Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/sxdY75yeO2s3LyVvL3HN5oaXSno.roa
File: sxdY75yeO2s3LyVvL3HN5oaXSno.roa (raw, json)
Hash identifier: JzQz+OnYMPYdzNe90x+3F3aJ98U/6RLi/LXvAU1QKAY=
Subject key identifier: B3:17:58:EF:9C:9E:3B:6B:37:2F:25:6F:2F:71:CD:E6:86:97:4A:7A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0970E3AF
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/sxdY75yeO2s3LyVvL3HN5oaXSno.roa
Signing time: Thu 10 Feb 2022 07:03:21 +0000
ROA not before: Thu 10 Feb 2022 07:03:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 89.116.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158393263 (0x970e3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 10 07:03:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b31758ef9c9e3b6b372f256f2f71cde686974a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:db:c7:d0:5e:83:61:6d:2d:6b:3a:6f:e2:
ce:0f:15:e0:ee:ec:12:be:b9:d8:c9:d6:ca:d8:50:
a0:fa:7b:5a:44:d3:e9:4f:65:32:66:3f:fa:6b:2c:
c6:e6:bd:fb:cb:24:ae:f4:da:8b:f4:05:7d:76:4b:
e9:60:f4:66:8a:0a:f3:73:6d:d4:e9:c7:37:95:47:
23:8c:40:fb:9f:70:55:57:76:7b:a7:78:45:e6:eb:
2e:a1:d7:c3:18:bb:22:b0:28:0a:10:0e:58:a3:ea:
53:c9:1b:5d:f1:61:b8:a9:d0:5d:6d:6c:79:27:77:
60:a7:c5:72:4e:01:2a:77:3a:d2:6c:c3:f2:e3:0c:
df:81:00:4b:b3:ef:4c:00:a1:dd:8b:5b:e8:fc:dc:
8a:5e:ce:0d:97:ba:c2:61:2f:1d:60:46:16:5d:87:
7b:b9:0e:31:b1:f7:00:79:cd:28:01:96:7a:3e:55:
57:23:f6:3c:66:4f:bd:24:e8:0a:77:2e:32:85:96:
94:66:6b:66:9a:cf:03:92:52:a1:54:b1:99:f0:45:
b4:ad:ed:70:61:66:af:7c:af:0c:69:60:99:ca:96:
5b:8f:89:bc:a0:35:2a:5b:65:23:e8:40:e2:88:15:
f0:09:2d:d5:57:2c:12:8b:c2:96:0c:6d:51:ef:3c:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:17:58:EF:9C:9E:3B:6B:37:2F:25:6F:2F:71:CD:E6:86:97:4A:7A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/sxdY75yeO2s3LyVvL3HN5oaXSno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.169.0/24
Signature Algorithm: sha256WithRSAEncryption
09:21:18:4c:ee:df:08:26:7b:66:61:95:61:39:a1:f6:b5:29:
f0:cf:de:54:f6:e3:f3:2f:08:e3:99:23:79:0f:ce:cc:49:9e:
93:77:5f:a6:cf:fb:c3:a4:6d:1d:a4:82:10:6c:82:47:30:32:
80:cc:bc:bb:e8:53:7f:6c:de:03:c2:31:10:a5:81:a2:e8:44:
27:fd:bb:91:a8:9d:a9:1a:88:e8:ee:5e:a9:77:04:af:d6:a4:
ed:26:36:7a:0b:75:34:b0:be:0f:60:75:ab:98:64:f1:44:c3:
49:71:34:c8:47:7f:08:96:b5:66:92:42:45:85:01:b3:aa:ff:
69:8b:97:84:64:f0:dd:e9:a2:c0:5b:3f:9e:5e:24:9e:1b:17:
41:85:06:db:e3:7e:7f:c5:b2:91:7d:9c:27:8e:42:ba:97:95:
ae:65:a0:55:91:2e:f4:48:1f:47:21:75:40:23:52:b2:92:30:
60:a7:24:99:be:e1:6a:ed:46:14:09:54:24:72:7d:78:c8:ad:
a4:a9:ca:ae:18:81:41:05:05:d8:f3:aa:2c:e3:6c:b9:74:18:
c7:1b:e6:d9:5c:b9:86:a7:1f:23:d3:5a:dc:b1:39:64:a8:a2:
6e:a2:a1:32:ca:21:34:bd:c3:0f:7b:77:de:e7:84:9d:29:8d:
f6:de:e1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org