Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/etK5x_zymajSuNQ1F0XxHPHSYhE.roa
File: etK5x_zymajSuNQ1F0XxHPHSYhE.roa (raw, json)
Hash identifier: +cFRDJfO/maZNJn9N7D8Ia7lfijzeYjvMJyajF/ty0c=
Subject key identifier: 7A:D2:B9:C7:FC:F2:99:A8:D2:B8:D4:35:17:45:F1:1C:F1:D2:62:11
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01841AB099F9D7AC95A8455F42481366BA45
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/etK5x_zymajSuNQ1F0XxHPHSYhE.roa
Signing time: Thu 27 Oct 2022 18:24:52 +0000
ROA not before: Thu 27 Oct 2022 18:24:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 89.117.164.0/24 maxlen: 24
89.116.209.0/24 maxlen: 24
89.116.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:b0:99:f9:d7:ac:95:a8:45:5f:42:48:13:66:ba:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 27 18:24:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ad2b9c7fcf299a8d2b8d4351745f11cf1d26211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:f5:d8:85:8d:74:c4:7f:62:af:6f:fd:02:
aa:d6:36:63:81:75:fd:b0:8c:7f:29:0d:91:e7:65:
c5:42:5a:3b:ee:81:e6:db:cc:48:9e:09:5d:6f:dd:
a8:b9:54:1e:0c:d9:af:8b:d0:32:52:c5:51:9e:ac:
6d:ff:0c:1e:ed:96:d4:da:97:fd:1c:74:9a:cb:fc:
0a:28:df:a2:96:d2:c5:90:66:33:14:89:cb:a0:f9:
df:f3:0a:5d:e3:d9:17:50:43:9e:38:94:ed:9d:c9:
6f:bf:9a:58:6d:af:77:ad:b0:58:b9:b6:71:96:1f:
5b:00:b0:58:6b:29:30:9d:5d:0a:a8:ef:5c:b6:fc:
ad:3a:5a:fb:a5:90:41:65:47:f7:f6:66:a8:a0:f6:
fd:14:02:3b:ed:c1:ba:1e:81:38:aa:e6:bd:4c:da:
bd:c7:4e:82:22:49:f8:59:56:9a:f0:67:81:bb:82:
0e:00:63:cf:8a:5c:03:49:81:dc:57:43:a2:9f:42:
a0:49:6a:b7:ba:7c:b2:3b:86:ad:ef:3e:49:0d:5f:
57:93:c7:fb:31:32:9b:e1:80:8d:da:91:01:22:78:
1c:7c:6e:3b:a2:58:86:b8:69:20:b7:2b:14:83:cc:
37:6c:d6:51:ee:f5:03:8a:6a:d4:6f:e8:a4:66:d5:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D2:B9:C7:FC:F2:99:A8:D2:B8:D4:35:17:45:F1:1C:F1:D2:62:11
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/etK5x_zymajSuNQ1F0XxHPHSYhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.103.0/24
89.116.209.0/24
89.117.164.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1d:3d:08:a4:59:07:95:a6:d4:a6:ea:48:ea:ff:6b:c3:a6:
4e:3d:55:a4:ef:d9:34:ee:51:5e:46:bb:28:bf:55:6e:38:58:
8e:4e:57:bb:fa:5e:81:29:86:b1:9f:2a:ba:ec:8e:75:a1:4e:
e6:ee:5f:49:25:33:b6:40:25:ea:42:94:2b:af:a5:5c:6b:db:
dc:67:c3:9f:53:2d:4f:64:a3:4e:af:32:52:fb:01:57:68:c6:
66:bc:5e:7b:5d:f5:c8:9d:53:1e:db:5f:83:9f:6a:36:6d:fd:
29:44:ce:1a:a0:a0:96:70:ed:62:76:4a:16:07:60:16:15:28:
95:66:48:b4:0c:24:92:5b:78:be:ec:a0:99:a1:18:5e:7b:ba:
f3:57:9e:f9:7d:ff:ab:7a:bf:2f:0a:84:60:a0:8f:98:71:09:
bc:f4:cc:b9:3e:2b:8a:3c:12:00:4c:f8:1c:0c:ee:35:ed:10:
63:80:1c:3a:5d:aa:5c:31:a4:6e:22:a1:95:d0:09:96:81:34:
55:f8:b2:07:14:5f:f3:d6:e8:29:38:db:a6:10:a2:29:4d:38:
8d:61:fa:5c:d7:61:48:2d:8b:07:59:e1:09:65:8e:5a:e0:5a:
90:94:50:9f:eb:8c:63:2a:98:07:c1:53:31:0a:0b:1e:9a:10:
3a:5a:cd:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org