Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/cDwhqhu89ZunlHcGtBlR6Mmb7EA.roa
File: cDwhqhu89ZunlHcGtBlR6Mmb7EA.roa (raw, json)
Hash identifier: AEHQjLaS0YqZSU3einJ4L8xS6dfoalqXqPSZE08/2HE=
Subject key identifier: 70:3C:21:AA:1B:BC:F5:9B:A7:94:77:06:B4:19:51:E8:C9:9B:EC:40
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 095528CA
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/cDwhqhu89ZunlHcGtBlR6Mmb7EA.roa
Signing time: Fri 04 Feb 2022 05:55:27 +0000
ROA not before: Fri 04 Feb 2022 05:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 89.116.115.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156575946 (0x95528ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 4 05:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=703c21aa1bbcf59ba7947706b41951e8c99bec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:9e:81:8d:79:cd:b2:5e:0e:ce:96:67:84:
e1:85:7b:ee:8b:70:df:e0:7a:49:ce:8b:d0:79:f9:
8b:45:90:35:5d:bc:c5:13:25:36:cb:f0:e6:1f:84:
1e:57:c4:de:d6:bc:9c:24:0a:bf:2b:8a:94:17:e5:
ab:aa:ff:2e:07:0a:9d:c6:02:12:9a:91:55:b6:12:
47:56:de:4d:0d:08:92:f5:c7:b9:71:ff:e8:ee:92:
97:b6:5d:10:97:c4:f8:b2:b7:c4:28:ac:48:92:cb:
90:3a:ec:0c:b2:77:d1:7a:57:5e:9b:28:a7:15:d8:
f7:78:09:52:d6:b8:e5:e7:ef:af:6d:cd:27:75:0f:
ef:60:68:95:82:7a:bd:ce:78:de:f8:3d:fe:85:54:
5f:53:19:7e:5b:15:e6:f5:c1:3c:86:a6:87:bc:3c:
fa:82:b7:a0:d2:f0:b0:cc:8c:c6:7e:27:8c:59:6a:
01:e6:53:d2:7d:16:c0:7a:7d:b8:61:a7:8d:86:18:
11:63:dd:b7:35:11:19:b1:db:bf:0c:69:d1:f4:80:
04:72:32:99:e9:60:ff:ca:ed:5f:28:56:f4:1c:9a:
70:41:8a:cf:8c:5b:d3:c9:80:52:2a:bb:db:71:c4:
2f:92:89:b1:b7:0a:1e:a4:2a:62:e2:08:a9:28:bb:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3C:21:AA:1B:BC:F5:9B:A7:94:77:06:B4:19:51:E8:C9:9B:EC:40
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/cDwhqhu89ZunlHcGtBlR6Mmb7EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.115.0/24
89.116.156.0/24
89.116.171.0/24
89.116.203.0/24
89.117.130.0/24
Signature Algorithm: sha256WithRSAEncryption
07:cb:66:dd:9c:a9:bd:09:d4:35:d5:29:5e:13:8f:02:35:ad:
14:ae:4f:da:6e:28:d4:b7:6a:59:b7:1d:d6:86:ca:92:07:9e:
77:3f:0a:c4:cd:03:98:08:31:a4:8d:c7:73:42:b1:ae:75:95:
7c:2e:5a:97:23:a8:7b:67:49:41:16:0b:f9:05:77:20:09:04:
97:4a:99:23:76:0c:b0:4c:cf:dc:46:52:de:d7:9c:53:30:be:
21:d6:d5:f1:f4:50:bf:21:6b:d6:bc:b2:dc:6b:30:89:8c:d6:
82:ff:21:ec:35:18:20:ab:7a:8a:e7:72:0c:c2:7b:ce:4f:61:
b5:95:1e:25:be:13:66:38:2a:49:b0:75:cb:63:4a:60:de:24:
d8:99:03:b0:50:52:81:51:dc:87:0b:0a:ee:ff:ff:5c:44:07:
5e:ae:15:de:94:05:3e:ee:dd:f2:76:a6:7a:80:36:af:b3:f4:
13:25:3d:f9:3e:29:44:e9:9f:31:41:d8:8b:a7:e4:06:d0:39:
31:79:12:51:41:b4:53:0a:15:f1:4e:13:e1:51:27:4f:54:01:
70:44:55:66:65:a3:06:93:bd:36:31:5f:05:52:fe:ec:a3:0d:
fa:56:65:3b:c9:e4:87:0b:e3:6f:c2:3d:34:46:93:1a:48:13:
e6:44:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:06 2025 by rpki-client