Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-VtG5HkR6opbF5lFC_lAOKwDHiE.roa
File: 1-VtG5HkR6opbF5lFC_lAOKwDHiE.roa (raw, json)
Hash identifier: ZIeuMrAXg57aQI+aQ8FzL0NqSrztxv+IHz/ZMBM+kCg=
Subject key identifier: F9:5B:46:E4:79:11:EA:8A:5B:17:99:45:0B:F9:40:38:AC:03:1E:21
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A45E727
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-VtG5HkR6opbF5lFC_lAOKwDHiE.roa
Signing time: Mon 11 Apr 2022 07:47:14 +0000
ROA not before: Mon 11 Apr 2022 07:47:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15419
IP address blocks: 84.46.170.0/23 maxlen: 23
82.140.178.0/24 maxlen: 24
82.140.189.0/24 maxlen: 24
86.38.3.0/24 maxlen: 24
86.38.8.0/21 maxlen: 21
89.116.4.0/22 maxlen: 22
89.116.1.0/24 maxlen: 24
89.116.2.0/23 maxlen: 23
89.116.8.0/22 maxlen: 22
217.9.241.0/24 maxlen: 24
89.116.15.0/24 maxlen: 24
89.116.12.0/23 maxlen: 23
89.116.16.0/23 maxlen: 23
217.9.242.0/24 maxlen: 24
89.116.19.0/24 maxlen: 24
89.116.20.0/22 maxlen: 22
217.9.254.0/23 maxlen: 23
89.116.41.0/24 maxlen: 24
89.116.42.0/23 maxlen: 23
185.149.152.0/22 maxlen: 22
89.116.112.0/23 maxlen: 23
89.116.116.0/22 maxlen: 22
89.116.102.0/23 maxlen: 23
89.116.220.0/23 maxlen: 23
82.140.131.0/24 maxlen: 24
89.116.236.0/23 maxlen: 23
89.116.168.0/23 maxlen: 23
2a02:2630::/29 maxlen: 29
2a02:2630::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172353319 (0xa45e727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 11 07:47:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f95b46e47911ea8a5b1799450bf94038ac031e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:09:9b:ad:42:19:b1:4d:79:aa:f2:1f:41:
f5:e6:8f:12:2a:92:d1:a6:cf:b6:c6:9f:6b:be:7c:
c1:f4:98:59:69:c6:22:e4:7e:2c:22:d4:0c:13:f8:
05:15:b3:3a:d6:ab:47:38:ea:d8:c3:89:e8:13:e4:
04:f3:6a:25:4f:d3:95:77:9e:ab:cd:ef:8b:6b:b8:
47:78:a4:b6:0f:ec:c1:81:7c:80:a1:a3:66:ef:09:
96:c1:1a:67:bc:88:77:d7:bd:c8:e3:12:90:ab:d2:
2b:71:a7:c9:f5:04:ae:34:a7:29:20:bf:e7:4c:ca:
79:16:36:fc:5d:a1:6b:6d:5e:cc:ac:97:f1:ec:c0:
7a:65:24:59:22:de:5c:c8:7a:0d:c4:ac:02:2a:09:
ea:a3:ef:ed:23:80:0d:06:b4:43:95:8c:8b:34:d3:
8b:ad:38:90:31:4c:00:b8:19:9f:15:49:a2:59:9a:
ce:eb:15:93:58:5d:a2:40:2c:c6:b7:34:42:a6:d1:
9d:7e:38:b7:98:04:9e:0a:02:84:d2:94:28:b3:67:
11:59:13:9e:70:27:99:20:82:58:13:2a:08:81:d8:
b0:ae:5e:9c:aa:ad:ac:93:76:85:d3:eb:75:74:02:
33:31:9f:2a:d9:80:f5:7d:df:c2:3d:ea:a8:a7:31:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5B:46:E4:79:11:EA:8A:5B:17:99:45:0B:F9:40:38:AC:03:1E:21
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-VtG5HkR6opbF5lFC_lAOKwDHiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.131.0/24
82.140.178.0/24
82.140.189.0/24
84.46.170.0/23
86.38.3.0/24
86.38.8.0/21
89.116.1.0-89.116.13.255
89.116.15.0-89.116.17.255
89.116.19.0-89.116.23.255
89.116.41.0-89.116.43.255
89.116.102.0/23
89.116.112.0/23
89.116.116.0/22
89.116.168.0/23
89.116.220.0/23
89.116.236.0/23
185.149.152.0/22
217.9.241.0-217.9.242.255
217.9.254.0/23
IPv6:
2a02:2630::/29
Signature Algorithm: sha256WithRSAEncryption
c7:b7:54:5e:ea:d4:d5:54:e8:b2:34:15:db:8a:cf:a6:74:18:
bb:bc:c7:f5:fb:0b:7f:2c:08:f8:58:48:1a:86:df:a3:29:41:
a5:93:7f:36:59:a8:2d:65:6b:91:8d:07:b9:2e:96:6f:b4:cc:
9b:61:bb:60:26:96:fe:8e:2f:fb:a2:e3:5c:e6:fb:17:d4:fa:
a1:78:91:e6:e1:b0:57:b1:32:2b:4f:d6:35:8d:3b:c8:38:b5:
a1:20:f0:20:9e:42:4b:d8:f5:52:68:16:8c:98:c2:3e:25:73:
0c:99:e1:b7:4b:6e:30:ff:e6:35:fa:d0:ef:be:f9:c8:d4:b3:
46:82:63:9f:73:75:89:c7:b6:41:26:08:d3:0e:c7:ce:cf:5c:
84:e7:60:8d:66:04:d7:7e:36:92:52:be:97:89:59:20:f4:a7:
b6:33:54:3e:71:c8:01:16:15:a9:bd:f2:fe:16:d8:2a:7e:b0:
35:39:eb:f7:29:b1:5b:53:5e:5d:25:43:f0:b4:cd:fa:bb:20:
dc:d7:98:af:0b:86:c4:16:fe:ff:3c:21:89:8b:17:32:18:4f:
60:c7:fb:28:56:5a:c0:1a:26:85:96:d2:1d:d6:4a:99:0b:b5:
0a:45:cc:49:76:6a:da:f7:4f:bb:9c:8c:81:33:5b:f8:b8:99:
97:55:db:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org