Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/7fuO-UFrqvj3qAaU5F1rcGwf2DE.roa
File: 7fuO-UFrqvj3qAaU5F1rcGwf2DE.roa (raw, json)
Hash identifier: VxAY6WnqU2b0rfy7oSd6H0UPdm9RT5WepKGnldabm7U=
Subject key identifier: ED:FB:8E:F9:41:6B:AA:F8:F7:A8:06:94:E4:5D:6B:70:6C:1F:D8:31
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B2B8593
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/7fuO-UFrqvj3qAaU5F1rcGwf2DE.roa
Signing time: Thu 02 Jun 2022 10:04:21 +0000
ROA not before: Thu 02 Jun 2022 10:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 89.116.224.0/21 maxlen: 24
89.116.246.0/23 maxlen: 24
89.117.16.0/21 maxlen: 24
89.116.80.0/21 maxlen: 24
86.38.4.0/23 maxlen: 24
86.38.220.0/23 maxlen: 24
84.46.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187401619 (0xb2b8593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 2 10:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=edfb8ef9416baaf8f7a80694e45d6b706c1fd831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:e7:b6:84:e4:3c:3f:69:ba:3d:14:99:cc:
1c:29:9e:22:e8:6b:07:9e:1b:9a:c8:77:ac:54:3b:
7c:00:92:f1:eb:7f:30:79:25:2b:31:e4:78:91:d1:
9f:90:5d:f5:dc:bb:19:12:64:fc:b2:a4:38:ed:78:
b6:32:61:e4:69:cc:53:71:40:50:c6:ea:5b:eb:ff:
b3:8c:5f:c4:2b:e6:db:2f:cd:ff:e9:53:75:43:c0:
70:ae:51:2b:da:bd:41:c5:4e:cb:e4:a5:8f:bd:85:
14:08:8e:11:5b:1c:fa:b0:6d:d1:c3:ad:39:70:ec:
0d:e0:3b:88:9c:1a:35:b7:0b:eb:bc:81:ce:e2:a1:
a3:51:9f:d3:be:f8:c7:b4:80:6b:73:35:56:b5:f7:
97:70:d1:04:3d:9b:17:ee:b5:a0:69:b8:5d:17:9e:
eb:c4:de:55:21:d4:58:3c:6c:08:d5:28:de:d9:25:
c0:de:18:94:03:44:c3:ac:73:e8:e8:0a:c0:8c:77:
17:98:46:6c:60:d0:6e:e2:9b:35:58:de:f8:7c:74:
47:60:86:a2:b3:ec:fe:ef:f4:74:c3:af:e4:88:23:
ca:4c:4c:1f:22:f1:27:51:f9:ac:49:6a:6b:07:9b:
13:2c:47:02:8a:ba:ef:0a:9f:23:d4:cd:1f:40:13:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FB:8E:F9:41:6B:AA:F8:F7:A8:06:94:E4:5D:6B:70:6C:1F:D8:31
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/7fuO-UFrqvj3qAaU5F1rcGwf2DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.4.0/23
86.38.220.0/23
89.116.80.0/21
89.116.224.0/21
89.116.246.0/23
89.117.16.0/21
Signature Algorithm: sha256WithRSAEncryption
d0:c4:a9:b9:17:fe:ee:18:73:00:d2:de:17:ba:e3:8e:ad:2d:
43:0c:52:0d:f0:75:9c:f1:aa:77:d6:d5:e0:56:d2:18:96:fd:
54:33:56:1e:92:5d:22:e3:7e:74:5c:ce:90:5a:f8:83:94:1a:
00:a4:41:4c:52:31:b7:f9:ec:61:7e:11:62:9d:0d:e3:34:7a:
ad:ce:1b:9d:fd:fd:ee:32:e3:fd:31:f5:11:6f:e9:79:a1:ff:
83:65:f0:04:03:59:a7:7e:4d:67:94:f6:7e:64:7b:4d:c1:68:
de:30:52:1a:c6:c6:4a:b3:08:ea:e7:a6:b0:36:a4:02:a0:71:
39:00:49:b9:7b:af:70:73:35:17:4d:71:8d:b4:22:9d:49:62:
36:01:7a:aa:5a:8f:f0:e1:df:c0:39:e8:6a:8f:cd:fd:c9:a7:
2d:a2:0b:94:54:68:22:f5:97:5c:f4:d8:7b:e4:ac:5b:b9:0e:
b4:cc:c3:3d:e9:bc:06:b3:21:8c:23:30:c3:cc:87:33:c4:6e:
b1:53:83:ef:63:18:b3:41:8d:fb:fe:68:71:90:af:70:7c:b8:
37:02:08:c1:b2:ab:5f:ee:ec:2d:37:e1:a6:6b:fb:53:d4:24:
50:05:73:5c:2f:a5:75:86:84:97:54:f9:65:0e:5f:e3:2b:28:
09:f8:8a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org