Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/6vYB7rLuU8AdPFlzRJ4DNM0ii9I.roa
File: 6vYB7rLuU8AdPFlzRJ4DNM0ii9I.roa (raw, json)
Hash identifier: qibGvm3Jw3KvCMxpMqHJlVh0L+hcpyZ864vnPt2Bbtk=
Subject key identifier: EA:F6:01:EE:B2:EE:53:C0:1D:3C:59:73:44:9E:03:34:CD:22:8B:D2
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09701318
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/6vYB7rLuU8AdPFlzRJ4DNM0ii9I.roa
Signing time: Thu 10 Feb 2022 07:03:19 +0000
ROA not before: Thu 10 Feb 2022 07:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 89.117.109.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
82.140.182.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
86.38.180.0/23 maxlen: 24
89.117.120.0/22 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.242.0/23 maxlen: 24
86.38.241.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
86.38.189.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.214.0/24 maxlen: 24
86.38.216.0/22 maxlen: 24
86.38.225.0/24 maxlen: 24
86.38.226.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.117.11.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158339864 (0x9701318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 10 07:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaf601eeb2ee53c01d3c5973449e0334cd228bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:94:4d:51:b7:74:04:00:8a:84:19:16:21:
18:c1:f7:3c:0b:a6:3b:37:15:55:88:2e:c3:ab:10:
7f:bc:59:90:13:f3:3e:e4:55:a4:bc:f0:a4:ff:66:
f8:4b:2e:bf:d7:3b:d8:80:32:b1:15:6b:ff:f5:0f:
fc:8c:37:31:0a:fe:28:69:14:87:1c:73:33:62:c8:
d9:00:78:d5:f0:25:27:84:e6:ea:fd:e5:6f:ae:f0:
0b:57:96:c1:82:24:a8:66:20:42:7b:1a:ee:64:ff:
25:1c:60:b0:63:10:92:c3:ae:03:c0:ea:f3:e7:85:
9d:98:97:88:33:08:a9:56:62:d3:ed:4b:71:9c:ed:
1a:b2:a4:27:39:ee:1a:2b:2b:ad:cb:46:bc:c8:98:
18:09:81:dd:a3:13:9c:88:0d:04:53:69:58:72:f0:
8e:d9:d4:5f:0b:59:bc:0d:47:8f:a9:6e:16:f8:88:
a8:9b:d9:d6:d4:27:7f:6a:ad:a0:66:c9:dd:04:ab:
2c:20:55:50:ea:d4:d7:7b:97:bd:8d:38:99:88:2e:
8e:db:b7:b8:be:2f:cc:e8:f2:3c:1b:f0:78:10:4b:
2e:27:f8:61:f3:ed:14:6c:20:7b:5f:5b:77:1d:7b:
85:94:7d:dc:08:86:57:9b:b8:b9:94:19:32:c4:bb:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F6:01:EE:B2:EE:53:C0:1D:3C:59:73:44:9E:03:34:CD:22:8B:D2
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/6vYB7rLuU8AdPFlzRJ4DNM0ii9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/23
84.46.200.0/24
86.38.175.0/24
86.38.180.0/23
86.38.189.0-86.38.190.255
86.38.200.0/24
86.38.214.0/24
86.38.216.0/22
86.38.225.0-86.38.226.255
86.38.238.0/24
86.38.241.0-86.38.243.255
89.116.56.0/24
89.116.96.0/24
89.116.135.0/24
89.116.156.0/24
89.116.158.0/24
89.116.175.0/24
89.116.177.0/24
89.116.218.0/24
89.117.11.0/24
89.117.109.0/24
89.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
05:5e:74:b8:a2:96:82:c0:01:ba:c2:0b:0f:90:e3:57:1c:29:
f0:65:13:0e:05:1a:04:2f:b4:7f:19:23:90:bd:3c:7b:dd:69:
73:0e:27:e9:42:62:50:b8:09:f6:fb:d9:fb:d7:61:a0:ab:58:
d1:11:28:6e:c3:ad:5c:be:e0:35:14:f9:ca:e8:4e:9d:80:c3:
a2:31:5b:a8:cc:f7:60:f7:8a:1e:cc:88:59:51:94:a8:08:11:
82:9c:5e:a1:eb:32:02:9d:58:f8:d5:99:11:72:6d:da:02:1c:
09:1a:1c:5e:3c:71:8b:f4:f9:8f:77:e1:df:34:00:4c:5d:93:
54:4f:21:ea:31:e7:ec:63:ef:9a:00:9a:71:c9:8f:ee:02:38:
b1:4f:ac:49:2c:56:3a:77:5d:bb:71:52:43:9e:24:ba:42:d6:
ad:71:df:9e:5f:5c:ea:db:c3:ad:ad:52:da:ae:2d:9f:a6:66:
67:c3:5f:d9:6c:6d:56:60:68:c4:b6:8b:9c:74:21:23:db:49:
e2:79:d7:d6:26:e8:7a:5c:fb:f6:8d:85:d0:a3:0e:b0:bc:bc:
f5:87:d1:40:ed:8f:b0:6c:a4:7e:1d:a5:bf:b4:72:ac:51:80:
75:62:e5:7e:56:bb:b9:eb:35:b0:85:b1:6d:88:b2:f5:90:f1:
5e:b6:c0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org