Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/upckq0-xTrfD6UO8zgAFd6rz-Ls.roa
File: upckq0-xTrfD6UO8zgAFd6rz-Ls.roa (raw, json)
Hash identifier: XrXAeXTcQ/tHGrPnWEfUmofasrQDqJvYtWLcy4z4Uds=
Subject key identifier: BA:97:24:AB:4F:B1:4E:B7:C3:E9:43:BC:CE:00:05:77:AA:F3:F8:BB
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182C540D637A00B0B221CFB863E7577593A
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/upckq0-xTrfD6UO8zgAFd6rz-Ls.roa
Signing time: Mon 22 Aug 2022 11:12:16 +0000
ROA not before: Mon 22 Aug 2022 11:12:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 89.116.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:40:d6:37:a0:0b:0b:22:1c:fb:86:3e:75:77:59:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 22 11:12:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba9724ab4fb14eb7c3e943bcce000577aaf3f8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e3:b5:13:ba:3c:30:2f:4d:7e:3f:93:58:3d:
bb:7b:45:a4:87:af:04:02:06:2a:6f:65:06:7b:ce:
be:4d:1e:d3:3e:27:ae:15:dc:ee:bb:12:2e:51:b2:
f5:aa:ae:07:47:f8:07:7b:d7:a5:e4:0b:4d:dd:cd:
cb:09:79:f5:31:2b:3f:81:11:d9:f4:dc:99:72:76:
bb:59:ef:75:f3:1d:c1:dc:55:7b:d8:76:56:18:04:
02:a6:74:d2:a9:e7:62:f4:fa:ce:0f:bd:3e:02:7d:
ff:1f:1d:e7:be:d6:ee:5d:8c:02:9e:b3:78:47:a6:
33:8c:2a:78:db:d1:db:51:71:c7:50:34:06:5b:e8:
5d:bc:4e:11:c9:da:0d:76:85:55:a1:62:92:cd:64:
ff:3e:fb:46:c2:11:5c:77:6c:0a:5a:39:b7:de:96:
c5:c6:5f:5a:e0:4a:f3:56:fc:dd:d1:e3:de:ee:44:
fc:74:68:a6:79:c5:a1:3d:c3:ac:d6:1a:c8:3c:f7:
6c:90:47:1c:1f:91:0a:0b:67:40:7a:93:a1:ef:90:
aa:38:c5:4f:7a:14:b9:ed:b0:f8:f7:52:90:74:76:
16:55:5e:a4:e3:85:5c:68:98:c5:a2:a8:68:e3:23:
1e:0a:7c:98:fc:7e:1f:c7:aa:b9:83:56:66:c4:6f:
73:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:97:24:AB:4F:B1:4E:B7:C3:E9:43:BC:CE:00:05:77:AA:F3:F8:BB
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/upckq0-xTrfD6UO8zgAFd6rz-Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.241.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e3:e5:a9:d8:19:50:48:a0:5a:b1:a8:c8:4c:84:61:f8:75:
4b:97:49:d4:e6:25:a2:52:58:39:19:77:af:df:24:65:91:8d:
4b:e6:06:29:18:19:92:b3:92:8e:cf:c4:01:9a:8b:af:eb:71:
8e:bb:41:77:f7:ce:d6:de:76:49:1b:1c:e3:4e:40:a2:aa:20:
db:0b:b4:f5:c2:15:0b:b3:a4:88:c4:10:8f:ce:37:b2:ad:15:
b7:08:c0:35:71:47:2b:de:c8:74:3d:4e:47:42:12:39:71:c4:
3d:2d:71:6e:26:88:37:0a:01:1d:05:fd:78:f2:24:ce:d9:a9:
c4:4e:c6:5c:9c:e2:00:68:71:84:62:eb:c6:15:dd:16:36:4c:
50:4d:8d:26:43:ef:45:9b:fc:e9:cf:af:d5:76:7d:98:e8:b3:
cb:72:cb:0a:7e:06:b0:f4:d5:bc:ff:85:3f:e4:40:ee:8d:c0:
fd:7d:48:61:a7:fe:13:85:d7:6a:8c:7f:4e:27:81:2d:7b:94:
ab:2a:ba:3e:0d:c1:65:1e:0e:d9:08:d7:b0:9a:3c:f8:ed:5c:
73:e8:a5:76:98:14:a6:e3:87:88:c9:34:e8:72:9a:9f:06:00:
45:17:4b:a1:c0:ad:db:97:6d:d9:54:51:0c:41:16:c5:8d:d2:
09:60:a3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org