Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/zJelqF-BMPBdeXoHxMSVuLLV_yE.roa
File: zJelqF-BMPBdeXoHxMSVuLLV_yE.roa (raw, json)
Hash identifier: BmVmTua/b2jW1PrBj90Y0AQvOjwblcho7JaBst9pWng=
Subject key identifier: CC:97:A5:A8:5F:81:30:F0:5D:79:7A:07:C4:C4:95:B8:B2:D5:FF:21
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183B1D65967583EEE2505870FA2495A51A3
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/zJelqF-BMPBdeXoHxMSVuLLV_yE.roa
Signing time: Fri 07 Oct 2022 09:45:58 +0000
ROA not before: Fri 07 Oct 2022 09:45:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 89.116.106.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.117.104.0/22 maxlen: 24
89.116.44.0/22 maxlen: 24
89.117.0.0/22 maxlen: 24
89.116.48.0/22 maxlen: 24
89.116.60.0/22 maxlen: 24
89.117.152.0/22 maxlen: 24
89.116.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b1:d6:59:67:58:3e:ee:25:05:87:0f:a2:49:5a:51:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 7 09:45:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc97a5a85f8130f05d797a07c4c495b8b2d5ff21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:f7:ab:72:86:02:45:b2:5d:d1:b0:13:db:
b8:29:a1:70:40:70:e4:21:05:89:eb:8e:1e:25:8a:
2c:29:f6:33:7f:02:fe:52:c5:a5:83:88:b6:e9:18:
f6:c9:19:89:c6:da:7e:12:59:0f:03:c3:c1:7b:09:
df:df:3f:6d:c7:9a:ad:1b:53:63:88:c8:85:6f:3f:
a8:bc:5b:84:60:c2:65:d4:db:e3:cf:c2:f1:09:28:
33:d9:63:d2:67:f6:c5:21:06:0b:58:84:a1:83:ff:
e1:92:a3:77:55:49:a0:48:59:97:52:40:c0:13:89:
94:07:75:47:b2:1b:52:57:ae:db:01:af:1a:07:66:
22:69:50:9a:f9:22:0c:5e:0d:bc:9e:ac:86:fe:0d:
a9:06:e9:72:ec:b7:c9:ed:b4:ce:22:04:87:f7:ed:
ae:0a:2f:63:19:cc:c9:1e:bf:99:62:49:0d:bf:09:
5d:5a:bd:3b:27:a3:9d:3a:b6:23:54:47:c0:b0:c4:
90:0b:17:ce:c7:bc:36:06:d8:a5:cf:76:f0:ff:36:
35:63:77:9e:98:ab:32:b2:d0:00:a7:65:25:23:20:
a0:47:07:be:9f:64:4d:d7:d7:66:26:06:2c:27:69:
a2:06:43:ab:93:2b:68:c0:76:14:fe:4f:8d:87:71:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:97:A5:A8:5F:81:30:F0:5D:79:7A:07:C4:C4:95:B8:B2:D5:FF:21
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/zJelqF-BMPBdeXoHxMSVuLLV_yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.44.0-89.116.51.255
89.116.60.0/22
89.116.106.0/23
89.116.126.0/23
89.116.212.0/22
89.117.0.0/22
89.117.104.0/22
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:3d:4f:f9:43:7d:85:21:b7:a6:b3:af:95:f2:60:1b:fa:8a:
d9:e1:07:9e:f0:2a:8d:13:71:00:31:6a:15:f3:24:08:c7:3c:
2f:f6:4a:89:5a:d3:4f:36:20:2f:f0:f9:fb:a1:11:a7:ee:6d:
22:09:cc:88:63:4c:a2:7d:57:05:53:b6:91:1a:b2:47:8a:3d:
b3:b9:7d:1e:4e:8c:4b:20:10:63:53:4f:c5:2f:f8:f7:27:79:
94:32:d6:e0:a7:fd:03:72:55:0f:b9:d7:fb:e4:70:64:25:a7:
d3:fc:75:a3:a1:ac:90:5e:c8:61:b6:52:8e:a5:45:1c:c7:8d:
0e:56:9f:22:78:55:d5:3f:b9:be:7a:52:aa:6d:08:7f:c7:a0:
88:c9:9a:8f:48:77:d9:ab:67:04:43:fb:4d:2b:d0:7a:92:18:
ec:e1:bc:8e:57:30:11:74:56:e5:9c:1e:0e:fe:84:11:5b:4f:
ae:9a:9d:c1:a5:70:1f:71:26:64:46:db:2c:16:b8:8b:a2:18:
a8:31:05:e4:c1:e8:06:81:c4:76:3f:b9:17:44:4a:65:60:b6:
fd:4d:5e:35:83:8b:e3:41:84:c2:ba:87:6d:90:19:5d:b1:d2:
2b:ae:0a:aa:fe:f8:59:fe:fb:d5:2e:aa:e5:9e:30:5c:9e:b6:
0b:82:17:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org