Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9LYCdb3Fr8uYBAfajBW0Ep4SHnE.roa
File: 9LYCdb3Fr8uYBAfajBW0Ep4SHnE.roa (raw, json)
Hash identifier: i9jh3i9wee8WWg5MySJ9qvKw9KuBrgQ3oGZ07FHVU24=
Subject key identifier: F4:B6:02:75:BD:C5:AF:CB:98:04:07:DA:8C:15:B4:12:9E:12:1E:71
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B9754FF
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9LYCdb3Fr8uYBAfajBW0Ep4SHnE.roa
Signing time: Sun 26 Jun 2022 12:34:23 +0000
ROA not before: Sun 26 Jun 2022 12:34:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.248.0/21 maxlen: 24
89.116.140.0/24 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194467071 (0xb9754ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 26 12:34:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4b60275bdc5afcb980407da8c15b4129e121e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:68:de:0e:24:40:84:df:c8:4e:44:64:fc:
27:1e:5a:e9:3f:1f:34:0a:ba:7f:89:47:e5:cd:d9:
ab:42:3b:51:4e:11:81:89:66:44:22:7e:c0:3b:7d:
f6:83:d8:60:4f:5c:f0:df:c7:30:f0:c0:97:a9:50:
30:8f:61:9f:b3:e0:81:e0:fa:67:fd:74:dd:e0:0c:
ca:da:94:34:d2:25:9b:b9:09:1e:b0:99:39:1e:a5:
84:f2:91:a7:ce:16:16:55:2f:d8:9c:ea:94:21:3f:
b1:f9:9e:bf:2f:a1:7b:ba:70:03:a4:71:77:ac:9d:
30:59:1b:d3:7d:f0:73:36:5e:9a:f7:a1:48:32:84:
48:3e:0c:57:5d:c9:47:f1:c8:5b:9e:e6:64:7e:fb:
51:51:1c:72:12:fd:ae:99:a9:01:e4:95:b2:b3:f8:
6a:c5:c8:38:f9:ba:87:25:b9:c3:e1:12:22:6d:01:
6f:af:3d:96:58:91:d4:fb:38:d2:69:e0:73:80:e4:
5d:97:3a:f9:c1:8c:a2:f9:4c:1f:e8:fa:b4:6d:cd:
99:da:56:9b:24:8a:59:89:55:e6:c0:11:df:b4:46:
2e:b5:0f:40:65:00:ce:98:54:ce:bb:b6:30:ce:bf:
81:e9:1c:ed:78:3e:ad:7b:92:58:f2:d5:55:f3:ff:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B6:02:75:BD:C5:AF:CB:98:04:07:DA:8C:15:B4:12:9E:12:1E:71
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9LYCdb3Fr8uYBAfajBW0Ep4SHnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.200.0/24
84.46.240.0/20
86.38.235.0/24
86.38.248.0/21
89.116.140.0/24
Signature Algorithm: sha256WithRSAEncryption
87:00:9f:06:25:12:d5:74:6f:9c:88:15:32:d4:c4:9f:e0:ba:
78:b0:80:a1:64:8e:b8:b6:30:af:06:33:bb:2d:76:d1:c3:61:
57:9f:a0:e0:cf:1c:f7:ba:a3:2f:2d:7d:a1:6e:79:9a:6b:64:
67:67:6d:4a:26:74:b4:80:fe:ca:fc:9f:e6:73:6d:17:e1:5e:
32:81:a7:eb:f7:16:a2:d3:dd:16:e3:e6:3e:83:aa:0c:01:d5:
c0:f4:70:80:85:d5:b3:f1:e6:3b:84:fe:42:38:49:66:71:99:
07:fb:0f:5b:71:7e:fd:b1:c6:d2:d0:27:6a:be:b3:6c:30:9e:
9b:c5:7c:4f:d7:5c:f5:04:16:f6:65:bf:01:59:d1:f1:e5:7d:
ba:fe:f5:8d:31:8b:22:2c:ca:62:d0:36:9d:c9:86:f3:f6:52:
e1:cf:07:3d:34:88:73:9f:92:4e:e4:2f:0c:c4:9a:40:0a:cd:
60:12:35:75:6e:33:0a:03:d6:73:99:42:d9:05:a2:48:88:ac:
3c:fa:93:4f:53:6c:a2:c1:2d:55:ee:a3:1e:44:62:23:c6:3c:
b6:d2:fb:20:3d:f4:e9:7f:50:bd:7d:0a:0b:89:a4:4c:01:37:
cf:3e:8a:61:f9:01:f4:9d:e6:71:50:a5:db:53:09:47:f8:99:
96:f9:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org