Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/FY0aQB9SDcRjFjJxQ8B6-Af85r0.roa
File: FY0aQB9SDcRjFjJxQ8B6-Af85r0.roa (raw, json)
Hash identifier: FH0FPaoFbn7x0kKkow7JiHRIZWh9aphkUm8DOBCELUI=
Subject key identifier: 15:8D:1A:40:1F:52:0D:C4:63:16:32:71:43:C0:7A:F8:07:FC:E6:BD
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B9DA43E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/FY0aQB9SDcRjFjJxQ8B6-Af85r0.roa
Signing time: Sun 26 Jun 2022 12:39:22 +0000
ROA not before: Sun 26 Jun 2022 12:39:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 89.117.109.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
86.38.4.0/23 maxlen: 24
89.117.48.0/20 maxlen: 24
86.38.180.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.120.0/22 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.246.0/23 maxlen: 24
86.38.242.0/23 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
86.38.189.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.200.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.220.0/23 maxlen: 24
89.116.96.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
89.117.11.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194880574 (0xb9da43e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 26 12:39:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=158d1a401f520dc46316327143c07af807fce6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b0:fa:c2:9b:e3:e8:3a:2b:87:c0:91:9c:c9:
78:bc:52:7c:f4:d6:b8:d8:36:29:4f:19:9c:af:b2:
84:1c:e8:90:b1:39:70:25:9f:57:59:21:c6:19:29:
7c:5c:2d:96:d0:58:cf:38:9d:67:9b:03:29:a0:11:
86:58:30:6c:88:f5:83:c3:b3:2a:6b:f1:43:a4:60:
7a:e5:cd:da:49:0b:4c:da:19:8d:35:91:dd:96:5d:
70:12:91:40:70:1c:00:e7:bd:ed:42:bf:36:95:c4:
ae:02:fa:57:2b:cb:60:bb:54:63:5e:00:24:d8:92:
4d:55:fc:f8:f3:f8:1d:e4:2b:36:6d:1e:0f:a9:a4:
23:a2:7c:a8:07:5f:70:30:e7:2d:6f:80:cd:1a:a2:
c3:06:cb:b4:17:b1:64:78:92:c7:5e:7c:4c:1c:54:
4b:c5:d4:bf:a4:90:ac:4e:d9:f9:d5:f0:d3:e9:e7:
0d:3e:c1:21:57:c9:1b:46:53:3a:ad:4d:05:d0:38:
ed:bd:0f:0d:c4:a2:91:c7:29:24:94:2d:92:47:aa:
5b:f8:31:b1:0b:da:32:2c:5d:ac:47:d0:4b:de:4b:
bd:7e:b3:b1:06:04:9f:1b:30:bf:46:9d:38:bc:8d:
d1:93:5a:f4:ec:22:76:30:93:d9:23:6d:2d:6b:fd:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8D:1A:40:1F:52:0D:C4:63:16:32:71:43:C0:7A:F8:07:FC:E6:BD
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/FY0aQB9SDcRjFjJxQ8B6-Af85r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.183.0/24
84.46.200.0/24
86.38.4.0/23
86.38.180.0/22
86.38.189.0/24
86.38.200.0/24
86.38.220.0/23
86.38.242.0/23
86.38.246.0/23
89.116.56.0/24
89.116.58.0/23
89.116.68.0/23
89.116.96.0/24
89.116.135.0/24
89.116.156.0/24
89.116.175.0/24
89.116.177.0/24
89.116.218.0/24
89.116.242.0/23
89.116.246.0/23
89.117.11.0/24
89.117.48.0/20
89.117.109.0/24
89.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:ba:fb:73:fd:b3:33:87:a9:3a:39:cc:80:95:50:09:99:61:
9d:7d:0a:97:0f:cf:43:18:d4:25:df:44:3b:c4:af:57:9d:37:
18:5e:d0:bb:1d:0b:ca:88:39:24:de:f4:4d:3f:d2:63:07:e6:
a2:35:e0:04:61:0a:e7:af:4c:39:7d:bf:b4:8a:17:15:bd:3c:
4d:65:2a:c1:d0:df:4c:96:c0:57:4c:65:d9:9d:e9:39:9a:97:
0a:07:10:01:f6:a1:ab:0a:11:e2:71:47:34:6a:59:63:f7:1b:
5a:a6:d9:5b:dd:af:31:6a:3d:75:95:63:e3:74:5f:4c:5a:96:
78:26:76:79:4d:b9:ab:aa:37:a6:39:6b:0a:5f:3e:41:e2:6d:
68:ae:c7:ce:f8:b8:44:b4:cc:b9:38:e3:4e:32:13:a2:05:17:
52:90:04:b8:0d:62:3b:58:e2:42:6f:cb:e1:b2:e0:e8:2d:1b:
21:66:b3:7c:68:e1:e7:93:84:42:f8:ef:7d:b8:69:63:aa:57:
00:e8:43:da:b8:d1:c4:df:c5:7f:28:11:79:da:77:5f:9b:0c:
b0:76:a0:5c:e4:73:55:a0:ff:a2:53:a4:ec:da:ce:1d:bb:b2:
0e:70:9f:4e:a0:ad:6c:ac:74:8f:78:1f:6f:ca:72:c6:7a:af:
88:b8:28:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org