Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ip_NwiQQrkaKfRuY2oPw7iNOVYM.roa
File: ip_NwiQQrkaKfRuY2oPw7iNOVYM.roa (raw, json)
Hash identifier: O72SBPXXdxbyP0pwuaynsBpBpSfzUIf+Ys2pzxLIJnE=
Subject key identifier: 8A:9F:CD:C2:24:10:AE:46:8A:7D:1B:98:DA:83:F0:EE:23:4E:55:83
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B449643
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ip_NwiQQrkaKfRuY2oPw7iNOVYM.roa
Signing time: Thu 09 Jun 2022 11:47:03 +0000
ROA not before: Thu 09 Jun 2022 11:47:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 89.117.188.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189044291 (0xb449643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 9 11:47:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a9fcdc22410ae468a7d1b98da83f0ee234e5583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:af:64:70:bf:58:ec:a9:3f:eb:b9:b9:a2:
dc:b6:98:98:61:1c:97:b7:ec:e7:e2:ea:5c:0e:a8:
03:ea:8a:34:41:ff:29:66:9b:10:18:e8:a4:b1:bd:
e3:3f:f4:fb:7a:6e:03:7d:63:77:ce:78:13:42:48:
48:96:16:93:d1:dd:94:e2:e4:7d:d5:a2:9c:df:a8:
3b:8b:da:70:63:3d:ff:d6:a1:d2:fa:26:b4:c7:f3:
7f:e3:e3:c9:e2:bb:17:bf:f1:df:a9:36:65:ec:be:
f7:e0:36:5f:46:6a:8b:ca:e7:b8:c9:99:48:89:fa:
dc:12:20:12:5d:d0:19:ce:77:ab:fc:c7:9c:53:28:
a0:e8:38:03:54:74:71:f1:49:ff:b3:34:54:18:4e:
8f:56:5e:ef:84:87:f4:60:33:68:08:0f:4b:2c:30:
d0:bc:86:b3:0e:d2:ae:ab:6c:39:e2:0f:8f:04:9c:
c8:4c:ac:af:d8:5a:b6:d0:eb:1c:38:f7:35:b0:88:
0c:ca:50:43:ff:fa:d1:7c:23:b8:db:12:2b:7a:6b:
c7:a6:e7:9b:7e:da:28:3c:fd:e1:d5:b2:fa:d2:01:
5e:11:64:cb:5f:21:f8:24:f7:df:e7:6c:52:74:29:
57:7c:52:a4:8c:b2:04:22:7b:67:a4:3f:bb:f5:a9:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9F:CD:C2:24:10:AE:46:8A:7D:1B:98:DA:83:F0:EE:23:4E:55:83
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/ip_NwiQQrkaKfRuY2oPw7iNOVYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.128.0/24
89.117.139.0/24
89.117.188.0/24
Signature Algorithm: sha256WithRSAEncryption
92:cf:33:61:c2:59:81:3f:2d:3c:45:50:af:f1:34:a5:16:7c:
3e:b4:84:f4:a9:9b:7f:4d:68:3e:f4:54:3d:94:b0:c1:1f:4f:
9a:1c:4a:32:54:64:35:44:30:3a:11:a4:71:1a:49:6b:b0:fc:
07:b8:3c:f5:65:64:fe:a6:80:30:27:9f:47:5c:b9:8e:b0:73:
40:91:7d:dd:72:fe:03:02:4a:85:ad:a3:68:fc:5d:7b:42:2a:
8b:82:79:49:e5:d6:24:f2:b3:5c:db:b2:58:3d:54:ec:c1:ea:
d6:4b:2c:84:6b:62:7b:e5:f1:9e:cc:43:37:25:51:b3:ed:88:
6d:cb:46:fe:59:b4:a9:d5:e4:51:83:91:1e:3d:3e:18:81:83:
93:37:f4:18:81:33:bb:33:79:39:fe:1b:39:2e:eb:4f:e5:bd:
46:8f:c2:59:cf:e1:3c:19:46:67:63:79:07:36:2a:d1:d6:0d:
17:f5:71:9b:a2:9e:25:98:7f:52:82:f4:25:c4:64:d5:43:fb:
40:fa:ec:a1:e1:4e:ce:f2:2a:a2:ba:8a:fb:c6:3a:ba:4b:37:
12:2f:f5:37:35:a5:cb:96:ff:f9:82:cf:3e:fb:f2:08:72:23:
94:3a:70:23:c7:62:8b:a4:10:dc:e9:cf:e0:3d:91:97:f7:22:
5e:a2:fe:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org