Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/COkvWPIX1Wz_vZ4pRMbnsoIWpLQ.roa
File: COkvWPIX1Wz_vZ4pRMbnsoIWpLQ.roa (raw, json)
Hash identifier: sh24GEfbDaYEVINs/t9KUOsOPY2l6+jljVG7LoreOHI=
Subject key identifier: 08:E9:2F:58:F2:17:D5:6C:FF:BD:9E:29:44:C6:E7:B2:82:16:A4:B4
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B01D72C
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/COkvWPIX1Wz_vZ4pRMbnsoIWpLQ.roa
Signing time: Tue 24 May 2022 06:53:29 +0000
ROA not before: Tue 24 May 2022 06:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 89.117.190.0/24 maxlen: 24
86.38.151.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.117.245.0/24 maxlen: 24
89.116.180.0/22 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184669996 (0xb01d72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 24 06:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08e92f58f217d56cffbd9e2944c6e7b28216a4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:a3:0c:a4:f5:d1:9d:09:e7:f2:8e:5b:b9:
25:a6:7e:d4:43:dd:13:3f:9f:ce:81:08:5e:d2:3b:
00:12:f8:cc:5a:17:5c:fd:4d:24:20:87:a1:c3:4e:
22:89:f3:81:e1:04:5b:07:f8:65:dc:b6:69:c6:c1:
e8:52:e2:e0:e5:b5:a3:57:8f:32:d1:be:ff:ed:1f:
5e:b0:ed:c2:6e:d4:62:87:71:9a:02:33:67:72:6c:
56:1c:26:cc:dd:c1:e5:2b:11:ae:4b:cb:ee:8c:33:
46:bd:3a:81:e1:f8:8e:23:e0:43:cf:46:a6:bf:85:
46:48:bd:1e:bb:fe:9d:9f:bb:7a:a0:5f:58:0e:c7:
51:3d:89:bc:2b:c7:ef:f7:dd:89:84:37:c0:59:15:
dc:ff:73:fc:8c:1e:0f:53:a2:a6:a4:36:b7:db:9b:
c4:d8:04:5d:8c:b9:c7:4b:23:d3:00:08:a0:06:ba:
fc:84:b1:f3:58:03:c6:d6:79:82:42:0a:55:71:cd:
3d:f1:ca:d1:32:bb:12:49:f2:c0:b9:e0:e2:fc:bb:
d7:14:45:83:20:0b:76:e2:4c:73:be:f6:ff:a7:00:
7a:dd:bc:fa:99:44:0e:04:bc:5e:cb:58:a9:33:52:
b7:75:3c:4f:5d:89:ba:cf:f8:ae:f9:c3:8a:65:5d:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E9:2F:58:F2:17:D5:6C:FF:BD:9E:29:44:C6:E7:B2:82:16:A4:B4
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/COkvWPIX1Wz_vZ4pRMbnsoIWpLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.151.0/24
86.38.156.0/24
86.38.235.0/24
89.116.96.0/24
89.116.137.0/24
89.116.180.0/22
89.117.190.0/24
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:20:55:9a:bc:88:65:75:ba:58:a2:c8:c8:bd:89:85:82:99:
47:64:e7:19:c5:c5:f1:6f:ad:1e:fc:d8:10:1c:c6:d2:90:3e:
15:c9:40:cb:e2:0d:b8:c5:78:89:f2:7e:97:6a:61:e2:fe:18:
ad:c4:b1:a5:4f:ab:47:f2:22:ee:a5:57:19:fc:d4:af:48:f0:
74:61:3d:df:fd:82:33:7c:6e:9a:10:33:85:32:14:b3:64:7a:
75:a8:c8:53:0a:26:f5:a2:62:df:e0:41:25:11:da:bd:d2:d5:
bb:9e:23:78:ac:16:33:c4:5f:9a:74:c0:14:3c:83:b3:52:f4:
88:b9:42:bd:9a:1f:63:d1:8c:35:89:b4:ab:7b:9a:d2:05:a3:
17:64:71:d3:d2:83:05:fa:2f:35:76:c5:37:df:0f:7e:34:76:
53:b9:42:23:fd:01:29:5e:db:47:b8:7b:fa:62:43:09:fe:62:
3a:2a:11:ea:31:e8:59:40:b5:94:85:72:4f:7c:96:5f:f8:96:
18:6d:d7:8e:a9:70:a5:49:2d:dc:4b:fb:4d:81:f8:2a:db:ea:
24:3f:78:e6:59:94:d1:fa:2d:83:dd:9e:07:22:cd:61:11:2d:
f6:92:90:de:c9:e5:85:59:c2:ae:04:18:e0:fb:66:1c:3e:98:
34:20:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org