED034287A199B40BE
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/OWFRnjqdP31FuMRFyFkd2WBLjdo.roa
Signing time: Fri 14 Oct 2022 08:57:36 +0000
ROA not before: Fri 14 Oct 2022 08:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197890
IP address blocks: 89.116.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:b6:98:3a:07:7a:cc:5e:d0:34:28:7a:19:9b:40:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 14 08:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3961519e3a9d3f7d45b8c445c8591dd9604b8dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:1f:3d:b7:7f:d7:bf:8b:0c:27:96:73:09:
d4:b4:91:ad:5e:17:b9:e7:0a:8a:2c:37:b3:94:e9:
10:a1:81:b7:e9:eb:91:e1:be:c4:d3:08:7c:1b:5a:
bb:af:d3:19:2b:e3:9a:28:06:c1:55:d2:42:25:10:
c4:d9:fb:cd:05:64:b4:a3:67:48:59:57:f5:c7:af:
64:69:03:e3:6c:04:3f:5a:1a:d6:5e:c9:d6:c3:df:
b8:62:69:ef:23:f1:d9:95:ce:38:a7:69:5e:20:2a:
f0:02:b3:8c:2b:94:4d:1d:82:1d:13:1e:01:9a:ea:
97:fe:bd:44:04:c7:74:e4:07:ca:4e:fc:7f:56:53:
00:ac:32:97:3f:d3:e2:85:d9:4d:d6:78:08:af:c2:
8c:5a:95:73:77:e0:f2:37:eb:bd:24:20:49:d3:55:
8e:81:c0:4e:bc:ea:91:b4:56:3b:91:e0:f9:e7:32:
89:e3:aa:a0:04:72:b3:42:24:fd:21:d3:c3:6b:3b:
25:ac:0f:30:dc:ef:3c:23:18:b8:eb:95:7f:f5:76:
11:b5:69:85:f4:43:10:10:bb:bb:3b:7d:26:e8:b5:
0a:ac:aa:bb:c8:49:3e:f1:82:e9:77:d0:3c:32:9b:
42:61:c5:79:c9:c9:aa:4e:71:0c:16:6a:b0:1d:4a:
a1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:61:51:9E:3A:9D:3F:7D:45:B8:C4:45:C8:59:1D:D9:60:4B:8D:DA
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/OWFRnjqdP31FuMRFyFkd2WBLjdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.146.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:2c:a5:05:b6:d9:d2:9e:be:0e:74:e9:7e:93:66:24:75:d6:
87:84:fa:44:1e:67:85:21:b9:0c:d7:68:92:c5:69:03:51:20:
81:df:db:d8:86:76:c5:a6:38:03:84:3e:47:fd:24:0e:93:93:
6a:51:52:d9:d5:40:8a:5d:0b:d2:8b:bd:1a:79:66:59:51:f2:
0c:e7:cc:47:7e:29:2e:30:74:6b:fd:6c:8c:40:12:cc:17:67:
b0:12:60:02:10:70:02:c3:27:31:89:0c:ad:35:1d:46:03:27:
e5:48:c7:05:db:3d:53:a4:14:ef:f0:76:57:35:8b:ac:27:d2:
8d:ac:85:24:0d:22:83:5d:fa:d7:a4:44:1e:14:df:04:f3:1f:
60:43:3d:6c:f8:73:72:32:0c:f4:4d:0f:9f:62:54:57:d1:21:
fa:22:aa:8d:b9:62:75:20:68:34:55:e8:0e:38:c1:0e:02:d9:
cf:75:96:18:94:aa:c4:36:e5:a0:1d:3e:30:5e:69:75:d7:05:
98:e1:23:16:d7:8e:52:f6:18:00:0c:e2:fc:61:b2:f2:53:9d:
e6:53:7d:14:f8:18:3f:b4:a5:50:dc:82:1e:a7:ec:d0:72:8a:
5e:a5:42:f3:d5:89:1d:e3:d8:2f:71:60:a5:a8:bd:03:eb:53:
60:20:93:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org