Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/cj2--Cl3j87YlhRYgPevuoLz1YY.roa
File: cj2--Cl3j87YlhRYgPevuoLz1YY.roa (raw, json)
Hash identifier: GR1IoPFKU6ZKSXw7Cw961iW6wrUcQNIWaWMtpZBa4Qg=
Subject key identifier: 72:3D:BE:F8:29:77:8F:CE:D8:96:14:58:80:F7:AF:BA:82:F3:D5:86
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 08ED41A7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/cj2--Cl3j87YlhRYgPevuoLz1YY.roa
Signing time: Mon 17 Jan 2022 06:14:17 +0000
ROA not before: Mon 17 Jan 2022 06:14:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 89.116.64.0/22 maxlen: 24
89.117.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149766567 (0x8ed41a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jan 17 06:14:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=723dbef829778fced896145880f7afba82f3d586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:e7:3c:89:a5:ab:1d:b6:d5:b3:59:62:52:
21:d3:51:d0:e8:2f:d6:10:f5:3e:61:fb:d0:d7:58:
5c:3d:e0:84:d7:e8:f0:6f:fb:b6:6a:6f:ba:d5:4e:
de:1a:d7:65:4d:0a:e3:0f:a3:b3:67:93:24:bb:47:
19:f8:22:ad:17:81:e7:20:7d:67:84:06:24:b1:cc:
8b:a6:af:08:d7:fe:c7:47:f2:0d:4d:5b:08:7b:6d:
bb:ab:f9:61:30:49:3d:1c:39:3e:a7:06:e1:66:0b:
df:47:dc:03:1b:4c:b8:47:6f:09:e7:c7:7c:a2:6f:
ed:28:6f:c5:1d:15:cd:41:1f:ab:94:81:fd:f6:44:
03:f9:ff:c6:78:dc:2c:86:a9:95:c6:9a:aa:84:4e:
48:c2:ca:35:64:68:dc:f1:2c:0f:5f:c5:51:98:0b:
26:5e:35:57:16:e2:50:0c:ef:61:9a:6c:ed:5e:12:
74:bb:5b:e3:33:b9:a2:87:5e:7a:d2:a1:20:ef:1d:
6e:4b:27:48:35:0a:91:f2:db:d0:d3:a2:90:12:46:
57:45:7f:2c:1a:2d:b9:9c:59:01:ee:c9:c7:54:86:
f2:60:06:e1:3e:d3:24:93:06:31:8b:8f:d6:54:e6:
b1:de:b0:1d:08:a7:ab:19:6f:e8:97:7b:22:ec:73:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3D:BE:F8:29:77:8F:CE:D8:96:14:58:80:F7:AF:BA:82:F3:D5:86
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/cj2--Cl3j87YlhRYgPevuoLz1YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.64.0/22
89.117.172.0/22
Signature Algorithm: sha256WithRSAEncryption
86:60:24:5a:8e:87:8f:e0:14:a2:3b:3b:0a:f7:eb:b6:32:41:
01:f1:75:1f:d6:88:28:ce:02:82:64:0f:5a:a4:ad:1d:9b:eb:
3e:88:6c:65:c6:01:7a:95:bd:14:92:d7:e9:ca:77:10:43:d7:
78:01:ff:f3:63:a2:be:04:5d:e7:c8:8b:de:61:4d:60:b9:f5:
3f:b4:a9:04:37:54:13:93:b0:e0:c7:1f:55:3c:57:0a:88:f0:
56:65:62:28:55:3f:01:29:d4:d8:7b:a2:e0:22:6b:b5:39:25:
c7:fe:8d:c3:4a:8a:6b:4d:b8:af:37:13:66:2b:4d:7e:b8:d9:
48:bb:7d:10:e0:0c:15:83:ad:a7:0a:33:a3:6e:6c:15:83:12:
95:5e:1b:7e:70:da:30:8e:a7:54:e2:fa:b6:03:3a:f4:d2:3c:
ea:d3:fc:42:ec:c1:87:63:8d:10:63:7a:f6:48:97:8b:75:cd:
df:73:f7:ba:6a:a1:02:6f:ee:5a:f2:dc:fb:2a:c2:d6:90:f0:
b5:72:59:ee:3c:b0:39:ae:73:28:12:2a:03:20:8e:88:6e:47:
d7:8c:78:e7:c8:1b:4a:78:92:bd:61:f3:87:98:2f:f5:53:aa:
ef:90:fb:ca:01:68:f2:21:31:4c:24:f0:39:9b:d4:29:99:5f:
62:9b:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org