Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/3NdUl1GvIZkUWvN9c4OvLxvJOWs.roa
File: 3NdUl1GvIZkUWvN9c4OvLxvJOWs.roa (raw, json)
Hash identifier: kbHUfBfHse/4yDfJWunerUa28HpI9la26FtcGnRagn4=
Subject key identifier: DC:D7:54:97:51:AF:21:99:14:5A:F3:7D:73:83:AF:2F:1B:C9:39:6B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B9DE60B
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/3NdUl1GvIZkUWvN9c4OvLxvJOWs.roa
Signing time: Sun 26 Jun 2022 12:39:22 +0000
ROA not before: Sun 26 Jun 2022 12:39:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 89.117.68.0/24 maxlen: 24
89.116.236.0/24 maxlen: 24
89.116.234.0/24 maxlen: 24
89.116.244.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
89.117.35.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194897419 (0xb9de60b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 26 12:39:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dcd7549751af2199145af37d7383af2f1bc9396b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:e3:32:22:7a:1e:e5:d2:d5:bc:92:61:06:
91:e8:d2:14:39:eb:d2:a2:61:ea:6a:34:01:05:27:
af:5c:2c:26:fb:60:ec:77:a8:34:31:4b:bb:ab:8d:
98:48:2f:cd:c7:3f:8b:a6:4f:7e:af:34:98:ff:1e:
c2:37:80:8b:ef:48:2b:1f:93:02:c3:58:ee:c2:e9:
60:c8:ae:c0:3e:34:2f:c7:28:2c:8f:fd:25:1f:fb:
b2:71:4a:50:df:ae:a1:19:6e:34:e4:55:04:55:bc:
25:bf:7a:e2:6f:9d:af:3e:80:36:af:99:91:5d:91:
72:da:aa:34:32:d8:90:55:96:c8:9a:21:43:0d:d8:
20:ae:a2:07:e8:97:30:55:9c:9f:82:58:9c:5d:f4:
90:72:88:5c:68:55:a3:6f:18:0b:30:fa:02:8d:9b:
ea:0f:b4:fb:2a:c1:61:66:dc:3b:92:40:d1:12:c1:
c8:80:fd:bd:eb:d5:21:42:c6:64:bf:96:dd:df:62:
26:a4:7e:3c:9b:c2:15:c3:c7:3f:bb:ba:31:13:e7:
01:a2:09:37:eb:0a:c9:48:17:09:17:53:df:fe:34:
b6:a2:f6:d5:b8:af:d4:42:84:86:a5:99:b4:d5:e9:
cf:39:99:8f:67:93:8d:3a:38:88:48:8e:42:d2:b9:
81:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D7:54:97:51:AF:21:99:14:5A:F3:7D:73:83:AF:2F:1B:C9:39:6B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/3NdUl1GvIZkUWvN9c4OvLxvJOWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.175.0/24
86.38.190.0/24
89.116.70.0/24
89.116.102.0/24
89.116.234.0/24
89.116.236.0/24
89.116.244.0/24
89.117.35.0/24
89.117.68.0/24
89.117.218.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:b7:99:d5:ef:ed:f0:22:e2:95:01:bc:65:45:88:4e:a2:29:
26:9e:0b:0d:dd:8a:b1:34:24:27:f2:7a:25:ec:d8:33:9d:32:
bc:e0:54:6b:51:4c:c5:aa:19:4f:97:3c:d2:cd:61:c6:38:f8:
a3:49:f3:81:f5:1b:7f:f1:04:47:f9:b5:c7:3f:84:f2:93:0b:
74:92:90:22:4e:0e:89:bd:ec:32:dc:ab:d4:54:89:2f:18:dd:
6c:1c:58:90:46:67:c5:c1:e9:ae:e5:38:0f:9d:36:df:32:eb:
0b:fd:83:1e:1d:8b:86:6e:e7:ee:6e:28:66:49:99:af:0f:81:
22:37:bd:d5:a1:08:f6:c4:f7:80:d7:5d:5f:73:ce:e6:cd:0d:
e7:20:e4:9c:a8:08:ec:64:d6:c2:d9:a5:e9:07:4c:39:e1:60:
ac:34:26:29:9e:cb:63:f8:04:c7:65:31:c1:0f:6e:41:0f:f2:
f2:0d:30:61:ab:e1:a0:e7:82:34:6d:58:b6:6b:01:95:e9:b1:
ff:18:f4:03:b8:c5:24:e0:b0:32:4e:ad:25:42:b2:6d:94:e0:
81:f7:90:2a:b5:92:94:31:4e:d4:59:17:e4:84:79:68:39:fe:
a1:9c:f7:6e:5f:7a:03:ce:f0:a3:0d:71:bf:85:e8:ad:8e:77:
5c:8d:2d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org