Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/w1wjxkW8x80bi6YeCrm8FBXZ5K4.roa
File: w1wjxkW8x80bi6YeCrm8FBXZ5K4.roa (raw, json)
Hash identifier: n4XDXy3UQlK1jzV1lx1VaRdNJQBVOvj/oIGFxrn162M=
Subject key identifier: C3:5C:23:C6:45:BC:C7:CD:1B:8B:A6:1E:0A:B9:BC:14:15:D9:E4:AE
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01837F8030700D6CB8AAE82388A2B66607B3
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/w1wjxkW8x80bi6YeCrm8FBXZ5K4.roa
Signing time: Tue 27 Sep 2022 15:10:50 +0000
ROA not before: Tue 27 Sep 2022 15:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 89.117.88.0/22 maxlen: 24
89.117.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:80:30:70:0d:6c:b8:aa:e8:23:88:a2:b6:66:07:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 27 15:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c35c23c645bcc7cd1b8ba61e0ab9bc1415d9e4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:25:c5:7a:a9:2a:0b:46:50:56:17:e2:b7:
60:bb:db:ab:1b:b9:8d:18:08:41:7a:7c:c3:45:f4:
e9:5e:ed:ce:9a:12:71:ed:24:47:2d:d9:a8:85:bf:
9d:28:e1:78:8b:b5:e8:aa:81:d3:76:59:0b:26:aa:
da:35:b4:4d:8d:e2:5e:15:1f:a6:19:b7:c3:9f:c7:
b5:0c:ee:a3:39:07:6f:a1:be:99:44:8b:5a:66:9e:
c5:b4:b5:c4:91:42:40:52:61:cb:db:b9:50:2d:71:
9a:04:dd:9e:00:06:95:34:b7:61:8f:2c:17:b8:a6:
fd:17:81:af:78:be:4f:25:42:55:fa:70:fe:ae:c1:
ef:82:66:45:28:62:d1:e4:a3:8e:b4:9c:69:b9:dc:
72:09:9f:cb:e5:f3:ef:5e:74:80:0b:b5:97:60:09:
80:37:0d:0a:07:ef:6c:3e:7e:d1:8f:88:42:86:d2:
d8:d6:9d:7f:38:c2:56:fa:e0:48:87:cc:1e:2d:5d:
24:33:31:44:5d:03:74:88:83:43:66:33:90:b2:e9:
16:4c:a9:7b:61:66:8c:fe:ad:78:25:6e:be:fa:95:
7d:45:d3:91:8e:bc:2f:d5:d9:e9:b4:36:37:55:61:
e7:59:03:9d:d3:02:d8:48:55:b2:1e:55:f3:08:81:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5C:23:C6:45:BC:C7:CD:1B:8B:A6:1E:0A:B9:BC:14:15:D9:E4:AE
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/w1wjxkW8x80bi6YeCrm8FBXZ5K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.88.0/22
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:38:49:69:e3:09:b8:41:fd:e0:80:ae:13:d8:26:c6:4e:31:
e1:3f:f5:23:82:c7:84:78:b2:98:fe:73:89:d6:9b:2d:11:8a:
51:ab:8b:00:61:93:80:0a:66:d9:ea:a5:3b:3c:7c:6e:15:46:
1c:7c:bd:c1:50:d7:90:9c:bc:9a:c8:fb:a4:74:17:a3:51:aa:
9d:29:dc:3b:27:4a:4b:b0:ef:01:de:29:a2:30:5f:0a:7a:7e:
fe:2a:0b:ec:f2:97:83:2e:bc:e9:bd:5b:79:bd:11:96:53:cf:
9a:5a:35:23:04:67:0a:61:97:47:5e:94:34:58:4a:9c:6a:58:
51:81:94:26:f1:9c:6c:c1:2d:32:96:6e:0c:e4:61:ce:e6:05:
20:a6:b4:b7:5d:70:af:73:03:35:82:7b:59:41:ed:91:88:f5:
32:e3:0f:38:d4:45:9e:e2:2a:cd:88:8b:75:a1:21:f2:28:b7:
4e:4a:63:0c:95:b7:bd:82:5b:44:66:6b:d9:92:a6:5e:ee:f1:
19:57:05:2e:d1:16:a6:93:ca:bb:18:13:01:fb:a0:7c:c1:84:
b7:0e:6b:e6:b7:dc:d0:92:ec:9b:1c:53:13:a1:38:1b:b0:96:
a0:19:15:49:a3:d0:31:cc:98:ad:f5:03:bd:2e:67:58:15:ae:
d2:07:64:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org