Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5IO7oioSx-GnucsbX2tccFLHWvw.roa
File: 5IO7oioSx-GnucsbX2tccFLHWvw.roa (raw, json)
Hash identifier: vJ+6rTRJGtvfLDwS8hUUarkGzfzBvJcg3HWfsdAALGA=
Subject key identifier: E4:83:BB:A2:2A:12:C7:E1:A7:B9:CB:1B:5F:6B:5C:70:52:C7:5A:FC
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183411E7E6F93830DB523AD2C66A84223EC
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5IO7oioSx-GnucsbX2tccFLHWvw.roa
Signing time: Thu 15 Sep 2022 12:27:40 +0000
ROA not before: Thu 15 Sep 2022 12:27:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 89.117.190.0/24 maxlen: 24
86.38.151.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.116.180.0/22 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
84.46.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:41:1e:7e:6f:93:83:0d:b5:23:ad:2c:66:a8:42:23:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 15 12:27:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e483bba22a12c7e1a7b9cb1b5f6b5c7052c75afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:0b:f6:3c:2d:fe:a7:7a:54:bf:42:50:69:
6d:86:98:4f:81:7e:ec:0d:0b:aa:e2:3f:94:1f:3d:
87:d8:ec:08:de:61:43:b3:50:a2:5b:cd:d4:93:cf:
4a:17:d7:75:25:21:43:bc:04:ff:48:30:d9:be:a6:
08:61:7e:85:c2:d6:27:4d:dd:36:64:72:5b:06:54:
28:bc:3d:39:8a:c1:30:0c:fe:cd:a0:9b:95:2c:3d:
4d:b1:c2:06:ea:80:d5:6c:f6:32:6f:7d:21:49:aa:
3f:08:fb:74:eb:5d:69:08:a7:ea:3a:11:55:ac:48:
21:7a:ae:7d:e7:cc:95:9a:f0:96:2e:89:25:be:28:
a6:33:6c:4c:c9:5c:fc:f7:2c:59:ac:c2:50:55:6c:
04:24:32:b0:54:ef:3d:3b:74:d9:4e:d0:f3:50:2b:
ee:c6:2b:4e:cd:57:b1:68:ee:78:20:e8:5b:e8:d8:
8a:d4:a9:c0:5f:b6:59:20:f1:42:7b:e9:31:69:47:
50:bb:ec:c8:1d:1f:1e:fc:3a:92:53:38:bf:67:b8:
9d:93:d7:8d:ad:2f:7a:86:87:f3:c9:a1:21:72:af:
e6:22:c7:c9:7b:a9:e7:cd:ea:9b:c5:1e:66:d8:50:
2d:61:a1:e4:71:4f:a5:bd:6a:a4:c8:03:80:bd:92:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:83:BB:A2:2A:12:C7:E1:A7:B9:CB:1B:5F:6B:5C:70:52:C7:5A:FC
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/5IO7oioSx-GnucsbX2tccFLHWvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.151.0/24
86.38.156.0/24
86.38.235.0/24
89.116.96.0/24
89.116.180.0/22
89.117.139.0/24
89.117.190.0/24
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:c6:f3:cc:c4:9a:44:93:30:8d:9c:04:67:20:60:92:da:21:
bf:7e:37:4c:85:69:34:36:50:c2:3c:b5:d3:9b:d1:52:b7:4a:
a2:0b:b5:80:14:9d:1b:ac:91:02:6f:26:be:60:74:e3:32:e3:
84:1b:f8:2f:a7:0d:08:1e:9a:fd:89:57:4d:24:e3:cd:26:53:
8d:aa:1f:e2:e7:c6:da:08:4a:c1:43:77:98:b5:57:cd:48:af:
84:76:e8:09:25:f4:bc:65:ed:80:b7:42:0a:40:58:c8:72:6d:
b1:27:a1:c5:a8:b0:79:6a:f6:28:ec:dc:01:34:75:03:6a:54:
07:b7:9c:e0:6c:e4:b7:82:bf:2b:00:2e:b2:c3:ba:0d:7c:ea:
b3:a2:d9:2c:74:f8:5c:cb:3c:2f:51:99:a1:bf:6f:ed:52:93:
5f:7b:b1:7d:2f:07:2a:12:61:2b:8b:76:59:27:81:26:3f:82:
26:af:bd:c2:37:8b:40:b1:90:f6:75:8c:67:4f:6d:cc:71:2d:
2d:e7:a3:fb:62:a0:73:e7:17:d5:be:00:46:1c:c4:0a:c1:f8:
00:d5:2a:38:ac:eb:b9:1b:e2:a0:b5:78:42:13:06:1a:3a:70:
18:8f:62:d6:79:c0:d3:77:47:5b:0f:06:d5:2f:f5:7a:66:57:
4f:e2:c7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org