Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/7sIx_2eobhBZRPaxrGmlEwpXqss.roa
File: 7sIx_2eobhBZRPaxrGmlEwpXqss.roa (raw, json)
Hash identifier: s/QVYKSyn/vahekfXifA9NuOxzmwnb1AMAwgnc1Znec=
Subject key identifier: EE:C2:31:FF:67:A8:6E:10:59:44:F6:B1:AC:69:A5:13:0A:57:AA:CB
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 098D9BB3
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/7sIx_2eobhBZRPaxrGmlEwpXqss.roa
Signing time: Mon 14 Feb 2022 13:51:22 +0000
ROA not before: Mon 14 Feb 2022 13:51:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 89.117.124.0/24 maxlen: 24
89.116.168.0/24 maxlen: 24
89.117.136.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160275379 (0x98d9bb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 14 13:51:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eec231ff67a86e105944f6b1ac69a5130a57aacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:01:bd:08:6f:6e:60:8d:9b:a5:e3:c3:64:
75:aa:06:8a:dd:e2:97:bc:5b:c4:72:76:c5:6f:e3:
09:97:f3:e6:e7:46:18:ce:b9:22:7c:89:87:f5:cb:
e1:43:a6:26:0a:77:1a:ed:77:20:a2:04:97:81:e6:
cb:12:d9:9b:00:1c:66:b3:8a:10:1f:89:13:a4:05:
50:7e:6a:e1:60:95:b4:81:59:b0:db:7b:1b:94:eb:
cf:e6:d0:9b:47:73:a3:7f:e7:8f:d8:8f:16:7d:dc:
27:e5:4c:d3:b2:fa:4c:d2:2a:9b:d7:b0:3b:4f:d5:
9f:fe:3c:04:f6:a6:e7:96:c9:2d:0a:08:3f:3c:51:
14:f5:60:eb:35:89:d9:17:25:97:b1:5d:e4:89:34:
f5:4a:c2:5f:d3:30:65:75:2f:5e:e6:9a:52:68:a1:
d8:2f:33:e7:b4:3c:fa:cb:b9:0b:0d:a6:86:be:d6:
de:57:49:20:49:b8:81:2d:0f:5c:7b:5f:e4:aa:d2:
4e:24:30:91:76:a2:9b:41:5e:9d:e3:3b:ba:7e:2a:
49:6c:62:42:0e:b8:6d:31:fb:e7:f3:21:59:7e:cd:
55:f4:dd:fb:f6:57:27:06:b6:d8:70:59:39:ed:9d:
16:58:66:28:df:9a:66:c8:04:88:43:54:3d:7a:72:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C2:31:FF:67:A8:6E:10:59:44:F6:B1:AC:69:A5:13:0A:57:AA:CB
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/7sIx_2eobhBZRPaxrGmlEwpXqss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.7.0/24
89.116.96.0/24
89.116.168.0/24
89.117.124.0/24
89.117.136.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c7:f1:31:5d:e3:a3:1c:f6:c6:90:38:b6:f7:39:49:58:05:
cf:c1:b1:20:40:bb:f8:39:bd:0f:47:19:a4:be:54:6a:9c:60:
93:c0:43:3a:0d:b0:60:1a:ad:e0:f0:5b:68:03:ed:2e:75:0e:
f2:3b:1c:8f:43:6d:c6:78:03:fb:62:77:3d:7a:4e:34:d9:e7:
df:c6:c9:36:3f:33:88:90:c7:f5:55:ae:c6:2c:6a:a2:de:1b:
88:38:d5:e9:ec:6b:ff:5a:45:d7:ea:70:3d:d9:43:db:52:0d:
66:b7:a0:46:c4:74:6a:76:77:04:8c:b6:7f:b6:33:0b:52:b8:
b7:a6:f1:69:89:e7:4b:ae:a1:d4:2a:c7:c2:04:1a:4c:b9:27:
4e:75:e0:d9:d0:03:b7:d4:8f:1f:b9:17:90:69:f9:bd:20:2d:
30:3d:ef:d9:f0:a5:c7:85:69:a4:24:f3:6c:64:77:1f:99:36:
88:02:90:bd:94:fc:d4:66:9a:7a:78:cd:15:59:e0:fb:86:f7:
c6:85:9e:81:9b:cf:d8:8b:32:e7:1f:21:1b:4c:3e:00:17:a7:
c2:ad:a5:90:e7:bd:c2:5c:95:a6:77:68:38:2e:3b:c2:10:10:
0f:44:69:38:5c:78:89:3f:3a:40:d1:69:04:c7:0a:4f:fe:57:
8f:6e:f7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org