Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/0CgDEghXgcUqrPPeTlYLgZRHgiU.roa
File: 0CgDEghXgcUqrPPeTlYLgZRHgiU.roa (raw, json)
Hash identifier: rlVsR9i75uxQx/ran1jzkadpdG98RTe7mYbvVZ+yaek=
Subject key identifier: D0:28:03:12:08:57:81:C5:2A:AC:F3:DE:4E:56:0B:81:94:47:82:25
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AEDA144
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/0CgDEghXgcUqrPPeTlYLgZRHgiU.roa
Signing time: Wed 18 May 2022 13:03:16 +0000
ROA not before: Wed 18 May 2022 13:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 89.117.80.0/22 maxlen: 24
89.116.32.0/21 maxlen: 24
86.38.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183345476 (0xaeda144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 18 13:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0280312085781c52aacf3de4e560b8194478225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:d2:34:43:a7:0c:f7:1e:71:ac:6a:e6:f3:
6e:d1:f3:77:8b:98:7c:20:58:ea:1e:31:b3:44:17:
39:72:4a:6e:9d:05:76:67:b1:db:4a:f0:ff:6e:43:
b8:3c:ae:7a:c8:09:29:f3:e0:70:90:81:b2:53:2f:
85:71:6e:bd:4d:92:8f:be:15:52:03:1b:01:ec:c7:
bb:2a:c6:44:97:c2:02:fd:31:ee:a9:29:2c:07:09:
de:cf:54:8c:6a:f6:1d:20:1e:8b:57:db:3c:dd:1f:
de:a0:90:64:0b:63:8a:8f:6c:30:8c:1d:ad:cd:14:
d8:69:b7:79:29:a5:01:a4:71:8f:57:3b:4a:fd:ed:
42:93:fe:9e:81:ce:93:a9:b5:7e:de:71:02:6b:69:
97:af:74:3b:b1:e7:d3:5d:69:c3:36:4c:da:f9:e5:
42:7f:e8:0b:0e:dd:5e:fb:c8:cb:32:7d:db:a5:16:
f5:f2:75:55:f8:0f:f6:c7:38:37:04:a8:3b:8f:74:
3c:71:10:47:8d:08:ed:f9:ef:09:1e:82:af:71:83:
0d:b1:93:28:9c:f1:77:ae:a8:08:64:93:c5:5a:38:
33:8c:1e:7c:3b:1c:a4:76:af:a0:51:68:2b:14:83:
5e:be:92:8b:4e:37:ff:5b:72:57:c5:fe:68:c2:8b:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:28:03:12:08:57:81:C5:2A:AC:F3:DE:4E:56:0B:81:94:47:82:25
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/0CgDEghXgcUqrPPeTlYLgZRHgiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.225.0/24
89.116.32.0/21
89.117.80.0/22
Signature Algorithm: sha256WithRSAEncryption
26:02:fa:3a:b9:08:1d:ee:16:c9:21:35:86:40:c1:55:11:67:
5b:d9:3e:5e:64:60:73:6b:2c:8a:57:34:2b:61:44:88:dc:fc:
89:af:73:30:98:65:f4:f4:fc:fd:de:0e:76:e4:3f:8e:2b:6e:
8e:2b:49:fd:a9:40:02:03:c8:08:cd:23:80:3a:4d:c9:66:18:
8f:85:2f:4e:22:66:5c:d7:ad:1e:4b:c4:e2:69:3b:15:54:60:
9e:44:4e:e4:b6:87:b9:0c:52:9a:7e:85:3b:32:8b:44:c5:d4:
99:05:bf:65:04:8d:41:af:db:9a:e5:ae:f8:b5:13:e5:af:4f:
a3:82:fc:ac:d6:eb:71:b4:ee:91:72:95:7f:d4:2b:82:c6:73:
96:40:1b:6f:91:f9:67:a7:df:54:d5:0c:28:e9:c9:cf:4c:0d:
60:25:50:25:5a:be:d3:90:e3:cf:aa:76:dc:87:a6:f6:12:e7:
16:9b:bd:ab:aa:e9:ec:af:56:3e:71:f9:68:c9:ed:6d:99:a3:
24:3c:7f:42:0b:17:2c:67:94:01:15:e1:67:cd:2a:44:15:f2:
f3:f8:56:62:89:5d:95:15:8d:0b:de:b7:60:07:2c:77:79:7b:
3e:4d:97:ce:d5:3f:bb:18:67:32:5e:b6:58:6b:ca:21:31:2a:
d7:c0:de:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org