Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/tju4uHrMvYHkwwOt7-j_78ehOAM.roa
File: tju4uHrMvYHkwwOt7-j_78ehOAM.roa (raw, json)
Hash identifier: sJGVLXjiZThSWQTlPNtKY8COfk8HIazwxCmTFfbMiLU=
Subject key identifier: B6:3B:B8:B8:7A:CC:BD:81:E4:C3:03:AD:EF:E8:FF:EF:C7:A1:38:03
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 097252C8
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/tju4uHrMvYHkwwOt7-j_78ehOAM.roa
Signing time: Thu 10 Feb 2022 07:03:22 +0000
ROA not before: Thu 10 Feb 2022 07:03:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 89.116.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158487240 (0x97252c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 10 07:03:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b63bb8b87accbd81e4c303adefe8ffefc7a13803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:92:bb:f7:76:4c:98:42:9a:95:c3:b5:5e:
93:14:bb:f7:84:2e:cc:0f:41:0c:a7:dd:b7:10:3f:
f4:c0:38:b5:b6:d6:33:0f:17:c6:b0:1b:8b:a1:d4:
ed:19:37:b2:35:69:21:39:36:e0:fc:73:c8:08:76:
f2:e1:0e:86:d0:b7:47:26:1d:c5:d7:68:37:50:0e:
5c:fc:83:c8:18:9f:b2:a0:ce:ed:e6:a2:bc:31:5b:
ea:41:53:dd:71:4f:37:34:8f:3b:d7:7c:b0:7d:a9:
ae:93:1a:bd:8d:0b:ed:f3:a0:94:69:4f:c4:27:71:
72:df:89:dd:25:29:30:2b:5b:1d:38:77:dc:cb:fd:
d5:04:e7:2c:52:1f:2f:20:21:3d:f3:6a:f6:5d:50:
ea:a1:a6:ce:b3:24:cd:90:1f:7d:b7:51:e0:22:8b:
2d:05:77:f7:44:8c:76:65:13:bd:af:a1:dc:39:89:
8f:97:bc:1b:1b:b2:cb:93:15:b4:d5:48:44:b6:52:
44:b7:fc:4c:fc:6a:26:55:56:c7:c7:a5:3b:d6:fb:
73:77:07:eb:30:a1:a8:fc:ae:b2:09:aa:d4:01:55:
25:e7:a4:55:bb:07:41:c7:8d:4a:3a:38:b4:35:96:
8a:6a:a5:41:f0:00:17:23:35:2d:36:85:48:0b:cc:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3B:B8:B8:7A:CC:BD:81:E4:C3:03:AD:EF:E8:FF:EF:C7:A1:38:03
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/tju4uHrMvYHkwwOt7-j_78ehOAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.96.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5d:7b:ba:b4:39:c8:95:4b:c9:2a:d4:2d:68:35:c4:02:01:
c2:6d:49:e2:09:06:b9:31:d9:54:f1:1c:76:b4:03:96:a7:b9:
bd:ee:d1:bd:a4:58:31:5c:77:f5:2a:6e:14:b8:33:5d:9b:e1:
ca:1c:aa:e7:1f:aa:ad:fd:cd:45:74:9c:89:c0:5f:0e:8e:2e:
90:81:22:f8:6a:60:1d:d7:3c:e1:91:da:2a:75:65:47:2d:b7:
7a:0a:b7:bd:59:32:cb:20:42:40:1d:01:f8:4c:d8:b6:7b:60:
45:76:18:1e:3c:8e:4c:0c:5d:eb:57:2b:88:13:60:90:4e:7e:
47:81:53:59:31:89:9c:0c:98:6c:90:dd:06:41:02:ea:bf:62:
b9:91:0a:c6:53:97:c4:80:82:68:7d:ef:a9:be:f9:53:d3:d9:
88:80:7e:2d:71:bc:d1:03:29:b6:68:a9:59:6f:21:b7:ce:0b:
22:0f:25:3a:6b:c4:af:85:e0:dd:e3:46:06:28:ee:7e:c9:64:
74:91:75:f3:15:35:77:c2:33:d7:f4:7b:78:55:64:ce:ef:d6:
aa:73:da:42:81:72:ee:11:43:6e:e9:d9:a2:49:64:b2:27:20:
dc:80:12:dd:16:2c:da:5b:c4:d1:3e:d4:a7:fd:6b:cd:ae:f3:
c2:da:dd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org