Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/AGauTctqloZBJjMeIJoybkPkql8.roa
File: AGauTctqloZBJjMeIJoybkPkql8.roa (raw, json)
Hash identifier: QPtDzzJze7wHC1ONlwEzgDWIFxqjPY3cNu+EnS50EkQ=
Subject key identifier: 00:66:AE:4D:CB:6A:96:86:41:26:33:1E:20:9A:32:6E:43:E4:AA:5F
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09846A72
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/AGauTctqloZBJjMeIJoybkPkql8.roa
Signing time: Sun 13 Feb 2022 11:54:43 +0000
ROA not before: Sun 13 Feb 2022 11:54:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 89.116.112.0/24 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.115.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159672946 (0x9846a72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 13 11:54:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0066ae4dcb6a96864126331e209a326e43e4aa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:e9:36:b2:de:02:7a:0b:65:db:24:9d:13:
78:18:ac:c5:34:66:be:40:7b:71:18:54:04:3b:77:
f0:bb:f1:71:11:d8:34:30:03:63:7e:6c:2d:d9:d7:
c6:46:6e:d0:01:58:ad:2a:03:83:2d:66:ad:f8:30:
96:f0:d2:06:b3:dc:2c:87:35:75:f8:7c:04:ca:d5:
98:9a:df:61:b1:9e:a4:d6:f6:97:61:fd:f4:07:e3:
d2:33:61:0b:57:f8:58:93:94:6b:f3:52:9d:c7:05:
5a:fd:78:d5:a4:05:e8:5d:f0:bb:ba:12:97:2f:ae:
a8:c4:7e:99:d0:ca:92:ae:e8:5e:e3:33:ff:d0:a0:
ee:39:e0:92:c9:e6:81:88:43:ec:64:6d:92:06:29:
cd:b7:41:0f:4d:a5:e0:78:18:f1:a6:94:79:5c:28:
23:81:a4:eb:bb:ca:30:a3:71:8f:6d:9e:a9:e5:97:
9c:62:54:2b:3e:86:38:90:08:34:19:95:d1:c4:77:
44:ff:7a:f8:94:37:fd:df:8e:02:80:65:42:8d:f5:
01:c9:06:79:6f:1b:58:68:7f:0c:71:be:ed:82:03:
d9:3c:44:b4:3e:e9:a8:b0:5c:56:b8:2c:10:26:2d:
b0:16:e9:bc:9a:f5:65:b1:85:c0:25:6b:2c:ea:ba:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:66:AE:4D:CB:6A:96:86:41:26:33:1E:20:9A:32:6E:43:E4:AA:5F
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/AGauTctqloZBJjMeIJoybkPkql8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.54.0/24
89.116.99.0/24
89.116.103.0/24
89.116.112.0/23
89.116.115.0/24
89.116.156.0/24
89.116.171.0/24
89.116.203.0/24
89.116.208.0/23
89.116.220.0/23
89.116.223.0/24
89.116.233.0/24
89.117.130.0/24
Signature Algorithm: sha256WithRSAEncryption
11:98:eb:a3:77:ac:f3:db:88:04:02:34:73:73:bd:dc:c1:2b:
9c:3d:5b:56:27:d0:e7:24:10:9d:69:71:dc:72:2c:11:8b:27:
f7:a4:c6:1b:c7:a2:27:5c:15:94:3f:31:e0:7a:59:2c:d5:25:
17:74:c0:65:3d:e9:df:35:c1:b6:79:7e:35:07:63:9f:96:ab:
54:5b:a4:0b:e4:76:5a:18:59:ac:8b:2c:fb:04:84:c3:ac:97:
3c:55:cf:64:77:c1:08:c9:4a:ba:d8:6e:b5:d9:92:3b:0f:dd:
8f:24:16:c2:a5:32:b2:0e:b7:ea:95:05:74:a5:92:88:0b:fb:
9a:3d:bd:fe:b8:a0:d7:24:50:3e:ad:02:62:6a:77:0f:c8:39:
40:c6:99:e4:c9:c8:63:21:32:d1:3c:d2:4c:4f:3b:cc:44:21:
5c:7a:18:99:23:2b:c7:d4:e4:2e:99:f9:f9:b4:d2:f2:a3:7c:
11:25:b4:04:d2:21:82:5f:8d:33:4e:96:75:18:ac:3a:34:79:
34:44:c2:28:93:27:c9:69:b3:3a:6d:b0:8c:1a:38:61:f7:97:
9a:46:56:36:01:89:44:dc:88:06:cf:15:51:9a:8f:7d:c7:a8:
b3:18:34:a2:b5:2f:2d:55:18:1a:99:67:45:1a:07:04:7d:ed:
b0:c4:b2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org