Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VkcickHqpNOmx1P9TVvz1PZVKQY.roa
File: VkcickHqpNOmx1P9TVvz1PZVKQY.roa (raw, json)
Hash identifier: FUGbTT26bD9/PnojwS4w67agwpJ0OxtqRfHX0HQbQAE=
Subject key identifier: 56:47:22:72:41:EA:A4:D3:A6:C7:53:FD:4D:5B:F3:D4:F6:55:29:06
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B4DA7CE
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VkcickHqpNOmx1P9TVvz1PZVKQY.roa
Signing time: Thu 09 Jun 2022 18:38:03 +0000
ROA not before: Thu 09 Jun 2022 18:38:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 89.117.188.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189638606 (0xb4da7ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 9 18:38:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5647227241eaa4d3a6c753fd4d5bf3d4f6552906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:c9:3c:69:e1:62:da:90:dc:3b:a8:b1:59:
52:f4:1a:89:55:62:7d:07:36:33:62:99:b6:f6:ad:
6f:98:ea:b9:d3:66:7a:56:0f:55:f2:09:cb:e7:b9:
72:99:c8:82:ba:e2:02:9c:b9:82:53:95:3e:0d:a5:
1f:60:8e:1a:c5:6f:cd:c4:da:72:6d:17:f7:9a:13:
1e:03:7f:0e:f6:a4:00:a4:36:1b:51:89:6e:33:8f:
93:44:1a:ae:0c:32:af:af:f4:d3:12:34:94:da:20:
74:05:b2:b5:7c:f5:e3:78:7a:8b:bc:3a:27:82:69:
3b:7b:0c:78:41:b1:1f:36:e6:8f:3e:09:db:da:36:
22:0f:a4:8a:42:7e:9e:3d:c6:08:d9:ee:16:92:9f:
ee:37:c7:c5:76:23:2b:6f:e9:03:dd:e3:de:ee:79:
c3:95:39:8d:38:69:1d:93:87:b6:22:49:39:c4:e9:
07:9f:60:fd:1b:ff:9e:3d:e0:b4:f5:12:94:61:af:
ab:f7:26:f8:cb:2f:34:57:c8:0e:c7:49:19:94:cd:
b5:13:a2:af:2a:be:3f:57:c9:11:0b:64:fd:f7:8a:
d4:d2:b3:bc:3b:65:69:b9:c2:17:db:39:a1:4e:31:
68:ca:cb:01:07:c8:b1:71:41:bf:a8:e1:48:ab:f8:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:22:72:41:EA:A4:D3:A6:C7:53:FD:4D:5B:F3:D4:F6:55:29:06
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VkcickHqpNOmx1P9TVvz1PZVKQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.128.0/24
89.116.154.0/24
89.117.139.0/24
89.117.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:15:15:16:dd:47:19:8a:66:7f:60:44:31:ec:dc:4d:70:97:
5d:9c:fc:f2:6c:45:61:d6:0c:11:ed:2f:1a:90:d8:e8:d4:88:
04:07:b2:ef:2b:8f:1c:55:ab:80:83:cf:1d:d7:15:bd:23:cc:
06:5d:df:93:15:f3:6e:fd:d6:da:76:b6:f4:74:88:a0:28:11:
64:30:f1:b5:0b:9c:e7:ba:52:68:ad:82:40:9d:96:ae:6a:8d:
08:9b:13:44:62:37:5d:ce:95:3e:b0:55:e4:90:72:11:f7:b7:
06:e7:f4:b6:83:6a:31:de:b4:f4:51:9f:18:7f:01:e3:e4:da:
78:42:25:4d:da:9f:8b:31:58:67:5a:83:1d:8b:b4:e3:2e:92:
76:b7:0b:30:bc:2d:20:4a:53:ad:c4:c5:78:1f:e9:13:fb:11:
b7:3d:f3:0a:ff:20:e6:78:60:02:03:63:f2:32:d7:18:08:7e:
10:ae:92:01:17:22:81:f7:28:19:ff:1d:69:04:f8:b6:fe:cb:
c6:08:2f:01:d1:a5:27:06:16:79:20:13:d4:ea:90:4b:89:aa:
81:3c:c2:e2:3b:d9:9e:c4:13:8c:89:26:e7:a4:01:cf:ea:85:
2f:9a:9d:f7:70:75:83:31:7e:50:4d:6d:97:dc:6f:45:27:3e:
03:42:02:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org