Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/oeWmYSECALjzyhH3Is3yLU7s0go.roa
File: oeWmYSECALjzyhH3Is3yLU7s0go.roa (raw, json)
Hash identifier: DzUGKn33RdsRIc6zB3fngihWdnrubCL3+QfGH13B3Mc=
Subject key identifier: A1:E5:A6:61:21:02:00:B8:F3:CA:11:F7:22:CD:F2:2D:4E:EC:D2:0A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B571EEA
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/oeWmYSECALjzyhH3Is3yLU7s0go.roa
Signing time: Sat 11 Jun 2022 14:55:02 +0000
ROA not before: Sat 11 Jun 2022 14:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 89.117.130.0/24 maxlen: 24
89.117.245.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190258922 (0xb571eea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 11 14:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1e5a661210200b8f3ca11f722cdf22d4eecd20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:eb:7b:5d:63:15:ff:d0:52:86:87:fb:7c:
99:f1:9d:96:aa:be:8c:50:b3:d4:21:02:43:53:1a:
6c:e5:aa:69:e5:dc:de:ed:01:a5:45:d8:6d:50:8b:
0a:e3:b6:21:1a:35:82:14:ce:01:99:5e:cb:85:3d:
be:6f:a7:56:45:97:ab:7e:f2:dc:c7:37:c4:be:7b:
5e:42:2a:62:79:aa:af:4a:1f:d8:b7:19:f8:f0:8c:
69:74:1b:03:68:f3:17:91:de:fc:9a:2b:31:75:90:
9f:7c:2f:af:94:a9:57:12:74:5b:4a:3b:95:71:f1:
a7:88:b0:5c:c1:db:34:77:5b:7f:80:9e:a9:56:dd:
b6:bc:59:98:2b:a8:ea:84:f3:63:ba:2b:a5:fc:13:
6d:60:b0:1f:4f:1e:d1:24:a3:35:fe:f4:11:0a:d8:
75:2d:d8:56:f6:c4:d0:51:92:64:cd:56:98:7e:c6:
c2:34:8a:41:8d:f5:8a:b0:8b:47:34:31:e7:d6:96:
67:15:7b:c5:21:09:8f:57:e8:db:c2:5d:57:76:e3:
2f:d4:74:36:6a:f2:bb:93:95:6c:46:be:ce:de:a5:
6d:49:ce:44:08:c2:3e:ae:13:27:dd:a6:e1:2b:64:
63:99:95:63:15:a5:b0:1a:d9:12:09:b3:f9:11:25:
01:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E5:A6:61:21:02:00:B8:F3:CA:11:F7:22:CD:F2:2D:4E:EC:D2:0A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/oeWmYSECALjzyhH3Is3yLU7s0go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.203.0/24
89.117.130.0/24
89.117.245.0/24
Signature Algorithm: sha256WithRSAEncryption
86:aa:d2:7c:cf:f8:0e:7a:8f:7f:8d:35:94:ea:a1:50:1d:24:
44:f9:f3:9b:99:7c:00:12:af:af:de:b6:2a:b4:6d:a6:fd:ca:
7b:61:9d:c1:08:0f:b7:5e:ae:be:b0:5b:23:9e:a4:b2:bf:fe:
c6:af:b9:04:e7:90:f7:2a:df:19:ef:34:d4:0a:64:12:8c:b9:
a7:62:82:94:b5:ea:bc:16:06:d8:8d:48:74:2b:e7:7e:e3:5d:
96:0d:af:49:08:7c:43:68:9c:f4:ed:78:5a:3e:bb:03:f8:6e:
44:f7:94:79:dc:d3:ee:ce:3b:5f:bf:e1:9e:3e:6a:5e:3e:f2:
a9:d6:05:71:e9:6d:3a:96:bd:c4:e1:93:a8:1d:7c:9d:4e:33:
aa:e2:2c:92:7c:25:f4:59:8b:ea:5c:8d:8f:2e:54:96:79:36:
86:62:8b:a9:a0:dd:66:06:ee:74:fe:e3:d2:83:5b:32:54:58:
83:2f:8c:8e:95:a2:20:81:d6:52:af:7f:a7:ba:27:c1:c1:4d:
1f:9c:4d:cf:0e:cf:ba:cd:76:c0:f7:28:7c:9b:17:01:c1:bd:
94:aa:19:3c:16:c6:14:c4:72:46:1f:6f:c3:11:f5:55:8e:dc:
99:58:d7:bd:5b:ad:b7:77:d9:2b:a9:2e:62:8c:9e:c8:32:b1:
49:f7:7a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org