Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/i5F9apeotvnzdrRllG0J9chDNsI.roa
File: i5F9apeotvnzdrRllG0J9chDNsI.roa (raw, json)
Hash identifier: VDbuWn6jTQznMe3UNehacCQdkOeW1l0E4vtZ2HehRb4=
Subject key identifier: 8B:91:7D:6A:97:A8:B6:F9:F3:76:B4:65:94:6D:09:F5:C8:43:36:C2
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01840B68078CDB7968BC06F9D8A7A55852F6
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/i5F9apeotvnzdrRllG0J9chDNsI.roa
Signing time: Mon 24 Oct 2022 19:11:17 +0000
ROA not before: Mon 24 Oct 2022 19:11:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142617
IP address blocks: 89.116.248.0/24 maxlen: 24
89.117.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:68:07:8c:db:79:68:bc:06:f9:d8:a7:a5:58:52:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 24 19:11:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b917d6a97a8b6f9f376b465946d09f5c84336c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:bb:52:70:42:29:b7:ad:49:fb:75:9e:fa:
e7:93:0a:8b:07:8e:20:64:ba:70:53:83:57:f8:f0:
95:9c:d9:d0:7d:73:48:e6:bc:cb:76:f3:62:34:ab:
d2:a7:78:c1:d5:ab:ec:ff:f3:b3:51:79:ff:06:0f:
9d:96:03:ab:86:0d:95:29:1f:4a:b6:3e:44:b7:04:
db:16:ba:3a:b0:c4:94:5f:5d:ef:a5:fa:2b:75:e9:
30:a3:14:4d:98:a6:f8:40:df:4c:41:6f:c0:01:4a:
78:fa:c6:7d:55:8c:61:e6:c6:09:15:d4:ad:5f:1a:
36:b9:d0:b7:62:d0:4f:4e:4f:81:e6:55:1a:19:26:
20:51:2b:77:06:82:94:29:51:9a:f5:f0:17:18:87:
43:a7:67:ca:4a:ad:c9:c3:ba:09:74:ec:43:01:97:
dc:34:76:f4:96:c6:72:0f:f5:d7:eb:df:da:0a:bb:
63:2b:9e:36:a6:dd:63:dc:b8:c4:db:df:88:51:c6:
8e:0b:ff:4b:5c:80:87:9d:3e:b9:ab:5b:a3:82:81:
5e:8a:3b:c5:df:20:72:5c:3e:4a:d5:6f:28:26:ae:
2a:87:03:dd:c9:35:e5:e8:06:9c:c4:01:82:6b:0f:
3e:04:c3:c4:ef:ff:c1:eb:5d:f3:5a:c1:e9:39:46:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:91:7D:6A:97:A8:B6:F9:F3:76:B4:65:94:6D:09:F5:C8:43:36:C2
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/i5F9apeotvnzdrRllG0J9chDNsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.248.0/24
89.117.144.0/21
Signature Algorithm: sha256WithRSAEncryption
05:94:34:1f:e1:83:d8:b3:9e:31:d8:f3:d7:46:af:16:3f:cd:
f7:2d:9e:23:7b:dc:71:93:f9:6f:e5:dd:07:e9:08:f0:52:0c:
a3:62:22:5d:6d:23:6b:f4:cf:ff:6b:eb:3e:62:55:32:9e:5d:
9c:0c:41:2e:09:de:f8:4a:6e:80:01:9d:34:03:ae:65:38:d5:
03:f1:1b:c1:e4:b5:0a:cd:2f:db:f2:49:88:c0:18:3d:df:ec:
f5:c6:ac:f0:c8:1e:14:52:46:b3:60:4b:8a:3c:e1:8f:ff:0f:
1d:f1:d6:6f:4c:39:5d:3d:3a:3d:94:f7:39:94:1b:1b:4b:40:
89:6e:bb:6b:8f:ba:13:50:6f:48:49:4f:71:49:ca:de:68:c5:
46:86:a0:87:22:9c:0a:37:ed:11:35:be:4f:ad:95:cb:08:25:
f5:2c:1c:20:cc:15:57:f9:12:a4:f3:bc:f4:20:b0:49:60:9d:
49:bc:7a:6f:83:19:53:d9:0c:1f:ce:fb:ba:74:c3:22:78:30:
82:74:18:46:08:f8:18:e5:ce:ac:a1:43:2a:b7:0d:59:dd:7d:
84:e5:9c:a4:ae:db:94:61:ab:13:d9:e8:c4:42:57:02:f6:9f:
e0:91:a2:26:98:1b:96:41:02:87:b2:65:cd:6b:5b:9b:78:04:
59:bb:8d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org