Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/W4Esk1fh07yc8ork_XB8ZFjlkHc.roa
File: W4Esk1fh07yc8ork_XB8ZFjlkHc.roa (raw, json)
Hash identifier: G9HDEsnPgrOT1R7BVQZBstWgHLNPJCB1T8aOe+0EFkM=
Subject key identifier: 5B:81:2C:93:57:E1:D3:BC:9C:F2:8A:E4:FD:70:7C:64:58:E5:90:77
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183E0BFE9C38E191026F3C9DA74EF54D482
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/W4Esk1fh07yc8ork_XB8ZFjlkHc.roa
Signing time: Sun 16 Oct 2022 12:23:37 +0000
ROA not before: Sun 16 Oct 2022 12:23:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197890
IP address blocks: 89.117.102.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e0:bf:e9:c3:8e:19:10:26:f3:c9:da:74:ef:54:d4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 16 12:23:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b812c9357e1d3bc9cf28ae4fd707c6458e59077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:f4:82:aa:a9:46:4d:85:b3:3e:22:ff:2e:
64:7e:e3:24:37:7e:d8:3a:61:02:09:59:e2:15:61:
b9:8e:cb:f6:67:09:13:af:94:cd:67:6a:d6:00:18:
6d:d7:98:19:52:04:15:5f:1b:ef:75:4b:ab:ef:c3:
0e:b5:94:5c:8b:38:b0:ad:09:83:06:b5:35:cf:85:
fd:83:a9:ad:66:bd:6f:fc:12:c6:30:3d:bd:72:71:
ce:cf:e0:95:be:01:3f:e0:0b:87:af:c4:05:22:64:
ca:dd:eb:05:77:95:96:83:1f:94:09:7f:ed:40:8d:
d1:af:9f:89:75:c3:f5:e6:c9:41:a3:5e:89:33:e7:
c7:e9:94:ce:ea:9f:db:29:81:4b:4a:60:b1:a8:50:
6c:8e:6c:e7:10:b0:50:d1:79:ac:ad:f0:e5:5c:4e:
cf:84:db:d7:f7:58:b9:d2:0a:f3:60:9a:87:8d:03:
2f:42:8f:ce:e9:1c:36:c3:7f:2b:e1:8e:8f:4a:ae:
0d:e0:07:8a:b8:e4:1e:13:90:75:de:f1:1a:50:b7:
c3:e2:5b:02:60:c1:9c:77:7f:1c:70:cf:dd:23:ac:
23:7b:ee:6c:31:a3:e4:74:2d:9c:62:58:2f:ee:75:
43:90:56:82:75:9e:da:43:98:72:b1:5c:cd:5d:c4:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:2C:93:57:E1:D3:BC:9C:F2:8A:E4:FD:70:7C:64:58:E5:90:77
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/W4Esk1fh07yc8ork_XB8ZFjlkHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.146.0/23
89.117.102.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:dc:d4:38:51:34:98:52:dc:f4:22:6b:b4:9f:84:9c:05:a6:
4a:b2:85:b6:a5:67:7b:95:19:7f:66:92:7d:bd:6a:45:2d:ee:
b0:1d:70:0e:e6:94:49:72:23:9c:a9:de:10:c3:14:d0:7b:b7:
59:bd:e6:03:71:73:69:8f:5d:b9:c0:6a:68:a8:34:85:15:0c:
a1:7a:85:95:32:95:4c:0d:94:4a:8a:17:c9:0f:2e:7e:c3:db:
5e:76:ad:8f:7e:10:f2:18:66:d0:1c:c6:51:c5:a7:64:4b:10:
88:64:9e:15:11:e6:ad:e7:95:ca:92:cc:a5:fd:c6:47:b8:1c:
fd:5f:94:1d:d0:5c:50:50:69:78:64:fe:4c:20:61:63:b8:f4:
a4:52:77:a9:13:1b:e1:62:b2:17:cc:7d:7e:7e:a0:e8:11:f7:
64:93:14:95:e9:c8:50:fe:82:0d:f7:62:1c:6f:c9:fe:36:05:
b6:4b:da:4d:0a:98:82:b4:89:ce:01:d9:2a:d6:c1:5e:f4:0f:
9e:bb:80:be:65:67:f3:cb:3f:e7:e3:04:38:cb:fc:12:77:33:
99:26:b6:32:ea:88:7a:9f:c6:78:39:90:ac:7f:ec:e8:4e:54:
71:33:cd:f6:b2:2b:a5:30:e9:c3:af:04:0a:5c:f2:b4:ac:64:
dd:08:d5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:57 2025 by rpki-client