Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/mvsunAaiLY8IKF7JHxY3IMB1SpQ.roa
File: mvsunAaiLY8IKF7JHxY3IMB1SpQ.roa (raw, json)
Hash identifier: OYR5AYn9iVWCuuziNOFoXSNmykb3f9PEw/OM6lkrR7g=
Subject key identifier: 9A:FB:2E:9C:06:A2:2D:8F:08:28:5E:C9:1F:16:37:20:C0:75:4A:94
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182D8FEC22763F91F50AA4DD83282BBA2C3
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/mvsunAaiLY8IKF7JHxY3IMB1SpQ.roa
Signing time: Fri 26 Aug 2022 07:12:30 +0000
ROA not before: Fri 26 Aug 2022 07:12:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 89.116.172.0/23 maxlen: 24
89.116.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d8:fe:c2:27:63:f9:1f:50:aa:4d:d8:32:82:bb:a2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 26 07:12:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9afb2e9c06a22d8f08285ec91f163720c0754a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:07:b0:23:e5:e4:6c:3d:c0:ee:77:40:a6:12:
3c:49:72:7a:24:81:56:7d:19:70:3f:ee:52:d8:ea:
c2:01:71:53:f8:c0:cf:76:06:bd:e4:fc:8f:7b:ed:
50:50:34:92:4e:10:77:31:b8:4d:42:8a:22:4c:1d:
f0:1c:51:88:a5:b7:42:ec:d2:c0:68:be:65:57:8f:
c7:a0:f4:0b:28:4c:01:92:fd:47:35:1b:41:7b:cf:
d4:a6:a6:b0:ed:07:21:f6:fd:c5:e4:e2:f6:00:d3:
8d:e1:a8:f6:01:0a:db:0a:4e:d1:fb:3e:82:89:28:
22:52:6a:2a:e6:a7:ba:8a:ab:44:0d:84:a3:1a:a6:
99:74:ed:8f:68:bb:2c:fa:e5:09:d4:2e:1b:94:87:
af:f9:4c:f4:be:bd:35:dc:ac:1f:fd:92:ef:f3:57:
f6:7d:3b:f2:eb:1c:d1:d9:bf:c0:8f:6f:cc:cc:78:
1b:ba:0d:02:ac:d3:82:6a:92:00:8d:a4:e2:70:77:
88:dd:14:5e:71:9d:8f:13:a1:d0:15:1a:f0:5e:b3:
b6:17:1c:1f:fc:88:31:a6:85:59:85:61:36:f2:b9:
68:b9:7a:ae:0c:d0:5a:64:2e:46:97:54:9b:b2:10:
1b:0d:9a:9e:7e:eb:0a:9a:98:62:55:f6:d0:4a:8b:
e1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:2E:9C:06:A2:2D:8F:08:28:5E:C9:1F:16:37:20:C0:75:4A:94
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/mvsunAaiLY8IKF7JHxY3IMB1SpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.172.0/23
89.116.200.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:c5:95:ea:17:02:f0:ea:f5:38:40:e0:b8:1f:28:28:7a:ae:
e9:7e:7f:a5:c4:e9:5f:b9:c0:da:75:25:77:67:6d:55:b5:c7:
30:89:28:70:d2:d1:86:5c:14:d8:dd:39:c5:0f:66:c6:e9:cf:
6c:ec:92:5f:ee:cd:a4:8f:b8:b8:50:c1:91:a6:e8:27:0a:94:
ce:8f:cc:1e:f9:7f:30:9d:36:0b:cd:ad:7d:d6:1c:c1:46:61:
8a:d4:4d:79:d3:9b:58:5a:48:2a:92:9a:e7:ef:50:ba:07:a2:
71:fc:67:1e:5c:34:57:bc:d6:53:80:71:ea:d5:e7:14:c6:76:
be:ec:6b:b6:25:b8:2f:74:77:98:d2:38:51:14:bc:3e:ed:3f:
56:ad:f8:f0:09:a2:1a:d2:17:02:c0:8b:13:fd:63:8f:88:47:
d9:55:5b:1c:67:7e:6e:45:65:3f:12:f0:43:ca:43:28:21:76:
86:28:7b:eb:31:87:4c:40:bc:f8:10:e0:5c:68:65:a9:82:e4:
cf:ce:dc:3d:52:cd:0c:36:75:82:e9:78:1c:ab:3f:cd:a5:20:
f1:19:65:b0:73:d5:6d:82:4d:52:ca:7a:85:90:09:71:4b:71:
34:8b:84:be:0c:99:6f:63:dc:4d:d2:43:67:76:07:0e:a5:42:
f1:df:99:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org