Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/YyXkg2T6g-4c9lh3oIbHzKA8ieg.roa
File: YyXkg2T6g-4c9lh3oIbHzKA8ieg.roa (raw, json)
Hash identifier: NRSVMF5GMLovU17SUQxy0QsqL7ORreNScyaFer4RM0E=
Subject key identifier: 63:25:E4:83:64:FA:83:EE:1C:F6:58:77:A0:86:C7:CC:A0:3C:89:E8
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B006765
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/YyXkg2T6g-4c9lh3oIbHzKA8ieg.roa
Signing time: Mon 23 May 2022 18:12:29 +0000
ROA not before: Mon 23 May 2022 18:12:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142617
IP address blocks: 89.116.248.0/24 maxlen: 24
89.117.111.0/24 maxlen: 24
89.116.44.0/22 maxlen: 24
89.117.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184575845 (0xb006765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 23 18:12:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6325e48364fa83ee1cf65877a086c7cca03c89e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:0f:02:60:50:1c:5a:1f:c7:8a:a6:45:bd:
97:59:24:89:7a:7b:c6:71:70:47:9f:52:3d:a2:30:
d7:cf:74:d3:87:8f:d1:3d:12:66:6c:d5:fe:43:2d:
44:03:83:b1:1e:1f:33:87:78:a1:7b:61:ec:dc:dd:
ff:8c:13:08:ca:f4:3d:86:b6:52:a4:7f:67:21:b3:
a0:3d:99:44:a7:96:f7:40:2b:98:fb:e9:30:1e:36:
93:6c:a2:f5:96:86:98:77:9d:83:38:22:99:68:8f:
40:9c:ca:89:3c:66:b1:b3:ae:c6:4f:fa:0b:cb:cc:
df:90:27:a2:4d:4c:14:b9:9c:e0:e8:4b:2c:8c:e8:
dc:e4:e0:46:87:a1:97:ef:bb:64:19:68:8d:f9:3a:
8a:c8:5d:d3:f7:a1:70:e2:54:0a:c3:3c:5f:d1:4f:
5b:44:3e:b5:b5:af:14:f3:0f:28:56:8b:d3:2d:60:
b8:08:9b:b9:f8:12:e3:47:47:35:3d:f2:cc:26:dd:
2c:aa:50:ae:b7:53:72:97:44:26:81:d7:fe:4b:22:
fc:5d:b6:ea:5c:5d:3a:ed:f7:57:c7:0e:63:ac:28:
77:00:e8:72:1e:e1:64:55:53:76:ed:3a:a5:97:fe:
60:7f:01:22:bc:49:66:90:82:44:0e:9c:8e:94:81:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:25:E4:83:64:FA:83:EE:1C:F6:58:77:A0:86:C7:CC:A0:3C:89:E8
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/YyXkg2T6g-4c9lh3oIbHzKA8ieg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.44.0/22
89.116.248.0/24
89.117.111.0/24
89.117.144.0/21
Signature Algorithm: sha256WithRSAEncryption
06:94:ea:2f:bf:b2:a7:47:6f:75:3e:95:b7:6f:8d:10:c9:11:
ae:06:a5:43:b7:32:49:23:ba:75:fa:c2:56:23:00:f2:ca:1b:
ee:a9:24:f9:61:37:ff:61:c0:3d:d3:28:6e:b6:06:d8:26:8d:
a1:5c:ad:30:b9:09:32:67:db:1f:6f:d7:57:c5:da:9e:d0:3b:
38:a4:d5:60:23:ed:e3:98:f0:65:47:0c:54:d2:fa:ef:0f:71:
22:93:46:60:ab:3b:d9:9a:4a:b6:8b:c6:0d:b8:f0:3c:56:70:
82:f0:e4:95:53:60:c5:b3:5f:a8:53:24:f2:8a:09:7f:5b:98:
35:a3:6d:3d:cf:c0:7a:b8:88:3c:91:24:db:e2:e4:79:c6:a2:
d5:56:5f:71:15:3b:fb:af:a7:ce:b5:40:b7:fa:3e:54:4e:d0:
61:02:88:40:16:bf:f0:14:e1:a8:bb:c3:a9:64:ee:fc:ca:ca:
d7:5e:cc:37:50:22:3a:b2:ab:08:0f:90:f7:f5:85:c0:42:be:
0f:75:2f:4b:84:ff:b8:3a:bc:73:39:6c:81:05:70:77:ae:52:
6c:38:7c:fb:ba:d6:bb:40:99:c1:24:92:43:b5:d4:f8:83:1b:
42:86:7e:74:ca:ad:d9:7e:2d:9d:49:1e:b8:65:77:61:67:dc:
6a:21:eb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org