Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/yeFJ9eUtFSim9yn8fH5VXmDlOls.roa
File: yeFJ9eUtFSim9yn8fH5VXmDlOls.roa (raw, json)
Hash identifier: Nh7aGw1lwYz+GlGijOgiYxD7Y7/jESQYTsYE7TWDDs0=
Subject key identifier: C9:E1:49:F5:E5:2D:15:28:A6:F7:29:FC:7C:7E:55:5E:60:E5:3A:5B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182C540D6B2E7AA7186DC3C441C34CC3FA5
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/yeFJ9eUtFSim9yn8fH5VXmDlOls.roa
Signing time: Mon 22 Aug 2022 11:12:17 +0000
ROA not before: Mon 22 Aug 2022 11:12:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 89.116.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:40:d6:b2:e7:aa:71:86:dc:3c:44:1c:34:cc:3f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 22 11:12:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9e149f5e52d1528a6f729fc7c7e555e60e53a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:70:64:64:08:ce:34:68:25:ad:d8:23:ab:
a9:7d:71:3d:ff:1c:96:81:c0:6a:21:11:f3:ff:e5:
34:29:46:ed:24:ab:cd:ec:94:24:51:6d:83:0c:89:
ad:1d:43:55:19:04:38:8f:2f:86:99:fb:44:ad:ac:
3c:a2:43:0d:3c:17:90:86:4b:cc:48:26:63:2d:d4:
4d:15:b2:15:50:3c:8a:95:8a:a2:d4:10:38:28:dc:
15:de:63:36:40:69:bc:95:ce:84:51:de:84:c3:35:
1d:37:5a:61:91:cb:79:bd:e4:80:f1:f2:44:75:1f:
1c:14:9d:26:73:10:6b:06:f6:38:58:ae:ed:1d:31:
8d:2d:f5:d6:31:8f:c2:eb:8f:39:8c:47:7f:67:b7:
a5:68:48:0d:fb:72:20:f2:fb:39:04:75:80:0a:91:
5c:41:94:0e:d7:76:d2:13:26:9f:b0:5d:24:2e:56:
7e:98:7a:ed:f2:d5:fd:d6:97:00:b0:c5:ae:29:a1:
99:75:73:0e:3f:1b:7a:25:42:97:00:0b:89:c6:38:
29:0a:90:fa:5f:7b:5e:4b:7e:2e:a7:68:a2:f1:dc:
b1:6e:b9:a7:df:ea:b6:31:34:29:d7:42:73:b6:c4:
8f:df:29:54:53:c8:95:c9:f2:7e:2d:45:79:c2:50:
b9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E1:49:F5:E5:2D:15:28:A6:F7:29:FC:7C:7E:55:5E:60:E5:3A:5B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/yeFJ9eUtFSim9yn8fH5VXmDlOls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.202.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2e:61:76:e7:e5:36:12:7a:9b:f0:63:f6:70:1d:76:96:0b:
bc:b7:8b:fb:85:17:11:4a:bc:44:a5:6e:7f:3b:29:af:b1:83:
b2:4c:51:6d:b1:72:e9:81:9a:ea:8e:e6:79:3e:70:44:ad:1a:
22:8a:83:ee:6d:77:52:65:be:6f:c6:5b:15:00:15:36:fc:43:
f0:58:ae:29:b7:28:2f:87:59:a6:5e:62:77:35:d0:b7:2f:fc:
ea:31:29:42:0e:18:ac:89:f3:96:f0:e6:43:2e:a5:a8:cc:4f:
82:b9:d1:6b:dd:72:d3:b8:73:44:9f:7e:de:8c:f7:73:c6:0c:
5a:cc:c0:f4:de:6f:0b:05:0e:b8:b0:33:40:c9:16:bf:f3:f7:
aa:0c:39:9c:eb:bb:6f:f2:87:a3:3c:02:8d:9c:1f:0a:cf:43:
a0:b1:8b:c3:ec:ef:7a:65:4d:e9:d7:93:f2:98:3d:13:68:a2:
5d:89:ef:2d:52:f5:a6:6d:19:b9:e2:45:09:d2:4c:42:65:ba:
44:06:5a:54:cd:5c:bd:23:11:9f:97:c1:dd:eb:e8:00:92:86:
68:14:04:5e:37:10:8d:31:4f:32:88:6f:88:4f:9a:df:ca:ba:
b7:23:af:b3:28:f4:3e:14:70:10:5a:d8:ba:4f:9f:5a:5f:01:
1f:f3:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org