Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/6mRdcXesXh2g_Eq4Va2RU8Taqac.roa
File: 6mRdcXesXh2g_Eq4Va2RU8Taqac.roa (raw, json)
Hash identifier: WZVEjuxGUeE0OLYeUOR66NSAxfLF8dOnjHj/viujOjk=
Subject key identifier: EA:64:5D:71:77:AC:5E:1D:A0:FC:4A:B8:55:AD:91:53:C4:DA:A9:A7
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AE38C22
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/6mRdcXesXh2g_Eq4Va2RU8Taqac.roa
Signing time: Tue 17 May 2022 09:55:30 +0000
ROA not before: Tue 17 May 2022 09:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 89.117.72.0/21 maxlen: 24
89.116.123.0/24 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.76.0/24 maxlen: 24
86.38.216.0/22 maxlen: 24
89.116.91.0/24 maxlen: 24
86.38.232.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182684706 (0xae38c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 17 09:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea645d7177ac5e1da0fc4ab855ad9153c4daa9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9c:a8:c4:78:98:03:43:39:f0:3b:85:29:ed:
e9:23:0a:c2:ef:01:55:c7:3a:e8:b9:1e:4e:65:aa:
81:f3:cc:99:bf:bd:c5:dd:7a:a7:e5:6e:4d:bb:ee:
82:27:c5:fc:11:c0:de:c3:2b:e3:08:01:bf:2c:79:
1b:7c:83:e8:b9:db:29:a6:ce:8b:f1:c7:5f:b2:d5:
d8:23:a5:12:93:c9:45:13:ea:23:4c:63:83:76:92:
3b:c1:10:2b:43:e4:a8:62:73:09:ba:a8:8d:e6:52:
fa:5a:81:07:6d:d7:b1:c4:73:81:34:b4:fe:fd:48:
6d:95:91:eb:42:e8:92:59:bd:03:33:66:53:9d:8d:
88:6d:3e:18:15:78:16:32:71:50:a5:87:1e:57:fc:
db:76:cc:2f:12:2a:df:96:7c:00:47:15:fe:79:6b:
5f:af:e7:dd:6c:33:d0:e4:a8:2d:73:d1:03:7e:5f:
99:f5:88:cd:af:48:9f:c0:cb:76:ba:21:fe:aa:03:
d7:45:90:81:b4:e5:0b:e1:0b:0a:e6:2f:1d:6a:cf:
ec:37:46:f3:ed:7e:1e:e7:18:e7:17:ef:c7:b2:d9:
c4:d1:51:2b:cc:af:f2:ef:f4:b0:be:85:4e:bb:4b:
53:d1:8f:58:51:dc:f8:bf:99:07:02:ab:bc:6e:a7:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:64:5D:71:77:AC:5E:1D:A0:FC:4A:B8:55:AD:91:53:C4:DA:A9:A7
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/6mRdcXesXh2g_Eq4Va2RU8Taqac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.216.0/22
86.38.232.0/24
89.116.76.0/24
89.116.91.0/24
89.116.123.0/24
89.116.140.0/24
89.116.202.0/24
89.116.250.0/24
89.117.72.0/21
89.117.88.0/22
89.117.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:85:6c:03:1c:7c:1e:53:e8:fe:e3:c7:13:a6:ed:44:f1:e6:
c3:3f:83:33:31:3f:3f:ac:a3:14:8f:33:2b:5e:08:38:bf:f3:
c4:d1:1a:4e:38:57:c6:65:6b:54:6b:db:cd:97:0f:7b:a5:d0:
2b:5a:17:2f:2c:9e:b5:76:d1:33:61:32:a0:f1:1c:2a:d3:e4:
eb:fe:15:3b:60:82:b3:8d:04:a0:9d:4c:fc:26:af:d5:09:fb:
7a:c2:85:a7:ee:fd:b6:66:d5:53:41:bb:55:e9:94:16:db:01:
7a:21:bb:dc:57:73:b6:7b:52:33:cc:65:d5:1d:d3:f8:38:9e:
8e:07:1b:d9:cf:7c:b0:a1:bd:d4:2b:43:b1:5a:76:16:43:8c:
86:62:2f:40:b6:3b:8f:2b:35:02:ce:da:4f:2a:6a:18:a7:c7:
40:0b:3d:64:73:db:0b:8f:c0:9f:24:b6:35:f2:f9:59:ef:0c:
ab:7e:b0:ee:db:2b:bb:09:f7:91:cb:4c:76:b9:79:f9:2e:dd:
25:d2:62:2c:ce:a8:17:a5:aa:ea:d9:93:39:72:5d:8d:6d:e6:
1e:55:a4:8c:75:43:ac:f8:30:3e:b5:5b:96:a3:dc:b1:b2:83:
ef:c5:22:e9:a3:0c:86:bc:7a:2c:06:7a:b5:f6:6f:bd:33:86:
88:3d:7e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org