Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/BQYgl6COoiBLwvYMnldgRLN8m48.roa
File: BQYgl6COoiBLwvYMnldgRLN8m48.roa (raw, json)
Hash identifier: fHUZmVMa0z1E/cKeAtyurD4U09mV46cnWoU8qGXg6C4=
Subject key identifier: 05:06:20:97:A0:8E:A2:20:4B:C2:F6:0C:9E:57:60:44:B3:7C:9B:8F
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183D063C9BECE16569210CD04F06BBEA6C7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/BQYgl6COoiBLwvYMnldgRLN8m48.roa
Signing time: Thu 13 Oct 2022 08:09:03 +0000
ROA not before: Thu 13 Oct 2022 08:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 84.46.170.0/24 maxlen: 24
89.117.101.0/24 maxlen: 24
89.117.111.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
89.117.35.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
86.38.214.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:63:c9:be:ce:16:56:92:10:cd:04:f0:6b:be:a6:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 13 08:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05062097a08ea2204bc2f60c9e576044b37c9b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e9:c2:e8:62:13:b2:45:0b:e0:8c:7a:7a:d3:
51:b7:73:6b:7c:4e:fe:00:fc:9f:f0:de:92:4e:f3:
1e:18:f8:f5:e7:27:1e:f9:41:31:f0:08:6c:ab:13:
d8:6e:33:8f:c2:f5:31:7b:1d:a7:12:da:b5:db:66:
e7:d2:0e:24:b6:ef:9b:60:f4:93:fe:7c:54:1e:b1:
dd:6b:a7:39:e2:3b:b9:26:98:8d:a2:32:0b:a9:5b:
a6:3c:df:62:99:ab:11:31:38:0f:0a:cc:f7:55:7b:
03:ed:84:11:59:c4:7a:f0:f6:a3:0a:bb:9b:cf:b2:
4b:41:0a:77:d5:b4:40:99:45:4c:d8:14:e5:f4:79:
53:ef:da:20:48:6c:33:36:c8:07:50:d0:d7:cb:02:
38:69:19:49:72:d0:4a:e9:de:ac:d6:58:ef:14:3a:
96:1d:46:f4:58:e5:89:c9:8e:70:30:80:61:c5:09:
f4:7b:9f:e1:d4:6f:30:b8:dc:5d:60:ae:78:1c:27:
84:36:5a:cd:78:b7:7a:b4:25:be:29:9c:1e:55:62:
61:bb:80:97:05:60:f1:6a:9e:43:0f:a8:2e:97:10:
26:1c:d3:2f:40:54:24:24:fe:e3:96:15:5e:54:de:
13:c7:52:c6:6e:50:cd:cd:6f:3d:ef:7c:c7:d2:1c:
af:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:20:97:A0:8E:A2:20:4B:C2:F6:0C:9E:57:60:44:B3:7C:9B:8F
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/BQYgl6COoiBLwvYMnldgRLN8m48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/24
86.38.214.0/24
89.116.102.0/24
89.116.158.0/24
89.116.163.0/24
89.116.190.0/24
89.117.27.0/24
89.117.35.0/24
89.117.101.0/24
89.117.111.0/24
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:cf:ee:d7:f2:f9:d2:7b:42:8a:63:1a:97:7e:9c:23:47:1d:
2a:f6:83:16:5f:89:ec:48:28:ba:ec:d4:52:da:a1:ce:4f:5b:
16:1d:a7:33:a4:95:b1:88:8a:52:c8:48:83:17:98:ed:59:1f:
09:d8:26:5c:f5:13:9e:30:b4:2f:22:db:cb:a2:92:2b:07:4b:
24:a9:20:99:81:c3:f4:34:6f:7c:4e:a7:05:ff:fb:ca:83:0f:
d9:7b:51:4e:e9:f0:14:e6:1e:d4:f9:ba:44:36:8e:89:f0:38:
cf:38:89:9f:f2:5f:43:b0:e5:e2:1e:08:48:89:3d:32:1d:91:
1f:e3:43:bf:1b:05:d0:5f:44:7c:35:17:ca:72:7f:01:d5:7f:
7b:9d:46:47:5e:d2:97:a0:03:79:23:4a:46:1a:11:36:27:9e:
2c:72:b3:86:d9:1d:db:c5:56:25:81:75:8e:39:c3:33:b2:49:
85:f5:ce:72:02:68:4f:70:40:7f:e2:51:ef:da:a3:75:77:81:
e5:fa:cd:0b:39:9d:d5:53:96:fb:99:3e:1a:e5:87:0e:14:91:
d8:02:db:d2:be:a7:c0:3d:62:9f:ab:5f:ce:54:f4:62:a0:79:
3b:72:0d:c0:b1:fc:61:35:84:ec:5c:51:3d:37:7a:0b:69:22:
f6:ff:24:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org