Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/dDZhNJO64e17xRj0o2WmLUBmHpw.roa
File: dDZhNJO64e17xRj0o2WmLUBmHpw.roa (raw, json)
Hash identifier: caF8vLqpxDRibk06ExMNX6s9MQb8BvpVkguj+CH2I2I=
Subject key identifier: 74:36:61:34:93:BA:E1:ED:7B:C5:18:F4:A3:65:A6:2D:40:66:1E:9C
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A648867
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/dDZhNJO64e17xRj0o2WmLUBmHpw.roa
Signing time: Sun 17 Apr 2022 08:37:25 +0000
ROA not before: Sun 17 Apr 2022 08:37:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142617
IP address blocks: 89.116.248.0/24 maxlen: 24
89.117.111.0/24 maxlen: 24
89.116.44.0/22 maxlen: 24
89.116.48.0/22 maxlen: 24
89.117.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174360679 (0xa648867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 17 08:37:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7436613493bae1ed7bc518f4a365a62d40661e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:fc:2b:84:22:2a:05:d6:9b:36:34:c3:2d:
2c:65:2f:72:79:7f:9d:1c:56:e9:87:33:9d:35:f5:
fd:3a:44:75:80:dd:75:6c:33:eb:3e:71:b4:ad:84:
97:43:5b:de:13:af:7c:01:07:43:40:3c:c5:aa:ac:
54:cf:cd:ee:b1:b1:ab:47:5e:9f:0c:9d:1b:72:46:
c7:3f:13:db:e5:ef:e9:9e:c2:31:1c:f4:39:fc:4d:
01:06:55:9a:e2:17:f3:ad:dc:72:ec:db:2d:76:b8:
d2:b5:34:e7:52:0d:2c:d1:0f:5e:08:1d:6e:9f:f4:
e6:08:70:77:10:05:b0:44:7f:56:70:d2:2f:36:99:
f0:e9:f9:04:04:4c:25:89:b9:88:ab:f8:f5:de:11:
3a:73:d6:a0:f3:40:03:7c:ee:0b:99:3d:ea:0b:50:
36:e5:db:b7:0f:57:34:55:50:7a:0e:0e:35:72:1b:
54:c9:46:5f:ef:bd:ca:29:11:ac:61:a1:4f:95:55:
68:73:1a:7f:95:d6:6a:8f:d5:4b:13:70:85:8e:90:
6f:f6:ea:e1:6f:9c:ed:41:f4:17:70:bf:50:7e:24:
d0:99:80:a0:70:28:9b:41:7e:a9:f4:ec:6e:3a:f9:
ba:15:05:6a:98:3c:fe:30:38:38:ef:45:86:b6:99:
c4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:36:61:34:93:BA:E1:ED:7B:C5:18:F4:A3:65:A6:2D:40:66:1E:9C
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/dDZhNJO64e17xRj0o2WmLUBmHpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.44.0-89.116.51.255
89.116.248.0/24
89.117.111.0/24
89.117.144.0/21
Signature Algorithm: sha256WithRSAEncryption
01:4f:67:b9:f5:71:e0:cc:ad:ac:e0:2f:98:88:b5:ca:0d:f6:
cc:23:76:53:63:95:c4:62:27:f5:dc:cc:18:39:55:37:01:72:
11:30:e8:a4:ea:9a:aa:25:7e:23:ae:ed:47:96:de:f2:93:59:
3a:b8:0a:bf:9f:b1:7c:be:f9:dd:d4:d8:fd:fc:64:c3:f6:e2:
26:28:5b:1e:95:cf:69:67:75:7a:b4:ca:39:df:ae:d5:f8:82:
89:42:d7:a9:a7:6b:42:40:5f:97:6b:43:8c:a5:2a:93:0f:4b:
bb:90:be:72:ea:3e:5c:8b:1e:05:f8:69:c5:e3:7c:b2:ca:5f:
ee:9a:64:ff:62:76:bc:14:d6:bb:c0:80:ee:3d:26:97:74:b3:
2a:f1:e2:54:c8:e2:16:47:5e:d5:51:ef:00:dc:0d:98:25:e3:
a9:f5:35:09:33:a1:92:0e:4d:2c:16:41:57:71:e3:78:a4:4f:
99:d3:a9:ef:41:8b:51:fa:33:c1:3c:7e:2b:b7:01:2e:09:b8:
c0:2c:6c:eb:96:00:c0:e6:41:a1:96:2e:f2:0d:cf:be:34:55:
db:e8:b0:f4:28:e7:0e:7d:d6:b8:78:2f:b8:23:b7:69:c8:00:
e5:53:33:50:af:bd:9c:af:4d:47:e8:f5:5b:87:61:4b:f8:6f:
c8:3c:52:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org