Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/AsC2zO6aOkVo_SPG2uBa9nEc5AA.roa
File: AsC2zO6aOkVo_SPG2uBa9nEc5AA.roa (raw, json)
Hash identifier: w0s83/w3vOZHupTFo5mSPJ/DUUsuS6Wkn63Ud5tkeVY=
Subject key identifier: 02:C0:B6:CC:EE:9A:3A:45:68:FD:23:C6:DA:E0:5A:F6:71:1C:E4:00
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183AC24C3FAA4D808B386BC48B49DDA7EB9
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/AsC2zO6aOkVo_SPG2uBa9nEc5AA.roa
Signing time: Thu 06 Oct 2022 07:13:54 +0000
ROA not before: Thu 06 Oct 2022 07:13:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 89.116.255.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:24:c3:fa:a4:d8:08:b3:86:bc:48:b4:9d:da:7e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 6 07:13:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02c0b6ccee9a3a4568fd23c6dae05af6711ce400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:f6:66:35:9d:05:1d:f5:11:13:44:33:30:
50:db:07:1f:32:d8:21:61:ca:43:ca:43:4c:ba:27:
22:ce:15:f1:90:3b:35:53:f5:0f:18:71:eb:c5:72:
29:95:83:93:db:f5:25:2f:4c:e9:3a:a1:86:dc:32:
8b:9b:eb:14:6b:ab:db:85:1e:7a:c3:05:7f:71:3b:
c1:5d:23:1d:e7:69:c3:0d:74:5c:4d:91:bc:ca:9d:
cc:0b:a5:fd:2a:18:6c:c2:96:e2:ce:d1:8c:e7:c3:
d4:92:17:0b:6d:29:97:3d:43:c1:0e:83:54:23:b2:
67:36:99:d4:15:4e:b8:c2:6f:e0:95:ac:88:74:5b:
fe:08:9d:05:72:9a:4e:ec:bc:1e:36:35:fa:4d:1b:
7e:b3:44:bd:a3:60:d2:1e:f7:e8:ce:9d:20:d1:a0:
2a:3f:f7:85:48:29:6c:cb:b8:b0:e4:52:81:c4:35:
ce:04:53:2b:e4:20:35:39:0d:73:54:b5:78:60:d9:
43:1a:22:6e:8d:8c:69:b3:43:10:3d:c4:58:a3:97:
94:9f:b8:fa:a4:3a:50:95:2f:ed:50:f5:74:03:30:
31:0e:4b:12:5d:c7:dd:2a:96:49:0e:eb:c9:59:b0:
45:8b:89:3c:0d:aa:a3:f4:29:56:7d:86:2c:10:44:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C0:B6:CC:EE:9A:3A:45:68:FD:23:C6:DA:E0:5A:F6:71:1C:E4:00
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/AsC2zO6aOkVo_SPG2uBa9nEc5AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.238.0/24
89.116.179.0/24
89.116.255.0/24
89.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:2a:7b:73:22:8e:66:fa:bb:03:27:25:ae:3b:75:2a:a4:32:
38:2f:db:69:61:31:c8:00:9e:ba:88:b8:de:8f:67:71:99:78:
de:62:42:3c:8d:62:49:ed:12:39:79:97:d9:55:40:4e:d3:63:
b3:a8:d7:b9:c0:a1:2e:7e:39:ba:01:4b:6d:63:e4:2f:69:37:
9d:e3:0a:fd:34:bb:c3:54:ef:51:83:34:9a:45:12:7b:82:15:
3c:9d:98:46:61:b1:27:df:13:5d:fa:60:93:39:ef:e6:79:ad:
4a:45:b8:de:fc:95:bd:bd:34:b8:c2:f7:cf:ee:5f:d8:19:b4:
40:dc:7d:9d:5f:7a:5f:79:8a:a6:6f:f1:ac:b4:00:ae:70:b0:
65:30:f3:49:ed:d0:23:c3:52:a5:f5:00:e8:f3:df:54:89:2e:
c2:06:e4:8c:25:f8:ef:aa:b7:2a:79:40:8d:50:47:52:12:6a:
02:4c:31:7f:63:0b:a0:9d:a0:a3:5b:5b:20:bc:32:56:43:c5:
0d:9c:32:b7:91:e8:ee:14:a1:b0:d6:34:75:56:09:d3:98:f0:
b5:b4:a0:19:fe:7c:25:b8:85:b2:21:d7:20:c4:9a:57:75:22:
c7:03:0e:45:99:70:1e:68:20:83:9b:b0:8e:c5:b8:d8:df:2e:
ad:e5:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:24 2025 by rpki-client