Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/glyepGlPtoR28F9ldyYLmeNfaHQ.roa
File: glyepGlPtoR28F9ldyYLmeNfaHQ.roa (raw, json)
Hash identifier: 4Hnt4jfbmC342TWfCgjd9WoKmIfIHsdv7DRRqsHVwaA=
Subject key identifier: 82:5C:9E:A4:69:4F:B6:84:76:F0:5F:65:77:26:0B:99:E3:5F:68:74
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09F4BB97
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/glyepGlPtoR28F9ldyYLmeNfaHQ.roa
Signing time: Thu 17 Mar 2022 08:14:03 +0000
ROA not before: Thu 17 Mar 2022 08:14:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 89.116.123.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.126.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167033751 (0x9f4bb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Mar 17 08:14:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=825c9ea4694fb68476f05f6577260b99e35f6874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:df:55:2e:ac:dc:ed:87:7c:fb:63:82:0a:56:
98:91:0e:de:1d:97:9c:fd:7d:91:fe:a5:47:e1:bb:
20:18:30:50:0c:f2:d3:6d:bb:e0:ec:9a:76:c8:51:
d6:bc:2b:bb:fd:e6:60:20:ea:5b:a6:0f:cb:a2:50:
27:58:1a:78:b8:02:b4:f5:4c:52:a2:42:02:25:38:
32:46:ee:6b:ec:0f:1f:b9:d4:24:b2:f4:a3:40:bc:
0f:32:bf:b1:fa:43:30:1c:57:be:f4:72:40:c7:9d:
07:09:30:30:f7:88:ae:52:b0:7f:86:19:28:70:73:
ce:d8:6d:63:16:ec:b9:1a:0b:83:99:c9:1e:17:82:
74:ef:de:d4:c9:2c:50:73:f7:ae:ec:b3:6d:3b:61:
6e:1b:c9:8e:b0:56:87:fd:33:58:44:65:2f:a2:0e:
8e:94:91:1b:0e:5b:07:bb:b3:2d:ac:93:2b:f1:7b:
07:ff:40:4a:a4:88:2a:38:26:a0:dd:68:a5:69:3b:
80:5e:00:4e:0f:06:01:fc:04:1f:13:7f:81:98:01:
d8:77:98:31:81:4b:34:16:7e:06:ad:0a:38:e6:08:
10:f8:dd:7c:36:93:a4:a9:3a:28:c4:aa:b5:6a:2b:
4e:00:41:37:63:c4:79:90:35:08:c9:d1:60:15:bd:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5C:9E:A4:69:4F:B6:84:76:F0:5F:65:77:26:0B:99:E3:5F:68:74
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/glyepGlPtoR28F9ldyYLmeNfaHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.123.0/24
89.116.203.0/24
89.117.126.0/24
89.117.130.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:66:19:73:63:9e:9f:52:4a:68:c2:f1:94:99:95:6d:59:b2:
22:11:68:00:46:12:68:42:78:62:79:62:72:66:1e:3d:87:3f:
63:03:33:2b:b3:aa:37:87:0e:0f:03:fa:e4:ee:1f:e5:2d:b7:
22:5c:09:60:c2:8c:a0:a2:5c:04:62:f6:ef:27:cd:9f:67:db:
19:26:27:d0:9d:be:5f:57:1b:ce:c5:0e:b2:e9:4e:22:34:09:
2d:95:3d:4f:8a:27:6e:67:b9:58:5b:67:ad:26:4b:c8:07:20:
b8:b1:10:c8:19:98:82:72:9f:1c:48:49:d0:60:d4:09:5e:fe:
77:28:37:79:61:9f:66:c0:a3:cb:a4:81:91:f8:91:6e:9f:9f:
da:af:d1:da:05:0d:3e:d2:3b:5d:49:d8:51:9c:a5:39:83:fb:
96:92:e7:f8:3f:03:fa:93:83:35:f4:f4:34:ec:2b:c0:df:c3:
ec:1b:81:c8:97:c0:84:3b:5f:f8:57:46:13:d9:55:7b:dd:e1:
86:95:7f:0d:29:af:24:f3:be:33:c5:44:f4:6e:77:8a:0b:15:
bf:61:87:54:f6:dc:e3:be:d5:de:d6:25:4b:1c:f0:22:9f:84:
a2:5a:e3:9a:10:74:d0:14:56:e8:ce:29:eb:12:f4:ea:9a:d5:
bf:fd:f1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org