Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/oqEFVePXwBTj4Ji52vq6iJWoqjI.roa
File: oqEFVePXwBTj4Ji52vq6iJWoqjI.roa (raw, json)
Hash identifier: OHDZzCKpyG1hSjlu+G7pjcQK/5vKdbR3oiN4EvmMFmY=
Subject key identifier: A2:A1:05:55:E3:D7:C0:14:E3:E0:98:B9:DA:FA:BA:88:95:A8:AA:32
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 018290B1B71C78F1F78D1D7036632F28DB5F
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/oqEFVePXwBTj4Ji52vq6iJWoqjI.roa
Signing time: Fri 12 Aug 2022 06:15:41 +0000
ROA not before: Fri 12 Aug 2022 06:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 89.116.239.0/24 maxlen: 24
89.116.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:b1:b7:1c:78:f1:f7:8d:1d:70:36:63:2f:28:db:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 12 06:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2a10555e3d7c014e3e098b9dafaba8895a8aa32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:16:d0:80:b0:11:b2:20:ab:2f:06:d1:27:a2:
f4:83:be:84:21:31:36:01:4f:c6:38:a5:54:90:f3:
c2:26:9b:15:eb:52:71:1c:e7:65:7e:c9:b2:10:28:
cd:ac:02:3e:d6:32:15:a6:b5:64:d2:5c:a2:98:1a:
72:3a:99:e0:b3:27:e3:36:27:1c:38:c2:ef:28:53:
4e:76:5a:21:44:be:af:c4:84:77:db:06:64:6e:25:
e6:d8:06:8d:a2:d5:8e:c8:c2:86:49:56:bf:d0:e2:
00:02:72:4b:02:c3:8d:07:21:a2:e5:45:2e:3a:43:
c4:20:22:06:3c:96:25:7e:30:e2:be:57:0f:d6:5d:
f6:cb:27:20:d2:89:18:35:05:b9:a3:b3:36:9e:66:
f9:ca:9b:a0:35:e8:47:9d:6d:3c:a6:02:f9:22:47:
fb:cb:0c:d6:89:1b:b7:be:01:c3:3b:c9:8d:85:4e:
58:b7:1b:31:8e:8f:54:ca:27:3d:89:7c:d9:54:80:
c2:cf:1b:33:e9:56:c7:fb:e9:37:c7:28:68:ac:66:
e8:90:77:8a:f2:b6:96:d3:98:43:74:de:d9:c3:4b:
f8:b5:ea:ca:24:5a:4a:ea:9f:07:af:de:cf:ae:5d:
b8:75:5a:07:6f:b7:2e:3b:b6:2f:52:0b:c7:58:25:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A1:05:55:E3:D7:C0:14:E3:E0:98:B9:DA:FA:BA:88:95:A8:AA:32
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/oqEFVePXwBTj4Ji52vq6iJWoqjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.239.0/24
89.116.244.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ea:0b:52:c6:c3:8d:a6:c2:ea:74:1c:84:57:24:48:c9:11:
b0:f3:59:f3:2c:bb:ac:cb:27:43:e8:06:27:dc:5c:a6:57:88:
3a:17:90:4b:af:90:63:36:72:52:75:ad:ec:7b:b9:b8:43:0a:
89:8f:4d:0c:52:a5:98:45:7f:96:d5:10:02:fd:6e:3e:9e:1a:
07:78:4e:80:d0:67:76:15:14:31:f2:8e:89:a6:91:33:70:a0:
13:8e:83:25:d7:e4:d0:74:af:ea:a8:4d:88:2d:0e:36:dc:94:
84:31:64:7d:07:ee:2c:48:09:40:2c:45:30:b5:0c:0d:2b:81:
2d:95:8e:f6:61:ee:23:dd:2b:2b:d2:cc:2c:f4:b3:31:65:ab:
e1:27:3a:1c:ef:33:9e:25:8b:1e:c1:b8:68:08:a8:72:8f:44:
24:e5:69:9f:8f:8d:be:8a:cf:41:14:fa:ea:36:6e:69:65:2e:
e2:16:1a:c0:fd:f6:0a:f0:1e:83:81:b2:e0:09:30:56:b0:77:
c1:59:f6:d8:9c:35:85:1f:00:37:77:46:ed:aa:ce:27:85:0f:
31:cf:e4:45:b5:2d:0f:2b:f5:8c:a8:63:38:b1:b9:a7:85:c1:
64:8e:f6:a1:23:10:a2:7c:1d:51:a1:95:c9:5b:e6:96:07:92:
2f:91:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org