Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Q8D_3x4VHOi98Xc8GhujbxdDyIU.roa
File: Q8D_3x4VHOi98Xc8GhujbxdDyIU.roa (raw, json)
Hash identifier: NSCgzXGhtmZmITThZFBO7io6s4QkSY61F8ehrCaU8/Q=
Subject key identifier: 43:C0:FF:DF:1E:15:1C:E8:BD:F1:77:3C:1A:1B:A3:6F:17:43:C8:85
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A80B5E5
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Q8D_3x4VHOi98Xc8GhujbxdDyIU.roa
Signing time: Wed 27 Apr 2022 07:05:18 +0000
ROA not before: Wed 27 Apr 2022 07:05:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 89.117.101.0/24 maxlen: 24
89.117.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176207333 (0xa80b5e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 27 07:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43c0ffdf1e151ce8bdf1773c1a1ba36f1743c885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:d0:59:ce:c1:87:0c:a1:ff:a4:f4:5d:a8:
3c:38:66:6e:88:cb:52:2a:c9:43:08:2d:64:6e:79:
77:d9:c8:02:bf:e4:4d:cb:10:5f:b7:67:54:4e:1b:
6b:ba:9c:38:a3:34:b7:f9:f3:90:2a:87:a2:13:df:
89:ab:3b:82:a9:4e:fd:94:25:c0:23:36:45:02:f7:
3a:83:5b:84:fe:ee:38:ee:2e:1d:c4:6a:1d:27:1c:
52:11:c3:72:e3:14:8f:98:0c:6f:a2:d7:30:42:cd:
76:40:a3:97:c8:7b:fa:fd:92:7c:03:b2:db:20:87:
7a:1d:56:3a:55:94:ce:85:44:52:b0:68:45:36:99:
90:5d:43:3e:cd:8d:8d:60:65:45:1c:4d:31:63:b8:
8f:9f:ef:7e:93:57:7c:cc:92:ef:e9:f9:0c:a5:42:
f2:c7:cb:ce:20:3f:eb:a2:fa:6f:ad:15:f2:3e:d1:
de:7b:b1:77:c1:af:e3:1d:82:9f:d1:2f:cd:99:ff:
90:c6:ce:20:9a:05:a8:99:74:4e:c2:94:4b:43:5a:
ef:ea:dc:26:e8:1a:32:f0:a6:bf:f0:f9:4e:27:3a:
a9:4d:07:78:b4:58:2f:30:82:a6:a3:18:b0:b6:42:
7f:c4:6a:53:75:a8:ba:a8:45:91:7a:31:5f:8b:b2:
80:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C0:FF:DF:1E:15:1C:E8:BD:F1:77:3C:1A:1B:A3:6F:17:43:C8:85
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Q8D_3x4VHOi98Xc8GhujbxdDyIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.101.0/24
89.117.167.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f6:cd:8e:10:9e:35:8b:62:a5:43:71:ea:d9:f4:8b:c7:c1:
37:4d:75:b7:0e:17:69:5d:43:8f:7b:0c:5e:a0:d5:57:38:6f:
2e:fc:82:74:78:fa:0c:dc:b6:77:6c:86:59:94:48:ea:e2:34:
94:be:e6:33:97:31:61:00:5e:f1:32:92:9d:15:54:a5:6d:2f:
f7:01:bd:59:de:2c:d5:b8:5f:ee:fe:1c:30:d0:54:92:0c:57:
b0:f0:63:4e:df:49:f5:de:3e:e1:8d:77:f9:a2:bc:8a:fb:72:
d2:62:80:bd:f9:4a:b7:c7:f5:cd:ce:56:f0:ae:f4:37:f1:1e:
54:ef:d9:55:c7:c0:c9:b4:e1:4a:43:ed:29:93:d3:43:0d:1d:
42:aa:4a:d6:89:70:c4:f2:c9:65:6d:f2:98:f6:21:c5:fe:aa:
6c:c0:60:da:c5:20:d4:13:c5:35:83:79:7b:d5:88:9c:2b:13:
54:65:30:5e:a5:53:a8:56:6e:0f:c1:d4:5d:fb:bb:a2:8a:c1:
18:71:e5:d2:99:9c:5a:bf:bb:49:81:e5:c6:50:d2:85:a3:ae:
3a:70:90:7c:b9:ea:9c:eb:63:84:cd:05:65:89:8a:69:5a:69:
c2:33:26:10:24:91:5e:c2:5c:8e:3f:4b:c6:85:0d:49:93:ef:
ab:fb:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org