Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ckACwk4GQcjNVTwG5T71mXs75Jo.roa
File: ckACwk4GQcjNVTwG5T71mXs75Jo.roa (raw, json)
Hash identifier: OV0MN6gp3FGbLTQIgZylqqiNnenhKW2G5H/GW0TdTa0=
Subject key identifier: 72:40:02:C2:4E:06:41:C8:CD:55:3C:06:E5:3E:F5:99:7B:3B:E4:9A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AE7A9A9
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ckACwk4GQcjNVTwG5T71mXs75Jo.roa
Signing time: Wed 18 May 2022 07:25:17 +0000
ROA not before: Wed 18 May 2022 07:25:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 89.117.215.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182954409 (0xae7a9a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 18 07:25:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=724002c24e0641c8cd553c06e53ef5997b3be49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a0:1d:6f:b6:ce:91:8a:7e:66:db:66:5e:58:
79:05:c7:96:9b:d4:13:5c:f2:f1:fa:54:ce:ee:71:
74:ff:ec:4f:e3:16:38:09:ee:e5:d9:fe:89:9c:90:
02:80:15:14:57:4e:57:9b:2a:0b:55:bb:bd:71:52:
83:57:e0:b2:84:86:f6:ef:0b:16:25:f9:dc:a1:23:
50:6b:c1:72:9e:38:bc:15:89:24:3f:9c:ae:4d:bf:
b0:5d:30:ec:3c:2f:4d:68:ac:20:94:72:c8:af:99:
b1:df:7f:b6:5b:96:16:2b:1c:e9:6c:82:2c:93:59:
48:86:72:8a:4c:df:c2:b9:f1:14:52:e1:de:12:ce:
0a:94:47:67:ed:cb:56:a1:fb:46:f1:66:42:82:3d:
46:0f:2d:8d:ad:20:cc:98:1f:d2:fb:e4:9d:09:65:
17:88:99:e8:09:1b:4a:b5:a9:bf:d6:3e:d5:b2:97:
34:22:48:68:0b:fd:cf:10:49:98:bb:1e:53:7a:a2:
24:ee:12:1a:33:d3:80:08:33:07:cb:db:bc:0b:2e:
da:f1:ca:de:bf:c9:a8:b7:7f:e0:35:a8:6e:65:5f:
fe:b9:19:77:e0:74:62:9b:69:37:dc:3f:0b:96:66:
0a:06:85:6a:15:71:00:0d:34:1e:ce:30:34:58:32:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:40:02:C2:4E:06:41:C8:CD:55:3C:06:E5:3E:F5:99:7B:3B:E4:9A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ckACwk4GQcjNVTwG5T71mXs75Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.235.0/24
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
10:23:8d:f7:ff:60:31:d3:ea:3f:84:1e:f0:f4:a8:43:90:9e:
2d:54:0c:74:49:ad:89:62:7c:e9:27:ff:1f:97:7f:0f:2f:37:
54:2a:27:c0:0d:ff:dc:4e:52:aa:63:e1:bf:70:eb:74:91:45:
54:63:20:e8:c9:1c:2b:16:ea:08:2c:98:01:67:d9:85:45:85:
4e:fb:ba:69:3c:3a:61:8b:59:0b:70:d1:80:f4:83:62:ee:d5:
b6:bf:4c:0d:72:c4:c4:a1:47:80:b9:7d:54:ba:b0:b5:e9:6e:
3e:ba:f1:bb:fd:52:53:f9:29:47:51:62:1e:01:2c:3a:9b:99:
d1:0c:0e:9e:06:b5:ad:34:8e:cc:41:70:71:96:37:d5:24:93:
e6:ab:55:93:0f:81:b2:af:c3:86:4c:34:49:0f:7e:23:32:47:
cc:d5:69:d8:81:8b:05:31:60:76:1f:dd:97:69:3b:6e:3b:a5:
92:60:19:c1:42:c2:8b:2b:df:b5:eb:1a:d1:78:87:dc:83:b1:
0d:4d:e4:c4:85:f5:4d:8f:a5:ee:26:32:fc:d2:ed:ab:9c:57:
13:87:f7:bf:f9:3f:b3:e6:3f:cf:a3:40:0c:b8:ce:e4:c3:9b:
81:48:89:a9:f3:8b:1f:e6:37:a5:97:ae:2d:3f:a1:9d:ac:86:
03:d2:12:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org