Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/kFysI-0-6cSUwaf9dzgtPJb81Ow.roa
File: kFysI-0-6cSUwaf9dzgtPJb81Ow.roa (raw, json)
Hash identifier: 4zwZ4/BXp1ZtmmRlQEfRVT2tbVIt+LWwlcSrRIbw03I=
Subject key identifier: 90:5C:AC:23:ED:3E:E9:C4:94:C1:A7:FD:77:38:2D:3C:96:FC:D4:EC
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B6BA253
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/kFysI-0-6cSUwaf9dzgtPJb81Ow.roa
Signing time: Wed 15 Jun 2022 15:47:44 +0000
ROA not before: Wed 15 Jun 2022 15:47:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 89.117.80.0/22 maxlen: 24
89.116.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191603283 (0xb6ba253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 15 15:47:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=905cac23ed3ee9c494c1a7fd77382d3c96fcd4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:ce:97:3a:b6:83:45:eb:e8:d2:3e:78:68:
2e:25:7a:5a:84:e0:a0:de:59:62:2c:27:d1:8b:b2:
52:f4:4d:a8:56:06:e4:a0:e5:8d:ac:e0:43:1e:a4:
5d:91:b1:c9:7f:58:4e:e2:8e:92:61:2e:14:ea:cc:
0f:85:d7:d0:b6:a9:4b:50:bc:93:8a:3c:96:6e:53:
20:e3:dd:5d:fb:86:dd:d8:b5:1c:09:e6:24:1a:bf:
ea:dc:b2:de:35:ad:a4:1d:95:fa:51:b4:f9:24:34:
40:ab:e8:4f:ae:2d:d7:b5:a8:7f:97:ae:7e:6e:45:
53:a3:92:15:b6:13:07:7a:14:f0:a8:fa:57:cd:2d:
0c:16:14:d3:19:f0:69:c9:7e:e7:e6:1c:20:ac:5e:
05:f7:9a:d7:26:10:2b:7f:81:d8:98:a6:d4:7a:c4:
83:e0:f7:5c:46:fe:aa:0f:01:2f:a4:12:49:9a:69:
59:f9:fd:ea:2e:fd:52:e1:33:7e:eb:68:6b:de:a2:
f4:3e:75:7e:09:24:1d:f9:b5:1c:7a:1a:06:c1:b5:
a3:5d:d3:e3:3e:42:b9:45:81:b9:78:60:e2:4b:ee:
f9:78:6b:17:c8:0d:ea:a1:fa:f5:20:a6:76:9a:d8:
8e:98:7c:ad:98:c5:f1:a2:64:19:09:3d:c8:86:24:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5C:AC:23:ED:3E:E9:C4:94:C1:A7:FD:77:38:2D:3C:96:FC:D4:EC
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/kFysI-0-6cSUwaf9dzgtPJb81Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.32.0/21
89.117.80.0/22
Signature Algorithm: sha256WithRSAEncryption
21:25:ea:3f:70:d7:3a:b3:60:a9:20:ae:9f:05:e5:a8:fa:15:
19:a9:ba:0a:43:88:c0:76:15:19:bf:b7:b7:ce:a2:a8:1e:78:
b9:94:ee:20:63:41:0c:8d:88:9e:33:52:52:53:f9:ac:e4:c1:
b0:6d:18:d0:c9:73:a6:0d:16:60:dc:18:49:ad:ea:bf:0e:ec:
0e:75:89:21:64:82:a9:da:8a:1e:29:26:ff:8e:3b:34:cc:ec:
a3:48:57:34:2f:82:3e:c7:fc:46:59:b6:78:0c:7a:18:d9:0a:
ae:fe:a7:1d:ae:0c:25:c2:d1:9d:af:b6:39:88:b7:23:b6:8f:
56:3d:9c:c5:c4:e9:20:89:89:97:e9:91:03:29:49:e3:58:71:
70:cc:b9:b2:8d:cb:77:e3:84:58:35:27:3f:15:12:a3:91:8f:
52:05:2f:c3:ca:32:01:64:6b:68:f5:6d:4e:56:ce:7a:b9:0a:
0e:db:3a:36:c7:b6:ae:cf:6e:0a:e6:eb:c0:0b:76:9b:f0:4e:
bd:57:0f:d3:95:41:22:53:34:41:22:46:c7:a1:02:08:46:4f:
2e:9f:9d:ed:6f:91:7e:1f:57:af:9a:d8:8d:da:b9:6c:d7:55:
0b:14:27:2f:e7:7e:e5:13:5f:b4:26:97:05:d5:76:25:d0:b4:
b8:67:64:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org