Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4ieaCm3KyAHAt-IhHHvwcwAPmZM.roa
File: 4ieaCm3KyAHAt-IhHHvwcwAPmZM.roa (raw, json)
Hash identifier: 2QSKSLGggYu6+FoQws8gsBhGc/IzhldmTwQ02Pcy+fE=
Subject key identifier: E2:27:9A:0A:6D:CA:C8:01:C0:B7:E2:21:1C:7B:F0:73:00:0F:99:93
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182498563AA859A957BA8B5B1BD4829FDEB
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4ieaCm3KyAHAt-IhHHvwcwAPmZM.roa
Signing time: Fri 29 Jul 2022 10:34:14 +0000
ROA not before: Fri 29 Jul 2022 10:34:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 89.117.80.0/22 maxlen: 24
89.116.32.0/21 maxlen: 24
89.116.180.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:85:63:aa:85:9a:95:7b:a8:b5:b1:bd:48:29:fd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 29 10:34:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2279a0a6dcac801c0b7e2211c7bf073000f9993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:68:c3:ac:64:e8:06:2e:5b:7f:7b:4a:9f:
26:0b:9e:81:fa:34:bf:69:2f:e7:54:92:df:a5:60:
fc:da:68:2c:72:dc:16:3d:f6:8d:40:6c:1c:ea:07:
7c:8d:87:3c:91:1a:3a:2f:19:a9:c2:86:a9:eb:77:
d3:33:ea:89:d3:7f:4a:a0:26:4c:71:90:b7:f8:b2:
7c:ac:4f:24:53:14:62:58:fe:42:8a:d3:ab:af:3f:
0a:cb:6a:6d:e0:63:e3:f4:de:96:c8:16:01:ab:48:
e1:1b:20:80:19:f5:2d:ce:be:e0:ab:05:0e:79:78:
f2:29:0f:c3:00:f8:ea:49:85:60:65:80:b2:37:a9:
38:61:de:3b:95:06:d4:82:87:b8:8c:3d:e0:6e:10:
82:49:3c:19:1c:7d:b9:7f:42:8a:7a:e9:11:6d:aa:
a0:25:fa:da:9d:35:b6:71:90:6e:34:f4:fd:08:c2:
a3:b6:a9:fb:b2:19:5f:d1:e6:9c:ed:d3:02:be:08:
5c:77:13:b2:d5:7a:98:87:05:83:f4:00:b2:80:ac:
5e:84:bb:32:b4:19:aa:8d:1d:c6:b6:0e:04:4b:f9:
af:0f:ba:1b:27:ed:23:48:db:47:61:e7:0b:6e:5f:
ef:cd:00:38:8d:06:fb:3a:3e:01:9c:c2:0d:ec:9a:
c0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:27:9A:0A:6D:CA:C8:01:C0:B7:E2:21:1C:7B:F0:73:00:0F:99:93
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4ieaCm3KyAHAt-IhHHvwcwAPmZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
89.116.32.0/21
89.116.180.0/22
89.117.80.0/22
Signature Algorithm: sha256WithRSAEncryption
27:db:df:6b:2f:1a:d1:27:a9:2d:71:cc:8a:ac:43:22:26:5c:
fa:73:ee:2d:91:39:93:14:73:84:65:f4:e1:63:b4:fb:3a:20:
bc:8e:42:d9:f7:e4:d1:53:5d:a8:d0:75:1d:c0:78:eb:52:8b:
ca:3b:f4:7b:8a:62:84:a4:03:5a:14:0b:3c:fa:8d:ac:a0:bd:
33:58:4e:f4:7e:99:89:48:29:be:f2:21:df:ac:d6:7b:18:55:
3f:ae:76:31:d1:89:08:b4:65:80:3f:e4:01:1a:c7:65:a2:1d:
50:94:6b:b7:ae:52:38:f4:61:92:be:fd:9b:b7:e6:0f:2e:b6:
02:d2:cd:f1:db:5a:1a:4a:b4:ca:c4:cc:b1:81:36:2c:2b:8e:
71:77:ee:1b:5b:8f:05:50:7f:66:96:70:7a:72:b0:03:8b:24:
58:05:bb:6a:a8:ba:31:0c:e2:26:6e:db:30:bb:d7:62:19:89:
8f:ee:3f:5d:09:dc:98:de:19:3a:9c:1c:ac:b7:01:75:95:db:
3e:bc:c0:ca:78:6e:b2:ce:7c:5e:a9:56:b6:0b:e1:92:8c:4a:
af:59:51:88:ec:89:4c:67:86:0e:55:26:cd:9f:05:e3:93:68:
6f:41:e8:f4:ec:49:0e:3b:b4:aa:5c:78:f5:96:d4:8e:dc:d2:
34:17:46:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org