Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/RRTkYp_XL6-Kn2CVxHuTmrQ19uA.roa
File: RRTkYp_XL6-Kn2CVxHuTmrQ19uA.roa (raw, json)
Hash identifier: olDuXQqhplhe4c5ZI87vVcN+kAEXlaLA3sYNmrNmO0s=
Subject key identifier: 45:14:E4:62:9F:D7:2F:AF:8A:9F:60:95:C4:7B:93:9A:B4:35:F6:E0
Certificate issuer: /CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Certificate serial: 0187E1AAD8E9F8C4B83CCE9333CE6A0A6DBD
Authority key identifier: C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/RRTkYp_XL6-Kn2CVxHuTmrQ19uA.roa
Signing time: Wed 03 May 2023 12:51:22 +0000
ROA not before: Wed 03 May 2023 12:51:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 89.42.111.0/24 maxlen: 24
89.42.110.0/24 maxlen: 24
93.113.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:aa:d8:e9:f8:c4:b8:3c:ce:93:33:ce:6a:0a:6d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c518644ac461ddd2cf4bc5ad5c2b4262535c38c8
Validity
Not Before: May 3 12:51:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4514e4629fd72faf8a9f6095c47b939ab435f6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:26:e6:c4:3e:46:53:10:54:bf:d0:ab:c3:46:
7e:65:79:7f:ce:f4:e4:87:c4:2c:cc:33:d6:69:6d:
f1:07:3e:1b:70:4d:5b:50:ad:90:07:60:1e:af:ef:
e8:50:a5:5d:8e:89:fb:60:59:e6:5b:aa:ee:85:5b:
ac:c5:69:90:e2:de:17:20:35:77:b5:e0:88:51:19:
f3:dd:f7:36:6f:95:a2:91:77:23:26:39:18:8e:7a:
bc:f5:87:19:53:8a:52:f1:8e:7f:30:8b:71:5f:06:
95:8b:9d:8c:4e:5e:57:58:93:66:79:45:61:4a:aa:
55:1e:cc:5f:ba:32:9b:b1:70:d2:fe:1c:c6:d9:69:
1b:24:92:7c:5e:f4:52:51:99:e7:8c:2e:24:f5:d8:
5d:1c:5a:d2:c0:4e:8a:72:e5:fd:04:f6:66:0c:3f:
37:c2:a2:f6:09:0e:f9:1c:6e:67:4e:60:8f:6b:6f:
76:89:a8:22:69:19:e3:00:ac:64:99:94:a6:7b:c4:
fa:2d:1c:67:d3:87:c1:80:a3:d9:97:4d:5d:cf:c9:
c3:7f:7d:3b:78:b6:82:47:41:ef:54:98:4c:9d:4f:
a1:a0:1d:ff:31:bb:92:04:c6:75:f2:d1:26:ad:d3:
3b:73:92:2f:73:30:4e:bd:4f:2e:ab:ab:7d:a6:83:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:14:E4:62:9F:D7:2F:AF:8A:9F:60:95:C4:7B:93:9A:B4:35:F6:E0
X509v3 Authority Key Identifier:
keyid:C5:18:64:4A:C4:61:DD:D2:CF:4B:C5:AD:5C:2B:42:62:53:5C:38:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRhkSsRh3dLPS8WtXCtCYlNcOMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/RRTkYp_XL6-Kn2CVxHuTmrQ19uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1df875-2a23-4fe8-b1f0-cebded36f878/1/xRhkSsRh3dLPS8WtXCtCYlNcOMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.110.0/23
93.113.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:1f:d5:2a:77:21:76:ea:1f:38:26:94:d7:a7:0a:d7:89:8d:
99:89:84:85:42:6e:89:96:ef:f3:dc:7d:4b:5e:4c:52:c4:cc:
d3:60:a8:e4:e8:f4:46:ed:93:51:e5:fa:0c:81:d1:2c:31:ad:
07:6f:1b:3d:34:44:3e:38:28:44:ac:df:f1:9b:6e:96:4b:8c:
72:c0:f4:d7:4e:c3:c2:79:33:7b:a6:e3:22:a9:0e:6f:a4:df:
d2:21:96:38:68:a3:bc:3e:d3:2e:d9:a7:83:2b:18:4b:a2:db:
e5:34:81:f0:3d:46:42:20:53:0f:3a:24:59:b0:54:06:ec:82:
02:9b:80:ad:f8:7b:31:07:d1:28:a2:7c:b1:5c:7b:00:63:68:
62:b4:8e:51:42:a3:00:71:cf:0d:ed:10:0b:67:d2:02:e0:93:
29:cc:e9:50:52:02:a8:1d:c6:b2:ec:4b:fd:38:e7:43:ca:47:
4b:01:28:5c:fa:7c:6d:61:d1:55:b0:1e:06:19:48:e3:c4:31:
e9:f5:e7:60:23:74:b2:67:38:2d:f4:5c:45:7a:8d:53:ac:e5:
3d:59:35:f2:70:36:6c:9c:68:6b:18:64:83:e6:70:fc:81:7c:
8b:11:66:fa:9f:b4:e4:46:79:82:29:5c:d9:3d:e0:3d:1c:a0:
59:fe:90:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 09:38:02 2023 by rpki-client on console-fra.rpki-client.org