Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RWLak4V6pLtTma-NNxyvJq5R_oA.roa
File: RWLak4V6pLtTma-NNxyvJq5R_oA.roa (raw, json)
Hash identifier: dyY0owPVge++h7ve8jLcrnYS8+BewEqGozM5W2Qn+TU=
Subject key identifier: 45:62:DA:93:85:7A:A4:BB:53:99:AF:8D:37:1C:AF:26:AE:51:FE:80
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0ACE8211
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RWLak4V6pLtTma-NNxyvJq5R_oA.roa
Signing time: Thu 12 May 2022 07:52:04 +0000
ROA not before: Thu 12 May 2022 07:52:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 89.117.80.0/22 maxlen: 24
89.116.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181305873 (0xace8211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 12 07:52:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4562da93857aa4bb5399af8d371caf26ae51fe80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:d0:85:12:84:dc:76:63:29:fd:b8:5b:0e:
a5:c0:4c:96:30:fe:f7:44:75:3b:e5:f5:aa:e1:7c:
ce:0e:c1:ff:85:3d:76:c7:a5:ee:58:cb:1d:6d:a6:
f5:31:c0:11:1e:b0:79:e3:88:06:7d:64:47:1f:3a:
3e:e4:ca:e3:90:b5:d6:e0:a9:21:a8:69:c5:58:49:
64:79:e4:a7:ac:65:10:94:02:68:c4:dc:f1:06:f3:
1e:e2:af:cd:0a:e1:3a:88:c8:4a:41:f4:91:d9:5b:
73:1b:a7:27:37:e1:e9:78:8c:26:5f:ce:94:5a:05:
d2:c6:34:11:80:5b:cc:0a:1e:aa:ab:b2:dd:0d:b4:
2a:61:b4:95:d2:be:3f:b1:00:6e:d0:cc:00:67:43:
fd:a3:09:b7:00:56:36:05:c4:2a:54:db:d1:42:38:
83:bc:f8:97:4a:82:b6:b1:5a:87:aa:46:81:82:c5:
fa:c9:da:e8:f8:10:3e:8b:0b:4f:31:9a:c4:df:2a:
f9:44:c7:f0:ce:ed:8f:2a:14:8e:6e:8f:e5:ac:b0:
47:dc:e8:5c:ca:67:f3:77:bd:a7:c1:13:7d:65:f7:
48:65:57:0c:74:f9:ef:81:5d:e5:76:77:54:36:48:
cd:06:66:83:06:5b:c0:c6:72:ac:4c:ea:f8:62:f8:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:62:DA:93:85:7A:A4:BB:53:99:AF:8D:37:1C:AF:26:AE:51:FE:80
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/RWLak4V6pLtTma-NNxyvJq5R_oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.32.0/21
89.117.80.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:53:f0:b0:5f:84:9b:a1:45:ec:53:12:bb:6e:61:45:83:1c:
bb:a2:92:41:9c:48:1f:29:e9:a5:54:f4:66:11:e9:ae:20:73:
8c:85:46:80:06:32:4e:bd:1b:2f:c2:f5:b2:51:e8:2b:d6:1f:
11:55:e1:b0:71:54:5e:ea:bf:f0:bf:68:b9:80:5f:bb:96:2e:
03:9e:3e:c4:d7:e4:c4:c0:b3:01:39:a4:37:da:65:55:32:00:
a5:1c:74:fc:4b:fc:bf:3c:07:4a:37:c3:ed:c8:4a:be:25:fa:
f9:60:31:33:96:5d:dc:68:8f:d7:f1:34:c2:bc:03:86:8c:7e:
87:46:39:5a:87:06:ae:c6:1b:29:52:27:68:c6:e0:a0:15:0f:
39:f0:6b:f7:49:d4:05:d5:a6:e4:66:ca:8f:bb:dc:00:a1:94:
b5:5a:3e:49:73:d7:48:8e:8e:32:99:f0:f3:0e:de:ab:d8:18:
1e:a9:ec:9c:c2:cf:8f:28:95:aa:d1:c3:bb:f9:24:b2:d7:3c:
de:68:2d:aa:6b:79:24:a7:a9:21:de:e5:d1:7b:1c:de:0e:00:
e7:d3:09:3e:94:98:1f:7c:0b:b3:b7:6a:a0:3a:f1:e7:d8:43:
c6:2f:fa:9b:32:da:c7:5d:7e:df:37:d2:e6:41:9b:02:79:13:
e8:00:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:14 2024 by rpki-client on console-fra.rpki-client.org