Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4v1CofsSPlWXuhvGuwhGqBc5yxE.roa
File: 4v1CofsSPlWXuhvGuwhGqBc5yxE.roa (raw, json)
Hash identifier: 2BCX6egO6CpOtz81SOIXnHWFi0V169fx4QNDNvrF8V4=
Subject key identifier: E2:FD:42:A1:FB:12:3E:55:97:BA:1B:C6:BB:08:46:A8:17:39:CB:11
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B1602BE
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4v1CofsSPlWXuhvGuwhGqBc5yxE.roa
Signing time: Fri 27 May 2022 06:39:14 +0000
ROA not before: Fri 27 May 2022 06:39:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.117.129.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
89.116.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185991870 (0xb1602be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 27 06:39:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2fd42a1fb123e5597ba1bc6bb0846a81739cb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:df:12:e5:df:c3:34:2b:92:c7:33:2c:26:81:
39:53:92:cf:e1:17:40:01:3f:f8:b5:b1:11:5c:db:
dd:d9:82:f5:d3:e4:fd:8e:13:65:be:bd:56:5e:6a:
af:a3:fc:64:76:86:e9:38:63:41:8a:86:53:c5:39:
ce:35:cb:05:c9:78:0d:33:25:bd:9b:a7:4a:a0:10:
a0:a4:14:69:b4:a7:9c:33:b7:f2:7d:b0:81:c2:ef:
ea:19:8f:53:52:c7:50:27:b6:67:9d:90:bb:d4:6a:
33:cd:92:7d:e0:b6:f1:c1:d9:1b:bb:00:a3:0d:ed:
a8:14:ef:40:01:17:40:d3:b4:e3:ee:9a:ae:69:74:
43:b6:08:31:ea:05:95:e9:20:89:48:42:ec:7f:98:
af:d2:ab:bd:5a:73:37:d5:c8:5f:65:cb:b5:6e:8e:
aa:d4:42:c8:eb:92:a3:02:17:6b:f2:7b:e2:89:cf:
ca:88:93:cc:98:6b:47:b5:83:18:42:ca:80:be:90:
2c:a7:cc:ca:cc:bf:6e:ef:9d:ec:92:5d:fc:4d:2c:
03:0d:64:31:26:05:bf:76:12:07:fc:5f:ee:af:7c:
f0:39:b8:61:14:45:6a:de:a4:8e:80:d9:41:a1:51:
c5:98:38:4b:c1:ea:87:5d:28:32:e0:9c:14:f8:71:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FD:42:A1:FB:12:3E:55:97:BA:1B:C6:BB:08:46:A8:17:39:CB:11
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/4v1CofsSPlWXuhvGuwhGqBc5yxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.92.0/24
89.116.132.0/24
89.116.135.0/24
89.116.141.0/24
89.116.150.0/24
89.116.163.0/24
89.116.166.0/24
89.116.175.0/24
89.116.177.0/24
89.116.179.0/24
89.116.186.0/24
89.116.218.0/24
89.116.252.0/23
89.116.255.0/24
89.117.109.0/24
89.117.129.0/24
89.117.190.0/24
89.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f5:ee:9a:15:82:c0:dc:8f:5a:7e:08:fc:b3:6a:ee:8c:48:
c5:81:f5:d8:90:19:5f:00:f3:f1:4e:07:d2:9a:f1:84:f1:bf:
73:36:55:0b:cf:6b:00:e1:13:a6:fa:c1:b1:87:68:78:6b:f8:
b4:f5:db:23:00:d9:07:20:9d:64:d5:31:0d:4e:d5:e9:26:94:
ed:ab:9b:32:1a:9d:37:2b:71:28:75:89:56:94:26:92:ea:7a:
db:7f:30:5e:e1:a3:f1:1d:a2:65:ea:52:80:72:3d:ed:59:52:
aa:21:ff:77:8d:8d:d6:49:b3:ff:6b:c0:41:bf:98:3f:f5:1a:
40:94:3a:cb:2e:b4:c8:c2:ab:ba:4f:36:76:8f:e4:fc:16:d6:
47:48:f9:21:6d:39:09:6a:6d:92:b2:fa:61:cd:cc:05:9d:1f:
21:c7:f1:88:55:a5:76:cd:2c:8c:13:14:fe:b7:e9:08:ea:8a:
be:92:d5:42:3e:15:2f:fe:34:e5:59:4a:cb:e1:fe:b5:96:9a:
2f:60:28:79:ab:cf:18:52:a8:c2:53:9c:b2:cb:77:bb:3d:6b:
b6:f6:80:4a:c3:2a:3f:4d:d4:f0:e8:5f:c1:a7:96:c7:20:8c:
3b:28:9c:18:3d:23:9e:64:2f:c9:87:e8:be:8e:bd:31:d7:4f:
d1:95:1c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org