Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/lnr6mS5rdaHfrzM4AcyUI4amuu8.roa
File: lnr6mS5rdaHfrzM4AcyUI4amuu8.roa (raw, json)
Hash identifier: NFegtmj8pRUi4RmvSGME6ykb3JYRzWewfqVofVE6t10=
Subject key identifier: 96:7A:FA:99:2E:6B:75:A1:DF:AF:33:38:01:CC:94:23:86:A6:BA:EF
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AF84414
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/lnr6mS5rdaHfrzM4AcyUI4amuu8.roa
Signing time: Sun 22 May 2022 15:27:29 +0000
ROA not before: Sun 22 May 2022 15:27:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 89.116.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184042516 (0xaf84414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 22 15:27:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=967afa992e6b75a1dfaf333801cc942386a6baef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ed:eb:7b:78:1a:88:bc:d5:4b:c5:56:1a:a6:
1c:ca:d0:e8:31:db:a1:07:fd:07:4e:b2:6c:ae:3b:
b9:d3:25:a4:0c:0f:27:c0:30:99:b4:6a:c9:48:e7:
03:76:85:17:db:a1:63:f9:4f:32:be:04:87:e2:02:
d4:61:1a:2c:e5:61:8b:c2:93:51:16:0b:02:0e:e3:
3c:b3:5c:c1:a9:d2:26:90:e3:b2:64:94:e4:dc:5d:
ac:45:40:c6:7c:c5:94:47:b0:c8:af:8c:13:16:d1:
8a:65:3e:56:7d:26:53:8f:d5:fc:1b:25:a6:69:53:
96:9d:eb:7e:92:9d:89:3f:a8:fb:c5:eb:77:6e:3d:
20:0e:d4:22:bc:1b:a7:d5:ee:4b:08:20:79:ed:3e:
20:6c:79:88:9f:c9:4e:b5:f1:d8:c8:52:2a:46:28:
88:ff:45:b6:1d:cc:09:4d:b0:19:1a:20:ba:8a:de:
e9:30:69:40:a5:b7:2f:d4:88:eb:db:f7:33:18:a4:
cd:38:82:d1:46:89:3f:67:9e:00:bf:8c:a2:8b:f9:
54:04:34:eb:3c:60:83:33:2d:98:6a:55:68:a7:08:
d4:0d:3f:fe:4a:09:a7:8a:50:b0:b8:c2:0c:4f:1b:
3f:16:dc:01:1d:2e:67:af:c8:28:4a:45:ea:f3:ab:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:7A:FA:99:2E:6B:75:A1:DF:AF:33:38:01:CC:94:23:86:A6:BA:EF
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/lnr6mS5rdaHfrzM4AcyUI4amuu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.48.0/22
Signature Algorithm: sha256WithRSAEncryption
01:76:42:ab:f7:23:ab:d2:69:be:92:c9:42:2e:31:d9:89:fc:
7b:c0:fa:c9:09:e3:63:72:9f:b3:cc:8e:0d:4f:c4:f3:a5:d2:
8d:47:f9:fe:a5:9b:dc:bc:29:91:dc:49:0f:82:2e:ab:32:1d:
69:bf:56:b0:6c:92:a1:ef:38:1f:7f:e2:94:4a:d5:77:1b:4d:
85:15:ff:bd:be:6a:93:6d:8b:cc:4f:a4:a7:f5:e4:68:86:54:
5d:7e:34:20:cf:34:76:34:14:5b:ef:06:85:bc:f4:99:08:d7:
f9:94:95:16:2c:b0:c0:68:08:1f:e9:b3:d1:de:97:d4:c3:73:
a0:cb:fb:91:97:66:2b:85:93:88:15:60:da:e3:5b:71:63:78:
4b:a8:78:aa:5b:8e:0f:32:e7:5c:d5:f4:05:4f:fb:86:d3:09:
a8:3c:fd:e3:a9:9a:73:a9:a1:44:f4:da:27:dd:b5:0b:4e:b7:
6e:dd:2f:49:cc:12:1b:d7:80:f0:00:21:6c:a8:3c:d3:ac:c3:
e9:3a:44:6a:76:f5:2c:05:c8:c8:1a:dc:92:23:b4:bc:00:84:
90:8f:9f:a2:fe:62:40:96:0a:d6:0e:a3:07:94:cf:fa:7c:9a:
81:98:6a:15:35:b8:83:78:3c:e1:c8:5d:14:59:b6:5c:1a:01:
f6:3e:51:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:09 2025 by rpki-client