Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/f5lorOWcIDTirH4mQKnQ_z_0OTg.roa
File: f5lorOWcIDTirH4mQKnQ_z_0OTg.roa (raw, json)
Hash identifier: Yyq0omrVpC3xW6Owik3lzuRgxqWaUTGYt6vgE3eLQt0=
Subject key identifier: 7F:99:68:AC:E5:9C:20:34:E2:AC:7E:26:40:A9:D0:FF:3F:F4:39:38
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09BDA04C
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/f5lorOWcIDTirH4mQKnQ_z_0OTg.roa
Signing time: Wed 23 Feb 2022 22:00:59 +0000
ROA not before: Wed 23 Feb 2022 22:00:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207795
IP address blocks: 89.116.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163422284 (0x9bda04c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 23 22:00:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f9968ace59c2034e2ac7e2640a9d0ff3ff43938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:c3:0b:c7:62:dd:89:c2:23:a5:73:c3:2f:
3e:a6:b4:70:fe:70:fd:e3:dd:62:d4:46:76:49:64:
e9:85:71:c8:e6:b2:8d:e8:aa:db:72:71:6e:c6:97:
5e:4d:0e:1a:d9:34:12:bb:ef:f2:06:70:d2:c0:49:
ed:63:d5:80:6f:2c:1f:68:49:85:59:a8:93:00:55:
b3:be:f6:6c:9e:d0:02:28:29:d7:6a:aa:1c:2d:23:
42:ed:64:87:f3:0f:ea:8c:aa:bb:76:6d:27:f4:ff:
18:18:49:8e:08:70:04:16:a3:de:73:8b:93:4e:f4:
9d:d7:3d:e5:77:2d:6a:c0:50:da:e0:45:f6:40:d0:
6a:46:5f:0f:fa:b8:e9:77:39:4e:32:32:e9:69:0b:
af:38:95:68:09:32:c1:45:b9:7f:e8:2e:a0:7a:26:
68:ff:21:9d:31:bb:1f:9d:e7:d2:7c:9d:86:36:46:
92:34:d1:dc:96:1c:27:72:d9:67:fe:f6:7a:18:7f:
46:c9:45:ae:dd:17:53:37:13:3d:d6:18:2c:00:65:
7f:fd:b6:b1:fd:b3:ed:0c:1c:c7:29:d9:f7:58:3e:
bf:6d:55:23:28:eb:0d:1f:ce:89:23:97:dc:63:f2:
2f:bc:13:a8:3b:2b:95:31:8f:8a:19:2f:1b:67:e3:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:99:68:AC:E5:9C:20:34:E2:AC:7E:26:40:A9:D0:FF:3F:F4:39:38
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/f5lorOWcIDTirH4mQKnQ_z_0OTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.180.0/22
Signature Algorithm: sha256WithRSAEncryption
af:91:23:08:f1:a9:8f:d3:81:16:7e:22:62:8d:8e:8d:65:05:
ad:97:51:e0:00:46:36:64:56:f7:42:c6:5f:35:25:be:c1:c5:
96:06:22:5b:86:4c:98:06:16:46:f6:d1:94:18:2c:e7:4d:a9:
2b:4c:e8:da:ca:67:e9:5a:2d:e0:ae:32:1a:79:04:f3:49:89:
e7:6b:28:70:22:c0:87:8c:50:6c:66:32:9b:d6:ba:bb:53:fd:
76:a9:d9:c8:2e:a2:b2:9f:4a:1a:20:b0:ab:30:7e:10:e8:6e:
4e:e6:ad:62:dd:c5:86:81:1e:7c:c1:57:21:52:3f:1b:80:a9:
75:48:c0:fe:76:3d:a6:80:de:3a:9c:a2:c8:2d:cb:28:4d:63:
3f:de:db:88:a5:20:62:89:06:50:50:ac:16:3d:68:20:79:9f:
09:6f:71:a8:60:f9:a0:b3:a1:ea:f4:42:7e:d1:41:de:62:cb:
31:bd:65:05:57:4d:f8:ba:63:52:a3:9e:95:f5:0f:d7:55:91:
17:57:ac:1d:b9:14:a7:dc:7c:89:91:6b:5c:6f:83:c2:19:08:
c5:a9:a6:fe:32:6e:8a:3f:4f:4d:05:9d:6b:f8:a8:21:ae:7a:
0c:63:86:3a:fa:6b:37:c5:f3:7e:b6:00:04:a6:99:6e:8e:28:
15:3f:36:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org