Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/nlx3nuLj1wGclqcazJlopVk9UkQ.roa
File: nlx3nuLj1wGclqcazJlopVk9UkQ.roa (raw, json)
Hash identifier: jawRYALhl0yng0e5HQQD0rUZu1IDRoLiV5d0xI1fWRc=
Subject key identifier: 9E:5C:77:9E:E2:E3:D7:01:9C:96:A7:1A:CC:99:68:A5:59:3D:52:44
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01839E1DFCAA9AACE46D9908B3499DC12F32
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/nlx3nuLj1wGclqcazJlopVk9UkQ.roa
Signing time: Mon 03 Oct 2022 13:51:48 +0000
ROA not before: Mon 03 Oct 2022 13:51:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 89.116.179.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:1d:fc:aa:9a:ac:e4:6d:99:08:b3:49:9d:c1:2f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 3 13:51:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e5c779ee2e3d7019c96a71acc9968a5593d5244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:31:25:3e:e6:9f:b6:92:7a:1c:23:19:62:
eb:b4:81:34:46:ac:35:68:d8:1e:f7:f2:9f:f7:45:
91:a4:cf:d5:5b:6d:08:a8:96:65:09:40:5e:56:38:
4f:ca:45:b9:f1:c3:69:f1:97:47:94:96:43:c7:af:
fa:0f:6c:22:52:26:c5:b0:00:cb:15:f4:ea:45:d5:
ba:e2:71:74:80:c0:e7:a4:f2:d9:cf:0f:5f:db:0d:
4f:5b:94:c8:41:ed:3b:28:a6:a0:c7:ab:7f:b9:61:
17:b6:b0:f3:70:c7:fd:d5:d1:33:98:e5:83:ee:fb:
74:de:44:b6:99:4e:b0:b9:ab:9e:c4:a7:03:66:55:
b2:1d:e1:03:74:b7:e6:95:a7:d8:1f:8c:3a:9b:35:
64:dd:bf:43:95:8a:fd:20:06:af:4c:16:52:c3:58:
73:02:45:a5:57:57:75:80:52:33:a0:c9:62:bb:2d:
0b:a3:26:f1:2e:d9:ba:14:4f:d2:13:c0:51:e5:55:
bf:fc:10:c6:dc:67:a2:80:c3:3c:1a:75:0e:c6:45:
b2:94:27:1f:b7:21:b3:6d:c8:ea:35:2c:81:e8:b1:
d8:13:69:d4:7b:07:16:6e:ba:7f:a4:ee:73:62:c2:
bd:b5:d9:27:c6:19:85:58:e3:60:c4:7a:84:16:fc:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5C:77:9E:E2:E3:D7:01:9C:96:A7:1A:CC:99:68:A5:59:3D:52:44
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/nlx3nuLj1wGclqcazJlopVk9UkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.238.0/24
89.116.179.0/24
Signature Algorithm: sha256WithRSAEncryption
30:4c:90:73:45:0c:8b:f0:1e:49:4e:5f:62:7d:d9:f3:03:11:
1f:54:f2:d2:11:9d:56:d6:ea:7e:60:8a:ba:bd:ed:52:60:93:
1f:8c:49:a3:cd:f2:f0:09:61:74:28:fa:29:0a:04:5b:03:c7:
9b:77:b0:79:01:41:af:b3:af:ac:d6:09:ce:3a:f2:7b:7b:2d:
33:91:f7:6b:be:bd:8c:85:6b:e6:aa:0b:f3:1d:21:42:b3:0f:
35:65:b4:68:5e:66:33:16:e1:d4:a5:11:34:88:ed:f1:69:14:
98:c5:1d:b8:9e:ca:c5:ea:df:27:6d:c5:56:94:2d:36:c9:e1:
c8:1c:cf:37:98:f7:6a:26:e1:d7:92:82:40:3a:28:59:93:fc:
29:54:ab:38:24:d1:13:dd:52:28:20:06:cf:94:77:e9:05:40:
d2:6d:d4:07:ba:41:b8:04:e0:ba:37:6a:20:7a:d9:30:1c:f7:
e3:5d:72:d1:bd:30:6e:1e:4f:55:01:31:99:95:3e:cd:a8:d2:
49:58:f6:00:36:6b:8c:98:8f:ac:13:ee:26:bc:b8:a7:5c:00:
a4:dd:81:89:c9:ae:9f:8d:d0:f4:5a:40:cb:ec:4f:14:f4:de:
54:4a:e8:37:f0:56:0f:b5:09:10:2a:7a:dc:95:ec:26:43:c3:
a4:92:75:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org