Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/aPA_zPknsoon1x2X0x7aEiUOj7E.roa
File: aPA_zPknsoon1x2X0x7aEiUOj7E.roa (raw, json)
Hash identifier: L2cUrh+egPOsPmhZef0+GAopDawAJ63k6hkD8c29N34=
Subject key identifier: 68:F0:3F:CC:F9:27:B2:8A:27:D7:1D:97:D3:1E:DA:12:25:0E:8F:B1
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AC116E6
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/aPA_zPknsoon1x2X0x7aEiUOj7E.roa
Signing time: Tue 10 May 2022 07:09:32 +0000
ROA not before: Tue 10 May 2022 07:09:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 89.117.130.0/24 maxlen: 24
89.117.126.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180426470 (0xac116e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 10 07:09:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68f03fccf927b28a27d71d97d31eda12250e8fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:b0:89:c4:53:17:52:20:fc:c8:0c:ff:3f:
5a:d9:c8:a7:f8:e0:bb:0e:56:9c:d1:f8:c8:6f:bc:
ee:f3:57:fa:00:67:56:34:59:3e:c4:2c:3c:cf:c9:
da:35:6e:7f:17:08:18:a5:d8:77:5f:b9:64:c1:d4:
2b:2a:9f:f9:af:7b:e1:79:08:4c:5c:cb:b1:c2:38:
21:55:87:a1:a5:1f:c3:dc:a8:76:34:8d:e7:8d:87:
64:b0:2c:be:7c:2e:42:1b:a1:bc:bb:ec:21:f0:cf:
35:63:6d:8f:71:40:c9:75:4a:55:24:1a:74:f4:95:
4a:3b:99:c7:19:6c:af:73:81:ca:1a:d4:79:34:ce:
cb:41:39:83:38:0b:b9:ac:2c:21:78:82:d3:0e:8c:
f9:60:f2:57:8a:b5:60:21:aa:30:8c:24:7d:8b:45:
a3:1f:16:73:6a:ed:e4:45:79:a4:ec:e5:cb:d2:12:
80:a8:91:46:26:e5:48:50:cc:3a:d5:f2:db:28:f2:
9f:b9:82:db:e9:dd:52:9c:c1:18:0f:04:fc:f3:89:
5c:af:f5:60:40:b5:30:e2:34:0d:19:40:98:a9:0f:
41:74:53:31:13:82:ec:aa:b8:f4:f6:e4:0f:95:d2:
78:9d:a1:a0:3e:81:57:ae:58:e4:21:14:ec:8b:07:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F0:3F:CC:F9:27:B2:8A:27:D7:1D:97:D3:1E:DA:12:25:0E:8F:B1
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/aPA_zPknsoon1x2X0x7aEiUOj7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.203.0/24
89.117.126.0/24
89.117.130.0/24
Signature Algorithm: sha256WithRSAEncryption
08:83:9a:d9:6e:f3:6a:c7:3d:d3:2d:b8:97:a1:dc:f3:44:d6:
ad:e3:66:6f:e1:81:72:79:52:b2:61:40:85:ca:26:2c:b9:6a:
17:7c:01:3b:69:c9:46:4c:ab:0b:48:c9:01:49:7f:19:cf:f7:
d2:8e:63:ac:61:1a:b8:de:9b:13:54:05:10:72:78:a2:10:18:
55:53:26:09:bb:7e:2d:21:ee:af:00:73:f2:1f:cb:b6:50:6c:
f8:21:9b:bf:3c:4b:03:39:d3:3d:fb:1d:9b:1d:a1:96:51:3c:
5e:74:99:0d:6a:ae:78:83:ec:65:f9:cc:10:d1:16:04:12:16:
ec:28:2d:e3:5e:1b:ac:f3:e9:d8:b8:e9:a8:53:e3:59:4e:3c:
8e:b8:fe:7b:13:54:7b:8c:7e:55:45:f7:af:68:81:b2:d9:2f:
87:c6:8b:f2:d0:31:7c:47:8d:20:21:b8:20:a9:df:b5:fc:41:
3c:ef:cc:88:74:ab:e3:13:a5:7e:58:29:87:9d:cb:63:87:da:
ba:70:89:11:a0:0a:e4:bf:1d:38:78:45:20:2f:24:5b:bd:fd:
f1:32:fe:5a:1d:aa:6e:a8:78:a9:59:e0:03:75:5d:4a:9f:53:
19:2b:29:13:5f:e1:43:c7:2e:01:73:56:4e:66:1e:5e:9a:e0:
2c:38:d4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org