Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/UPPycmqPEbjxbR_-6BndIdrCds0.roa
File: UPPycmqPEbjxbR_-6BndIdrCds0.roa (raw, json)
Hash identifier: lHoxsFoqoQ6zdEa9G8dxzk/srRIb88B8uNmLiJrhn6A=
Subject key identifier: 50:F3:F2:72:6A:8F:11:B8:F1:6D:1F:FE:E8:19:DD:21:DA:C2:76:CD
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01825D54A023CA5B9983578CDF45551A7C81
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/UPPycmqPEbjxbR_-6BndIdrCds0.roa
Signing time: Tue 02 Aug 2022 06:53:23 +0000
ROA not before: Tue 02 Aug 2022 06:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 89.117.112.0/22 maxlen: 24
86.38.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5d:54:a0:23:ca:5b:99:83:57:8c:df:45:55:1a:7c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 2 06:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50f3f2726a8f11b8f16d1ffee819dd21dac276cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e6:97:b5:b3:66:c7:ec:c5:ce:76:25:5f:98:
78:37:c8:ce:4d:06:b2:f2:3c:b0:97:04:a3:25:c5:
cf:5c:e7:36:59:ef:2e:5c:f7:56:1c:7b:8f:db:d4:
ac:5c:7d:83:64:48:5b:dc:e7:d4:58:25:49:38:bf:
08:27:08:4f:d4:18:35:98:ac:95:85:ef:9a:d4:b6:
a8:69:c3:c4:d8:55:02:f3:03:83:52:6c:b6:00:6a:
2d:a4:e6:8e:80:9a:d9:30:bf:b9:77:a1:b2:66:5f:
27:90:be:6b:6d:44:cd:ce:53:f8:70:4c:33:72:10:
d5:06:6b:34:bd:ff:13:5e:c4:f9:09:87:a9:de:e8:
0c:d5:fc:b8:a8:22:59:3b:22:71:91:7a:df:84:23:
fb:a4:1a:ed:b9:ae:1e:95:cb:f4:b9:2b:48:6e:6f:
4a:b6:ec:8f:98:1a:ce:65:78:2f:2b:ef:cf:03:24:
7c:dd:e2:b3:b2:ef:d6:5f:bd:1a:b5:98:10:57:dd:
2d:a7:9b:46:29:0f:08:20:66:bc:5a:3f:02:20:09:
65:98:6f:8e:df:f1:87:8b:7f:ef:f3:dd:f8:fe:c5:
9e:2a:91:e8:78:5f:24:04:67:a1:cd:ce:f2:0f:e4:
e7:ae:b5:3a:1b:d0:7d:3c:fc:99:9f:ce:f5:cf:f0:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F3:F2:72:6A:8F:11:B8:F1:6D:1F:FE:E8:19:DD:21:DA:C2:76:CD
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/UPPycmqPEbjxbR_-6BndIdrCds0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.182.0/23
89.117.112.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:9c:dd:83:2d:a3:29:fe:3a:0d:3c:28:80:4f:8e:9b:cb:7c:
f4:d9:22:37:ba:51:81:c5:6c:ed:65:7f:7c:fe:23:8b:bd:6d:
07:b6:78:e6:10:9d:5c:cd:36:56:38:81:c1:cf:a4:85:5b:f5:
09:ac:15:d3:ba:a2:f0:66:1f:9d:56:da:09:b0:4e:a8:37:dc:
4e:0a:6e:25:bc:26:29:fe:c3:c9:14:5d:be:02:7f:74:ff:59:
d6:8a:c2:47:bb:ef:8c:b9:cd:3c:aa:17:90:21:01:49:d5:13:
40:52:76:9d:66:16:5a:72:a4:fc:7c:80:09:d8:bf:02:90:4d:
08:dd:12:5f:f7:e7:1b:42:ff:43:5a:8b:2e:a4:9a:0f:6e:f5:
ea:dc:d0:b0:aa:b2:f1:a5:e9:5d:be:a9:d3:87:9b:55:41:59:
03:dc:e2:ee:cb:7c:6e:65:44:49:63:f3:b0:b9:ac:2f:2f:fa:
a4:35:16:c6:cc:24:10:82:07:7b:fd:35:f6:49:13:b8:48:9d:
e2:6d:40:92:81:cb:ae:28:3c:33:bd:da:a7:6d:2c:eb:96:23:
f7:0f:c3:86:32:e9:fa:df:0f:58:0d:2a:69:cb:0b:04:ef:bc:
da:9c:85:1a:7c:ea:e5:22:f7:00:51:fc:fc:19:25:cf:2a:a1:
7b:5f:72:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org