Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/TmWz5CykhpbvrvVK3bNotUAdGYY.roa
File: TmWz5CykhpbvrvVK3bNotUAdGYY.roa (raw, json)
Hash identifier: HtQvLCSbnRl7sFpA+jnV237Jg2G8Mc35z2HL+5hlIbs=
Subject key identifier: 4E:65:B3:E4:2C:A4:86:96:EF:AE:F5:4A:DD:B3:68:B5:40:1D:19:86
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B40FF48
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/TmWz5CykhpbvrvVK3bNotUAdGYY.roa
Signing time: Wed 08 Jun 2022 12:07:03 +0000
ROA not before: Wed 08 Jun 2022 12:07:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142617
IP address blocks: 89.116.248.0/24 maxlen: 24
89.117.111.0/24 maxlen: 24
89.117.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188809032 (0xb40ff48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 8 12:07:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e65b3e42ca48696efaef54addb368b5401d1986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:5b:b8:bb:94:4f:f0:28:46:ca:f8:5b:e6:
1f:5a:ac:54:b6:7b:ff:cc:aa:6a:57:c6:47:74:0c:
04:be:05:45:b4:39:91:d3:64:f0:a6:13:5e:66:fc:
d4:0b:7b:e5:9a:dc:55:58:8d:a3:0e:51:d9:38:55:
88:6f:81:b8:ae:bc:9c:ac:8b:bf:c0:24:d1:ad:b8:
d0:36:3f:4c:37:44:28:50:36:f5:5f:04:b2:45:44:
0a:61:6d:e7:e7:97:2e:3b:55:78:c9:61:21:bd:58:
22:57:ae:48:62:31:cb:96:24:32:5c:ab:30:39:00:
75:53:8a:d8:ce:b9:f7:e2:fd:10:2a:98:43:d4:03:
60:06:1e:44:d1:e2:4f:b7:e4:0e:84:76:e1:27:aa:
aa:9f:8e:c0:8e:09:6c:c0:de:a7:68:14:dc:02:f0:
e5:be:0d:14:0c:37:53:0c:12:54:d9:7d:7d:eb:ee:
3f:81:28:ba:ef:8c:dc:0c:fd:05:4d:23:61:08:20:
e2:b2:02:d6:a0:41:89:88:f1:4a:21:74:67:79:74:
ee:56:18:04:1f:fa:a4:f4:e2:d6:2b:6d:15:f1:66:
d2:a8:0a:5b:8a:ac:41:fd:11:7f:b2:d9:24:1c:a0:
83:58:51:24:e4:3c:4a:0f:9f:5a:f6:6d:d4:07:54:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:B3:E4:2C:A4:86:96:EF:AE:F5:4A:DD:B3:68:B5:40:1D:19:86
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/TmWz5CykhpbvrvVK3bNotUAdGYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.248.0/24
89.117.111.0/24
89.117.144.0/21
Signature Algorithm: sha256WithRSAEncryption
92:3d:8b:ef:cc:f4:66:c5:df:bb:70:3c:a4:6f:eb:d7:6a:7d:
19:0f:c5:30:72:44:47:d7:02:38:bc:54:e5:2c:77:12:d2:7e:
53:ca:7c:7f:55:d5:c0:bf:e7:be:32:ab:0a:c6:5e:86:19:44:
c4:7e:74:c7:ad:4b:ff:fd:79:af:fb:26:5f:d6:17:4d:2e:37:
a7:eb:b1:76:74:2f:ba:5b:ab:e9:1d:ba:ed:d2:e0:48:16:ec:
2a:95:3f:c3:73:6c:77:d3:59:84:c3:9e:95:a6:a1:df:10:1b:
79:9f:61:7a:b1:53:1b:93:ae:bf:8a:e9:a8:d3:d8:53:2b:dd:
fc:b1:0b:b3:70:85:c7:12:ce:f7:fc:4c:ff:3f:d4:90:9d:b5:
51:c1:3e:84:59:61:85:2b:5d:8e:bd:b5:66:01:4a:9e:1f:dc:
4a:82:cf:04:47:b3:56:af:2f:52:92:79:2c:2d:94:ff:64:86:
57:51:12:18:5f:b8:70:64:eb:ab:fe:d2:41:3d:80:11:2d:3a:
7a:9b:29:b9:93:a3:60:64:92:07:41:62:aa:71:63:ca:f6:7a:
e7:78:c9:56:5f:74:db:e5:e0:4e:d5:06:cd:a2:a1:39:6a:53:
7d:c2:f1:ff:b7:78:b6:ca:70:d2:f2:b1:06:4b:94:f7:bd:ac:
4e:51:73:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org