Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/kvVWfEI1lTXB0FgsFshjcBIO5uQ.roa
File: kvVWfEI1lTXB0FgsFshjcBIO5uQ.roa (raw, json)
Hash identifier: q1PIquGITBwdcPkK9YF8d0gK4sVt0c0UllYutrYMu44=
Subject key identifier: 92:F5:56:7C:42:35:95:35:C1:D0:58:2C:16:C8:63:70:12:0E:E6:E4
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B46A769
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/kvVWfEI1lTXB0FgsFshjcBIO5uQ.roa
Signing time: Thu 09 Jun 2022 18:34:02 +0000
ROA not before: Thu 09 Jun 2022 18:34:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 89.117.104.0/22 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189179753 (0xb46a769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 9 18:34:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92f5567c42359535c1d0582c16c86370120ee6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:b8:4b:d6:15:1a:f2:97:d4:b4:12:01:c2:
bf:d3:1d:77:00:5f:c8:ec:8c:f6:be:eb:6d:08:5d:
e5:5e:ff:a8:05:3f:62:df:00:a0:e1:e1:b9:b9:a7:
71:6b:f3:b7:b0:16:b3:99:ce:38:c7:e5:2f:78:42:
92:dc:9b:66:bd:00:5f:46:9d:a2:df:ec:31:b5:bb:
67:ee:37:06:7c:be:c0:ec:dd:e4:e7:d2:0f:0b:30:
21:6e:6b:2f:53:67:9a:b4:fc:64:df:b5:96:65:09:
16:d9:6f:31:43:8c:6a:c6:90:75:e1:7e:dc:e7:30:
0a:e0:4a:24:f4:3a:11:99:70:21:3d:b7:1d:c1:6f:
75:cd:fe:6d:9f:cf:51:a4:1d:19:c1:18:1c:82:29:
bd:64:c6:32:96:41:30:8e:fe:99:bf:be:61:a9:a4:
cd:02:b5:a5:b4:30:88:c7:8d:c3:95:8c:e5:f4:de:
04:ed:d9:a1:e6:b0:ae:61:99:b1:2b:84:0e:04:44:
02:f4:b9:25:02:ce:bc:d5:10:f6:1b:70:07:d6:33:
b4:f5:14:0e:af:9b:08:49:22:72:38:4e:22:3a:4c:
fd:9c:b7:11:6a:ef:e3:d5:1a:4c:95:84:86:d7:b0:
e4:a7:a3:67:ca:03:1f:02:78:a4:48:21:9d:4a:47:
5f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F5:56:7C:42:35:95:35:C1:D0:58:2C:16:C8:63:70:12:0E:E6:E4
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/kvVWfEI1lTXB0FgsFshjcBIO5uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.104.0/22
89.117.132.0/22
89.117.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:7a:ac:ab:d5:99:d9:d9:10:7d:df:6e:af:74:0c:17:03:07:
96:8c:ac:ba:4d:f8:77:c4:ad:90:7d:d4:eb:db:a1:40:b5:80:
83:cf:34:81:ef:27:0a:af:c6:c7:f1:ab:a0:1f:3a:e3:d0:a6:
da:73:0b:c5:88:2a:7e:64:d6:8e:2f:1e:58:33:2f:a1:d1:85:
97:d9:66:34:42:12:b0:f1:8f:a8:6b:ea:60:8f:25:82:39:7d:
7f:ba:aa:cd:46:53:6f:6d:0e:14:86:29:da:0c:aa:13:5a:be:
fe:af:aa:cc:32:1f:df:f8:c1:a8:0a:a3:e6:a2:4b:4d:6a:c9:
7d:dd:84:d0:33:c4:4c:32:80:4b:ad:d5:67:24:08:9b:60:4f:
2a:a4:f9:91:55:37:e9:14:92:62:e0:e5:20:b5:e2:61:dc:26:
73:26:b9:f4:08:ab:2a:45:91:c5:45:85:1c:c8:0c:5c:a5:f1:
7b:97:b7:20:5f:c7:00:9f:ad:5d:0e:5e:1e:63:94:bb:db:c3:
af:18:37:f4:d7:6c:1c:7d:34:bd:6f:74:a8:28:e1:10:ee:a4:
02:8f:af:ca:b1:5b:f0:94:e7:c5:8b:5b:a0:0a:9f:e5:4c:2c:
ba:e6:54:eb:f1:99:89:98:20:0e:0a:93:e5:1c:fb:49:48:3b:
2b:ad:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:11:20 2025 by rpki-client