Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/twwAE8r9Gn5gFoEbrIy3RJhb9WY.roa
File: twwAE8r9Gn5gFoEbrIy3RJhb9WY.roa (raw, json)
Hash identifier: 68a7TNQPxHA7598TRoUgUkv8yprJ+ARiGeoa08ZOHPE=
Subject key identifier: B7:0C:00:13:CA:FD:1A:7E:60:16:81:1B:AC:8C:B7:44:98:5B:F5:66
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09B8CA11
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/twwAE8r9Gn5gFoEbrIy3RJhb9WY.roa
Signing time: Tue 22 Feb 2022 07:45:48 +0000
ROA not before: Tue 22 Feb 2022 07:45:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 89.116.169.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163105297 (0x9b8ca11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 22 07:45:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b70c0013cafd1a7e6016811bac8cb744985bf566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:aa:3f:15:93:05:ab:90:51:82:9d:85:8a:59:
32:bd:6e:32:58:53:2f:ea:0d:9e:45:b4:86:4e:28:
60:5e:df:35:78:58:62:28:41:fc:ac:5e:c5:54:4e:
ac:19:aa:b9:27:d3:ba:79:61:18:0a:1a:01:13:42:
ae:f5:b1:14:70:61:71:d8:2a:0a:d7:e4:76:1b:10:
40:93:18:94:ce:2f:c1:89:e3:d2:bb:c6:71:66:7b:
dd:3d:f0:a6:eb:a5:9f:8a:11:be:d2:af:27:db:b3:
83:3b:d1:b7:82:89:9f:11:56:02:38:bb:4a:7b:b0:
83:27:56:29:32:68:8a:4f:c4:4c:50:0a:0d:8a:57:
32:3e:de:ec:6c:b3:ec:68:a7:44:23:67:4b:8b:89:
4d:e3:aa:a1:60:03:37:09:1a:ad:60:2a:a4:83:b5:
ee:68:64:7d:45:45:ca:65:c3:a1:f4:95:46:1e:fa:
45:2c:0c:d7:4b:e5:96:39:2c:41:b0:f1:83:b6:d1:
be:00:b5:8c:e1:5e:28:17:bc:45:9d:81:7b:7f:84:
46:57:f7:b3:6b:81:7d:dd:52:8c:47:96:6e:4e:41:
fb:97:5c:65:13:4d:43:02:32:e2:35:27:da:cb:1c:
24:c2:9c:fe:85:15:ad:17:4a:a8:13:a3:a4:af:bb:
68:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0C:00:13:CA:FD:1A:7E:60:16:81:1B:AC:8C:B7:44:98:5B:F5:66
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/twwAE8r9Gn5gFoEbrIy3RJhb9WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.169.0/24
89.117.27.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:88:fd:a9:49:97:36:69:35:ab:69:c1:e8:e1:ef:de:9f:ad:
14:aa:11:34:96:a4:42:b3:b1:c6:6a:23:f0:cc:da:a2:30:da:
82:45:42:90:3d:f0:5c:08:b4:7e:62:0b:25:9c:b9:12:5f:48:
04:8e:d4:60:5e:3e:55:22:86:7b:21:ea:89:b0:8c:ef:63:42:
6b:1c:96:d1:44:01:5b:f4:54:40:1b:31:a6:6e:c3:92:4a:6f:
44:4a:63:10:03:5d:6d:25:29:49:cd:24:43:53:05:55:d6:9c:
0f:49:e3:f6:6c:cb:ed:33:d2:05:ff:8e:5a:32:44:93:c8:39:
f1:aa:c1:4b:70:9f:97:52:3c:91:73:e1:6b:82:de:25:33:63:
85:87:34:85:ea:da:a2:39:22:05:71:71:6f:40:60:5f:2a:d4:
bd:be:d4:f5:67:4f:7a:6b:b2:58:d6:73:4f:fc:d8:fc:26:ad:
69:6a:ba:1e:8d:b4:a5:54:79:9c:96:91:ff:a2:50:1f:d7:a0:
e5:84:59:b8:e9:5c:cd:bb:69:3c:b2:08:fa:16:3d:93:36:a8:
cf:0d:81:22:bb:1b:31:6e:bb:84:e6:b4:78:89:2d:f9:1a:53:
57:02:66:ca:7c:08:8f:5d:75:ef:43:0e:87:77:d0:6a:4f:ee:
21:68:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org