Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/slM8PqIslRiPRUStSxtWXcB3-f4.roa
File: slM8PqIslRiPRUStSxtWXcB3-f4.roa (raw, json)
Hash identifier: stU8P2+8G02FIysgPUrRHfws7LkQc4yuk13trsduL0k=
Subject key identifier: B2:53:3C:3E:A2:2C:95:18:8F:45:44:AD:4B:1B:56:5D:C0:77:F9:FE
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AAE37B5
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/slM8PqIslRiPRUStSxtWXcB3-f4.roa
Signing time: Sat 07 May 2022 20:17:24 +0000
ROA not before: Sat 07 May 2022 20:17:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 89.117.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179189685 (0xaae37b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 7 20:17:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2533c3ea22c95188f4544ad4b1b565dc077f9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:9a:14:8f:8a:4c:d6:6c:08:84:7e:ea:0e:
6c:c2:13:ee:09:d7:f6:98:2c:04:59:de:7c:8c:0c:
b5:34:56:eb:f6:07:67:4b:70:25:d2:04:e9:92:48:
ba:66:7e:55:b5:23:c0:7b:a1:2e:b2:d4:9a:3c:57:
b6:ff:5f:08:f4:16:63:39:19:59:67:8a:41:5e:4f:
67:14:f0:0b:32:fa:e6:8d:15:11:ad:55:ed:1e:df:
86:69:28:fd:3b:f9:f5:b0:0d:07:cb:e1:09:52:69:
47:ac:e2:8a:dd:5e:6d:fc:a6:9c:15:81:0e:63:21:
35:9a:f9:99:fe:ac:a4:7f:01:78:6f:a9:95:ea:e4:
68:26:e4:00:0e:94:cf:41:f5:77:17:aa:61:d4:79:
9c:cd:e8:52:9b:45:19:8e:49:45:01:d1:bc:42:82:
5f:b8:a0:14:e1:18:9c:77:96:1a:2b:ce:78:93:54:
54:3b:18:39:c7:70:ab:64:12:2e:00:ef:3a:0d:5b:
77:28:9a:4c:9b:04:81:03:9c:0c:a9:42:27:bb:12:
d3:d1:98:d8:48:63:7f:23:be:d7:7c:ff:ca:ea:e0:
0c:48:6f:f9:8f:4a:53:ab:eb:bc:aa:a9:bd:a0:63:
a8:fd:5b:42:b1:cb:8a:04:97:76:ba:76:ad:c9:fd:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:53:3C:3E:A2:2C:95:18:8F:45:44:AD:4B:1B:56:5D:C0:77:F9:FE
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/slM8PqIslRiPRUStSxtWXcB3-f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:b9:8c:0e:1d:90:bb:e7:3e:ca:1f:1d:90:62:33:24:4c:59:
d4:2c:15:40:00:08:a0:df:94:f1:fa:07:3f:48:bc:96:65:01:
27:3f:15:5c:4f:21:66:ad:86:94:8f:8a:9e:b6:84:dc:82:57:
a5:34:cd:6c:fa:38:08:9a:ca:13:60:c1:4a:be:e5:d2:de:71:
57:45:53:0e:79:ce:b1:35:37:14:ca:1f:7e:26:6b:be:e8:f9:
4b:07:48:c2:7b:fe:87:92:9f:f5:6e:4a:87:81:6c:19:3e:78:
1e:65:05:16:00:4c:e6:b9:17:13:d7:c8:16:8a:30:fe:8d:9e:
0d:dd:d8:84:90:48:88:fa:09:68:6e:30:3f:3f:62:7c:ff:2b:
ed:b1:22:97:b2:ab:33:d4:54:7f:2c:32:c2:ae:67:d1:d6:74:
e7:93:21:e7:84:68:ef:22:eb:6c:60:92:1c:fb:be:7a:f8:6a:
29:39:10:61:a3:ac:24:67:26:c4:c7:bc:03:ad:6c:f7:15:59:
75:05:fa:92:56:ed:d7:d5:e6:47:cc:88:94:ba:4e:55:f9:16:
d5:42:e0:a0:c0:09:6f:8d:cb:52:5b:2b:2c:20:9c:79:43:db:
2e:b9:c6:6f:5c:bf:a3:eb:db:27:54:55:52:cd:8c:0e:ef:44:
49:cd:1e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org