Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/v7vDhvJAaTm_wWmH39oVe7hDvNA.roa
File: v7vDhvJAaTm_wWmH39oVe7hDvNA.roa (raw, json)
Hash identifier: 9PL0b3HgaTogsgLeUztfjAVQTSfZ4e5YGjtKnEKXt3A=
Subject key identifier: BF:BB:C3:86:F2:40:69:39:BF:C1:69:87:DF:DA:15:7B:B8:43:BC:D0
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182D9017D49D0A9A09F8E1D54691E4441DB
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/v7vDhvJAaTm_wWmH39oVe7hDvNA.roa
Signing time: Fri 26 Aug 2022 07:15:29 +0000
ROA not before: Fri 26 Aug 2022 07:15:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51847
IP address blocks: 89.116.88.0/23 maxlen: 24
89.116.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d9:01:7d:49:d0:a9:a0:9f:8e:1d:54:69:1e:44:41:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 26 07:15:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfbbc386f2406939bfc16987dfda157bb843bcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:df:03:dd:85:04:93:3a:d5:8e:45:f6:2b:3d:
79:8b:0f:5b:fd:a7:dd:04:4f:9c:e6:98:c9:7e:91:
f4:1a:53:a7:f2:15:a1:f8:0e:4b:e2:22:9c:4d:ef:
61:b6:79:91:3a:ac:be:52:e8:47:ba:cc:f2:05:22:
52:bc:ed:81:42:29:a1:b0:e3:d3:c7:43:81:fa:7a:
9d:d1:da:04:f1:41:b6:68:15:01:98:5c:cb:a9:b2:
7d:be:77:72:af:b7:b1:d4:90:03:cd:08:c3:5b:a1:
21:70:9d:f7:2d:bd:cb:ff:8d:d9:90:eb:fc:38:95:
8a:d8:6f:bd:b0:18:90:67:2a:27:97:6c:0d:62:b9:
a6:50:de:89:b3:56:f2:dc:1e:1e:7f:78:a9:61:6b:
84:34:6d:05:c8:1a:57:80:87:13:f2:ba:b4:3e:5b:
f5:3e:56:60:f3:a5:a3:2f:cb:b4:07:d3:15:0e:e6:
76:c9:bc:eb:b4:3e:29:41:5d:23:03:a1:f1:8a:41:
68:24:2d:ed:f1:6a:43:26:02:ee:0d:7d:28:8a:b4:
f6:ae:48:a4:0c:17:8b:c7:fb:cd:8b:62:9f:73:5b:
bf:72:3c:a3:3f:1c:a8:ac:4e:f0:3f:0f:d0:e2:31:
f3:8d:56:b0:65:b1:68:41:5d:2a:76:31:ef:21:4e:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:C3:86:F2:40:69:39:BF:C1:69:87:DF:DA:15:7B:B8:43:BC:D0
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/v7vDhvJAaTm_wWmH39oVe7hDvNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.88.0/23
Signature Algorithm: sha256WithRSAEncryption
30:16:ec:1f:67:01:91:a9:d0:ec:a2:3d:46:89:9a:e9:f3:90:
18:78:a9:67:03:a6:48:93:ba:d6:27:a2:26:4f:46:43:00:cd:
c1:3f:7a:37:30:48:49:96:e7:c4:c7:56:b3:ec:5f:69:5d:9d:
e5:49:72:76:3a:3c:5f:ee:54:27:89:77:3f:12:59:c0:db:89:
4d:c2:de:6c:99:41:1d:24:f3:4f:a3:5d:f5:69:d9:b3:09:ff:
49:8f:8e:0e:3e:dd:db:a9:58:51:5f:61:d4:15:40:da:0c:b3:
02:6b:a8:08:a2:4e:40:f3:b4:29:ce:18:5b:ad:d8:15:80:59:
14:f6:58:f8:43:49:39:c6:62:56:1e:8a:c2:a2:7f:db:7d:53:
bc:95:7d:70:44:a2:49:9f:55:0b:0b:f3:1f:2d:6a:17:7b:87:
4f:e5:4e:77:b9:37:71:a9:7b:5f:77:7d:60:9a:9b:4e:3e:00:
1c:cc:42:e6:bb:7e:9e:4a:77:d0:d2:70:c0:b7:34:a2:30:ad:
92:27:81:38:da:86:2f:30:cb:8e:4a:35:90:53:15:c3:61:fa:
2e:1d:1a:ae:8f:35:ee:c6:d2:af:be:c5:81:dc:6b:3e:11:52:
a7:24:80:ec:22:db:64:13:4f:2a:01:ff:1b:59:30:a8:7b:90:
02:c6:82:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org