Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/YAeM1p94hQLxkp2eWqSFeDHpl14.roa
File: YAeM1p94hQLxkp2eWqSFeDHpl14.roa (raw, json)
Hash identifier: I2pdw8cnh6jIU1vHEDXWuOeq+MNI7mNVPZx6cZGSHY4=
Subject key identifier: 60:07:8C:D6:9F:78:85:02:F1:92:9D:9E:5A:A4:85:78:31:E9:97:5E
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AFB47B9
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/YAeM1p94hQLxkp2eWqSFeDHpl14.roa
Signing time: Mon 23 May 2022 06:09:30 +0000
ROA not before: Mon 23 May 2022 06:09:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 89.116.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184240057 (0xafb47b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 23 06:09:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60078cd69f788502f1929d9e5aa4857831e9975e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:75:1f:1c:4e:a6:11:80:e9:3f:56:cc:c7:e7:
c7:e8:85:d5:7d:8b:1e:d6:52:29:db:bb:de:9b:c2:
94:05:3f:cc:98:2a:a4:89:07:79:15:b8:b3:11:66:
a2:f1:0e:18:41:44:73:14:dc:1f:b9:4b:72:12:25:
04:11:2b:27:74:77:23:bd:22:9f:a3:49:ec:9b:2d:
12:59:d5:ed:ff:0e:34:4d:71:15:a3:c1:5f:47:84:
84:b9:48:56:f0:7f:25:1b:12:24:7e:21:64:37:4f:
86:9c:24:38:fa:6e:e4:85:67:70:72:81:5d:6c:33:
4a:68:31:13:e3:ea:34:94:24:67:7b:82:b3:67:39:
e5:47:97:be:6a:16:14:a4:69:c0:1d:03:5c:71:3a:
e2:54:f1:cd:6b:a8:f1:d8:64:37:12:00:94:dd:68:
0b:87:e6:51:77:a9:9a:e5:60:dd:86:8c:c7:b5:b4:
35:93:78:86:9e:72:41:bc:31:89:f4:a9:08:a6:16:
88:76:be:4b:d8:18:29:6d:42:7f:6b:75:93:0c:14:
4f:1a:45:27:53:67:bb:fa:f6:12:56:b9:f9:c7:26:
b9:f8:55:ac:44:6d:be:73:d6:d5:d4:5a:05:97:8e:
4f:e4:18:6f:a3:38:e2:cd:92:dd:c0:43:ce:49:f1:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:07:8C:D6:9F:78:85:02:F1:92:9D:9E:5A:A4:85:78:31:E9:97:5E
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/YAeM1p94hQLxkp2eWqSFeDHpl14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.161.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:24:45:8f:06:35:92:e8:b8:90:1d:c9:d2:e7:ee:83:25:08:
1c:f2:e0:f8:65:9c:ef:a6:86:5b:4c:34:53:b7:34:b4:8c:0b:
11:8f:85:f7:f6:44:84:ca:97:dd:30:e9:7d:50:84:48:b0:37:
32:88:bf:2f:12:50:2f:db:1a:28:1d:b7:e6:c0:57:5a:99:9d:
37:04:1f:ad:5f:27:a6:73:ae:2c:c7:05:de:b8:e8:fa:e1:53:
d1:67:68:f8:14:e8:cc:c9:e0:81:39:f1:b6:be:af:3d:2b:ff:
59:09:4a:8f:36:e8:51:62:5f:5f:c6:4a:8b:f5:d2:9c:b0:ed:
7c:4b:58:b6:9e:66:57:61:1d:fb:9f:15:0e:d0:12:50:7b:f6:
5b:b2:66:b9:dd:fc:3e:98:d6:db:70:e3:05:95:a2:df:93:94:
e4:f9:4f:d5:89:d7:03:5a:b2:85:f4:e1:7f:ab:7e:27:9a:69:
e7:c7:bd:e3:97:2a:80:4a:b3:fb:9e:1c:75:88:00:99:90:c6:
4e:24:bd:9c:5f:3e:31:40:ff:c3:66:7a:2e:18:62:47:ec:7e:
4c:83:e3:67:3a:2b:d3:70:2e:c9:53:90:e9:3f:6c:36:61:ad:
16:41:32:97:41:58:14:ad:7c:fb:ff:c4:20:8c:6f:72:cc:40:
b8:9d:74:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:53 2025 by rpki-client