Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/45EFs8rCGOF8xcI4tSJY6CHRozo.roa
File: 45EFs8rCGOF8xcI4tSJY6CHRozo.roa (raw, json)
Hash identifier: 4PYbNlb6fwWuHd1ZpRQYJj5i8Me+cKUqnB7DPD/06ys=
Subject key identifier: E3:91:05:B3:CA:C2:18:E1:7C:C5:C2:38:B5:22:58:E8:21:D1:A3:3A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B5471A7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/45EFs8rCGOF8xcI4tSJY6CHRozo.roa
Signing time: Sat 11 Jun 2022 14:53:02 +0000
ROA not before: Sat 11 Jun 2022 14:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 89.117.68.0/24 maxlen: 24
89.116.236.0/24 maxlen: 24
89.116.234.0/24 maxlen: 24
89.116.244.0/24 maxlen: 24
84.46.170.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
89.117.35.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190083495 (0xb5471a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 11 14:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e39105b3cac218e17cc5c238b52258e821d1a33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:36:88:0b:7d:74:92:94:c6:09:c5:c1:a2:
b4:b8:c2:a8:81:8a:c1:38:92:e4:50:22:f4:72:63:
38:1f:bd:cc:49:d2:71:b6:ca:ae:9a:53:a5:35:3d:
31:83:8e:b6:86:18:f1:51:e3:5b:7d:b7:fd:8b:8a:
94:fd:3e:c4:7e:58:2a:cb:3c:c3:53:63:a0:1e:9a:
b4:f0:ef:b0:8f:a8:8b:3e:97:f0:ab:21:24:75:1d:
02:2d:c9:c3:8f:b3:78:a9:c7:70:d5:f2:b5:38:53:
f9:38:7f:dc:d2:d3:ca:3e:69:08:f9:39:9d:12:83:
5d:ad:c1:b7:cc:f9:cd:e8:62:04:ce:24:f0:94:51:
fc:75:6f:f9:02:52:30:3e:f8:e4:1d:d7:a5:ff:b6:
35:a7:91:b7:7c:b2:00:c7:e8:81:68:48:7d:25:1d:
d5:b1:a5:50:a0:ea:52:c0:30:38:a1:a2:93:c6:a7:
c0:c8:ef:e3:f2:cb:1b:77:b6:14:64:dd:b1:1d:4b:
39:0b:ce:b1:81:26:b6:25:bb:80:a5:5e:e6:d0:b2:
7a:02:7d:08:a9:72:93:ba:04:0d:20:56:a4:fe:64:
dd:d6:f4:a8:fc:c7:8e:67:8a:cb:df:d7:f6:57:01:
61:74:9c:e9:31:73:5b:2c:07:7d:d8:da:4b:0d:cf:
4b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:91:05:B3:CA:C2:18:E1:7C:C5:C2:38:B5:22:58:E8:21:D1:A3:3A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/45EFs8rCGOF8xcI4tSJY6CHRozo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/24
86.38.175.0/24
86.38.190.0/24
89.116.70.0/24
89.116.102.0/24
89.116.234.0/24
89.116.236.0/24
89.116.244.0/24
89.117.35.0/24
89.117.68.0/24
89.117.218.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f1:22:30:27:66:88:b1:e9:b0:48:38:26:4f:2d:25:c8:31:
4e:8d:fe:7f:df:28:7e:5c:59:a9:1d:98:01:8c:a6:62:42:e7:
eb:43:c2:21:20:59:70:bb:93:27:ba:43:f4:62:62:fb:cf:48:
8b:79:69:da:5d:48:f0:9d:60:28:b8:8a:88:cb:a5:85:b6:40:
81:61:e9:4a:24:29:78:eb:8f:76:cb:da:84:0b:fc:04:f3:bd:
7f:d6:e7:36:44:60:b2:39:72:8c:46:f1:f4:5b:1e:62:17:fe:
80:d6:4b:e0:8d:28:71:f1:a4:8c:26:45:e4:00:67:63:09:24:
be:ca:b4:f8:0c:56:25:a5:eb:8c:2a:5c:36:3f:21:ec:f2:88:
ca:56:ad:33:91:20:4e:78:4c:a5:56:3d:17:e8:85:29:aa:27:
d5:fa:c7:78:5c:fc:3b:03:51:03:4b:a1:be:f5:ea:ef:2e:cb:
54:be:ba:b0:64:24:75:be:20:39:75:bf:88:76:9f:c6:e8:d1:
5d:fb:4a:8d:99:7c:44:8f:ac:aa:e6:8f:c8:3f:06:be:6e:d0:
93:50:84:fd:7b:0e:c2:ac:53:05:66:f1:b1:83:52:6f:89:bb:
21:aa:63:11:8f:75:9d:9f:9e:af:46:2c:7f:c5:c5:6d:51:52:
38:c7:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org