Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9UPgsxHISeeuhZRrCAJVafnHPNw.roa
File: 9UPgsxHISeeuhZRrCAJVafnHPNw.roa (raw, json)
Hash identifier: V0yY9BxXmrkOlL+/+0WWVtiYXp0pJf+RfSg2BYFG2nQ=
Subject key identifier: F5:43:E0:B3:11:C8:49:E7:AE:85:94:6B:08:02:55:69:F9:C7:3C:DC
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B300EF0
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9UPgsxHISeeuhZRrCAJVafnHPNw.roa
Signing time: Fri 03 Jun 2022 11:00:20 +0000
ROA not before: Fri 03 Jun 2022 11:00:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 89.116.224.0/21 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
89.117.16.0/21 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.80.0/21 maxlen: 24
86.38.4.0/23 maxlen: 24
86.38.220.0/23 maxlen: 24
84.46.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187698928 (0xb300ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 3 11:00:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f543e0b311c849e7ae85946b08025569f9c73cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:21:f7:73:f6:c9:07:b3:85:86:64:b3:07:
ae:43:e0:00:96:3f:fe:69:ea:6e:39:35:bf:8b:cf:
b8:f3:5c:e5:f3:f3:d8:99:3a:fe:df:38:c2:50:8e:
99:e2:eb:2c:65:af:b5:23:de:68:be:af:a9:25:7b:
dd:e0:db:25:8a:1b:c5:f9:fd:67:4a:f6:67:63:1d:
f0:99:ee:08:aa:3a:59:14:36:7e:65:b8:16:ce:f6:
47:15:d3:34:62:bc:b0:cf:fb:d9:89:63:13:d1:7e:
dd:e2:f1:e6:4e:6e:8f:df:a9:b5:78:29:66:84:87:
bd:a7:b3:e7:27:e7:eb:eb:69:8e:f3:94:ea:c7:02:
f7:3b:6d:30:2c:c8:5a:c0:cb:5b:9d:23:35:d1:17:
f1:ec:62:cc:ee:f6:dd:39:6b:4d:7a:e3:3e:71:51:
28:36:a5:8b:26:f0:dc:e3:2f:30:7b:c4:2a:ed:4c:
66:d4:96:cb:50:1a:fc:f0:2f:bd:7f:b5:f6:bb:a5:
df:cc:3c:b2:80:61:66:55:c8:45:b8:08:fd:38:62:
f0:e0:03:cc:da:72:0e:99:cd:6f:28:7d:99:a0:58:
be:da:d1:df:24:79:f8:3c:84:d3:67:93:1b:cc:39:
60:ce:4a:fc:d9:f9:ec:82:3f:cd:a5:65:a6:04:a5:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:E0:B3:11:C8:49:E7:AE:85:94:6B:08:02:55:69:F9:C7:3C:DC
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/9UPgsxHISeeuhZRrCAJVafnHPNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.4.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.220.0/23
89.116.80.0/21
89.116.224.0/21
89.116.242.0/23
89.116.246.0/23
89.117.16.0/21
Signature Algorithm: sha256WithRSAEncryption
35:1c:97:a9:9d:f6:4d:fd:43:29:61:85:92:cf:25:47:71:b1:
75:d7:19:30:e9:8e:34:11:2a:bc:2f:50:c7:37:f6:c0:20:9b:
1f:18:a7:25:a1:17:f2:b1:c9:b3:cc:38:ca:83:e9:3d:62:92:
43:ac:9f:9d:2a:f5:52:72:f2:46:c6:4e:08:1d:cb:79:90:b4:
75:47:f0:5b:47:50:cd:8f:68:ff:f9:58:fc:f1:21:1a:e3:f0:
cb:5d:72:34:dd:63:92:62:22:a9:47:b9:27:2f:44:6f:d7:b2:
6c:e1:e2:94:6f:80:15:79:92:19:fb:d7:23:9b:d7:70:8d:99:
3e:0e:82:3c:8b:84:0c:07:cc:61:50:d6:ca:11:14:a7:73:92:
7d:9c:44:3d:64:d6:72:5a:2a:b6:e4:2f:01:94:a4:32:04:ee:
bb:d5:99:0c:cb:be:f2:a4:24:97:74:74:1e:d4:55:2f:44:8e:
74:bb:a4:f0:36:41:64:00:3b:65:fe:05:95:73:92:d1:82:a6:
b2:fa:63:67:6f:ff:27:40:2f:4f:a2:f8:2e:f3:52:0a:5f:ce:
c5:3b:c3:29:df:1e:ca:01:8d:f2:51:ad:d9:81:6c:3c:46:af:
7a:09:89:51:37:78:06:63:61:84:27:54:af:52:15:87:43:6c:
61:45:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org