Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/X_EjMpz3qDrdaxTibh39hMo78-g.roa
File: X_EjMpz3qDrdaxTibh39hMo78-g.roa (raw, json)
Hash identifier: WKZ7DwWw7bxixyrgzU8OKwtgtCq3YsYA2hwUyoMQRD0=
Subject key identifier: 5F:F1:23:32:9C:F7:A8:3A:DD:6B:14:E2:6E:1D:FD:84:CA:3B:F3:E8
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182827B68551DC06BA10760DF5DD06DE417
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/X_EjMpz3qDrdaxTibh39hMo78-g.roa
Signing time: Tue 09 Aug 2022 12:01:41 +0000
ROA not before: Tue 09 Aug 2022 12:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 89.116.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:7b:68:55:1d:c0:6b:a1:07:60:df:5d:d0:6d:e4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 9 12:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ff123329cf7a83add6b14e26e1dfd84ca3bf3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:22:0d:3c:42:35:fa:c2:a7:04:0e:4b:db:
45:ae:64:23:a7:54:24:b9:5b:5f:9e:cc:d4:d1:7c:
8e:f8:42:65:96:39:7e:cc:06:f3:f0:cd:47:51:b7:
2c:73:c2:16:c8:de:39:27:36:3e:66:9f:75:fb:13:
15:cf:5b:e2:6c:f3:55:4c:bc:12:d7:c1:ef:29:48:
97:a4:cf:4d:13:c1:dd:e2:87:32:8c:f8:c2:c1:47:
38:4e:c7:6b:d7:b4:f6:7d:b5:c1:16:99:b6:ed:3e:
ab:0e:39:82:91:56:8e:67:2b:35:4c:8f:9a:c2:44:
37:16:44:75:67:cd:8e:6c:f5:40:f8:8d:f4:bb:19:
3b:e6:8b:d7:79:7e:bc:8a:e2:a5:d5:81:20:76:7e:
79:fe:fb:5d:1d:d6:11:84:28:77:0a:52:4a:44:76:
ff:b8:6e:65:75:0b:9b:53:17:2f:4d:28:39:fe:20:
c6:38:09:a9:ee:cb:76:7e:12:c1:52:02:8d:9c:50:
ac:ab:13:9c:e4:b4:70:79:9d:a9:d9:ff:15:8a:90:
6b:f3:cd:6c:a6:6e:c7:d1:c3:2f:ea:bd:29:ba:d4:
d9:40:64:51:19:1a:1c:a2:d2:fc:f2:1e:0f:14:a0:
b7:3c:a9:5f:d5:d5:85:dd:21:48:6a:68:f3:50:d4:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F1:23:32:9C:F7:A8:3A:DD:6B:14:E2:6E:1D:FD:84:CA:3B:F3:E8
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/X_EjMpz3qDrdaxTibh39hMo78-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.141.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:f1:d1:15:71:db:f6:34:61:4a:82:ef:70:cf:61:a2:a9:c8:
9c:77:af:97:1d:8d:34:7e:a9:cb:da:70:bb:69:f9:9b:33:14:
7d:38:e7:f6:56:9e:3f:f5:fe:03:78:21:06:b0:1b:a2:e2:77:
7a:dc:50:35:b2:60:e1:6c:08:f0:da:34:6d:a6:a0:d8:ee:45:
e4:05:e7:e8:80:c1:77:a2:a2:c5:e3:b6:54:f6:c0:0a:e2:bc:
57:52:d1:06:71:a4:5f:78:46:5b:f8:4c:3b:21:06:1f:08:b5:
70:12:64:21:f7:1d:19:ef:da:a6:93:7c:4c:01:7e:38:63:cb:
fd:1f:97:aa:69:fc:c1:d5:32:c2:61:b4:82:89:ca:a5:c2:60:
54:2e:9b:28:de:86:25:a5:35:6d:be:ce:23:1c:db:95:50:f2:
e8:e9:7f:54:6d:fd:d9:1a:77:d4:c9:5e:cc:c0:84:0f:19:43:
fa:a4:04:01:6e:2e:7b:0c:ff:3c:3e:a3:db:dc:da:06:55:9e:
00:94:1f:a6:b8:91:04:c7:27:fb:da:79:ef:6b:b9:f4:36:e0:
ec:86:02:bc:9c:32:da:6f:25:fd:92:81:bd:18:a3:5b:48:d9:
30:16:a3:7d:23:e3:9e:82:94:31:9f:6d:49:04:10:5d:f8:84:
9f:74:da:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org