Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pdMjlA0nH9jeFEUwB_jQVXHcJkQ.roa
File: pdMjlA0nH9jeFEUwB_jQVXHcJkQ.roa (raw, json)
Hash identifier: wPFKq1yWxEC4gjrxWsc/j3qLy5NRp1pjlJY61lf95Mg=
Subject key identifier: A5:D3:23:94:0D:27:1F:D8:DE:14:45:30:07:F8:D0:55:71:DC:26:44
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A48155D
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pdMjlA0nH9jeFEUwB_jQVXHcJkQ.roa
Signing time: Mon 11 Apr 2022 10:39:41 +0000
ROA not before: Mon 11 Apr 2022 10:39:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 89.116.172.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.116.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172496221 (0xa48155d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 11 10:39:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5d323940d271fd8de14453007f8d05571dc2644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:a5:56:9f:a7:87:80:4b:98:3a:3a:af:72:
56:2f:2d:8b:24:e1:67:c3:97:43:98:c7:c8:64:fe:
14:ef:96:a3:f6:59:52:43:36:7c:4e:d5:13:25:7b:
0e:5d:47:d8:66:90:fc:39:6e:1d:de:71:ab:59:3e:
bd:15:0a:49:c4:64:8a:f4:c6:b3:7c:2f:f7:e1:7d:
4e:3a:8e:70:54:a2:55:a1:65:bb:58:5e:02:1e:a6:
bb:43:fe:6c:b0:7e:d2:df:e1:70:6a:65:b7:02:f0:
a7:af:b0:73:d8:ae:3a:db:3b:8c:73:79:42:c5:37:
aa:aa:be:cf:16:af:f4:9a:08:71:08:b4:5a:f2:ed:
f1:57:d6:0d:76:f4:d9:b0:23:7d:4f:1b:8c:a4:d5:
bb:73:a4:5f:09:fc:f0:73:d9:be:1f:09:dc:96:24:
b9:41:44:27:cb:0b:ef:1c:2c:d9:58:3a:e2:c8:9f:
e4:c9:d5:04:71:bf:22:ef:e7:66:da:0e:9e:d8:e3:
c0:e1:bc:57:9d:e0:bb:92:3d:9c:d9:71:7a:8d:79:
df:bc:3b:dd:ba:7e:a2:dc:ee:43:d2:e0:1e:df:22:
01:45:f3:20:93:c3:74:69:02:86:05:35:0c:d1:93:
d4:b6:5f:ae:b2:50:da:79:5c:9a:9d:2a:4a:8c:d0:
10:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:23:94:0D:27:1F:D8:DE:14:45:30:07:F8:D0:55:71:DC:26:44
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pdMjlA0nH9jeFEUwB_jQVXHcJkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.172.0/23
89.116.200.0/24
89.117.36.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:17:01:d0:e4:ac:e4:e8:58:59:08:df:9b:c0:82:d8:17:0d:
df:22:a9:9b:fd:29:e6:a4:79:28:44:b4:a8:0c:f8:9b:31:eb:
2d:30:f0:0a:d2:ac:8a:db:8b:55:cb:46:bb:15:fa:b0:7c:9e:
5d:ed:a1:f8:c7:3b:b8:47:d3:66:d5:52:8a:31:a8:da:4a:f1:
88:23:07:8c:5f:d9:1d:56:f4:a9:85:fc:b9:c8:42:f5:33:d0:
4e:a5:03:50:db:b9:9a:cb:a0:2b:ab:16:6e:b5:e6:c7:73:d3:
52:d1:7d:df:7e:41:1f:e3:e2:77:ab:8e:f5:32:95:5a:ee:35:
ce:1a:7e:01:1f:6a:47:94:c2:63:c4:28:f2:4e:e7:31:57:b8:
d2:d8:c7:12:b1:a2:aa:13:65:8d:19:35:c0:92:bc:8a:aa:9e:
15:d3:69:7d:4a:bf:54:7f:a6:8b:cb:48:9a:fb:15:e7:07:8c:
6e:0d:31:6b:ca:6d:d2:30:61:ee:b3:c0:58:bc:50:39:34:e3:
38:0f:7b:34:e2:41:d5:5d:bf:1b:b9:ad:7e:84:d4:e1:32:19:
54:c1:2d:c1:1e:67:72:b0:81:65:59:52:d8:1e:1e:a9:77:9c:
3b:04:ac:ca:81:84:1f:7b:9a:16:fd:81:6f:b3:1a:70:19:d8:
fc:c2:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org