Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/rY9dxuatC4Spkxel7qmqnSrS-ns.roa
File: rY9dxuatC4Spkxel7qmqnSrS-ns.roa (raw, json)
Hash identifier: 7FvszoqE5JG1X6qBUmc4th0/Q4ofN0acXxODtCAjOZw=
Subject key identifier: AD:8F:5D:C6:E6:AD:0B:84:A9:93:17:A5:EE:A9:AA:9D:2A:D2:FA:7B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B56587B
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/rY9dxuatC4Spkxel7qmqnSrS-ns.roa
Signing time: Sat 11 Jun 2022 14:54:02 +0000
ROA not before: Sat 11 Jun 2022 14:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 89.116.108.0/24 maxlen: 24
89.117.188.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190208123 (0xb56587b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 11 14:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad8f5dc6e6ad0b84a99317a5eea9aa9d2ad2fa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:c5:14:6b:a3:73:cf:8e:03:ca:6d:35:fe:
0c:49:d9:4e:5d:40:d2:2f:68:3d:c2:d9:a1:a5:c2:
63:9d:11:cd:d2:27:e9:32:ce:a5:d3:34:5a:90:57:
9a:0e:5c:ed:d8:32:0f:da:78:8c:e3:f6:3a:f9:ca:
3e:74:32:75:fa:62:62:37:4c:c2:49:29:5a:75:61:
66:f2:db:7d:b8:34:a9:73:29:f6:77:47:35:e5:df:
84:db:b7:4f:e0:5b:fa:02:f9:ea:7e:f7:35:c6:a2:
b6:33:c0:34:71:81:c3:4b:57:e7:37:04:95:7d:7a:
7b:00:56:ee:4a:57:32:b1:6e:eb:e6:63:f3:f2:bb:
d1:17:47:7c:99:70:12:2a:ae:ce:55:71:bb:d4:da:
bc:d1:f1:c6:0b:cc:57:93:ff:28:1e:53:41:3d:2b:
01:73:5a:36:a8:16:f8:0b:dc:ad:9f:a8:52:aa:bc:
84:72:c8:64:0f:ad:d8:5f:c3:fe:e7:4c:6d:01:61:
9f:dd:4e:1d:45:cb:2b:43:cb:43:44:e2:9c:30:f5:
b4:a7:f3:f9:26:f6:d9:8c:d5:85:a5:8e:f4:51:25:
ab:61:63:37:0f:39:13:92:ac:e4:97:52:f4:b0:b3:
21:8a:1b:3a:6f:fd:10:2d:ed:4b:4b:71:4d:28:a3:
45:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8F:5D:C6:E6:AD:0B:84:A9:93:17:A5:EE:A9:AA:9D:2A:D2:FA:7B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/rY9dxuatC4Spkxel7qmqnSrS-ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.108.0/24
89.116.128.0/24
89.116.154.0/24
89.117.139.0/24
89.117.188.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:13:e1:0f:9a:ea:ea:9a:e5:50:97:0f:5a:bd:58:43:9c:2f:
dc:cf:3c:a8:83:67:df:1f:d7:db:a9:c5:5f:28:7f:85:7b:b1:
57:7a:10:cd:70:a3:90:7d:5c:25:63:ef:e8:a9:c1:69:c5:31:
90:83:89:a9:ae:cd:f1:d1:5c:51:c0:1f:77:3e:c3:c0:34:24:
47:09:14:74:36:75:ef:18:a6:86:fa:56:43:f2:1f:98:99:ac:
17:8b:d0:ba:d3:9f:f2:aa:3b:bd:51:bc:fd:84:eb:bf:ed:28:
66:44:24:a5:7c:d7:a2:37:ec:c9:cb:33:7e:65:f1:7f:0a:18:
6b:68:68:3e:20:5a:6c:bd:ee:09:09:3e:1f:f2:bc:90:94:1f:
ec:c7:80:6a:9c:6b:61:44:68:85:ca:0b:13:60:0e:85:2a:d7:
b4:e0:9a:2a:7a:f4:a7:7f:cd:69:6f:79:46:ee:a0:c4:9f:35:
06:7e:88:32:be:a4:9c:6e:55:7d:47:48:e2:e2:63:cc:bf:d2:
53:23:bf:63:71:95:33:3d:54:a8:ef:0f:07:90:88:40:3f:f7:
c7:72:d0:ec:55:58:01:17:26:86:47:1e:e6:5d:15:b3:bf:a6:
53:80:2c:32:b5:76:e9:23:5b:b2:0c:f7:f4:ad:db:87:f3:51:
85:4b:aa:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org