Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/HCyPqjmxsxY_98JfVHnq7RZ5WDs.roa
File: HCyPqjmxsxY_98JfVHnq7RZ5WDs.roa (raw, json)
Hash identifier: pFRzBSknO3L4PbFRy5XI1RRIpKqP5tq4ZUgeL5ZvBvM=
Subject key identifier: 1C:2C:8F:AA:39:B1:B3:16:3F:F7:C2:5F:54:79:EA:ED:16:79:58:3B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0BB60129
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/HCyPqjmxsxY_98JfVHnq7RZ5WDs.roa
Signing time: Sat 02 Jul 2022 21:02:25 +0000
ROA not before: Sat 02 Jul 2022 21:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 89.116.108.0/24 maxlen: 24
89.117.188.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
86.38.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196477225 (0xbb60129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 2 21:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c2c8faa39b1b3163ff7c25f5479eaed1679583b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:db:31:73:e2:5d:c4:32:de:c3:08:e9:59:c7:
d8:b5:3b:4f:9f:44:7b:c5:6a:d4:be:07:83:a1:a9:
11:e5:a5:a8:8e:bf:04:db:7f:f7:31:40:9b:b7:31:
b8:c5:cc:2e:71:1b:5a:46:0c:5e:2b:90:9e:2d:4d:
2e:0a:ec:08:d2:85:a3:39:a9:ae:d1:7a:c0:e4:b7:
c4:82:e4:37:d9:2c:c5:7d:2b:de:62:54:55:c9:3c:
ec:8e:9c:ba:da:46:3f:74:d9:01:96:2f:f9:cd:a7:
bd:86:68:aa:bf:66:cb:35:a7:20:4b:2b:cb:b1:02:
10:e6:a3:04:69:7d:4f:1a:32:64:92:f3:7b:63:ba:
38:c8:cc:68:99:33:c1:0a:55:ea:30:54:1c:c6:70:
87:c7:76:40:16:68:42:7c:d0:a7:c3:9e:93:85:15:
b3:17:84:13:96:4a:97:55:ae:68:77:a8:8a:76:74:
89:bb:dd:0e:4a:7a:68:f0:f6:a6:a2:a5:f9:50:83:
f2:54:85:d3:91:a1:d8:55:4c:6e:c0:da:39:12:12:
2a:b9:e0:b5:1e:bd:63:25:a5:e7:b3:a1:d7:24:09:
72:13:2a:b6:0d:b2:95:cb:93:c2:be:2a:27:f0:52:
c5:a0:20:b0:3f:2d:8c:99:04:f0:03:30:5a:cd:74:
84:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2C:8F:AA:39:B1:B3:16:3F:F7:C2:5F:54:79:EA:ED:16:79:58:3B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/HCyPqjmxsxY_98JfVHnq7RZ5WDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.226.0/24
89.116.108.0/24
89.116.128.0/24
89.116.153.0-89.116.154.255
89.116.189.0-89.116.190.255
89.117.139.0/24
89.117.188.0/24
Signature Algorithm: sha256WithRSAEncryption
71:bb:b0:fd:7a:2c:3d:1b:f8:1b:1c:4a:8d:43:b4:95:55:9b:
11:0f:28:e7:ce:05:30:e4:8a:7d:f0:bf:b1:3b:32:ef:ce:5d:
03:5a:96:dd:86:e4:dc:4f:e3:ed:7a:b7:c3:05:4b:6c:1e:1c:
52:77:b4:73:ed:6d:a1:76:e2:91:85:2d:e3:03:1e:86:1b:3b:
a6:47:83:e0:28:5f:ba:ec:0f:a7:4a:c3:64:31:0f:35:62:c0:
d4:8e:e0:04:64:39:35:6f:66:3c:a2:7b:d1:98:d2:ce:70:4e:
28:e9:d4:5c:97:17:8e:1f:15:13:d1:20:70:61:fb:5d:e1:10:
9b:94:50:f9:9a:8e:26:5c:25:e8:2f:ed:ee:1a:b9:26:2d:8d:
75:c2:60:c1:44:36:16:14:38:6a:59:74:2e:1f:06:dd:a8:51:
ee:89:a4:bb:ea:22:99:48:e7:a6:68:fa:cc:25:60:73:71:1c:
19:c8:e7:82:9c:dd:fb:e5:3a:39:2b:0e:7e:6e:9f:02:5d:34:
14:81:64:12:6b:d3:d6:34:e0:e4:66:db:b2:6a:78:15:58:be:
3c:f6:ca:a4:fe:12:51:2a:20:5e:52:97:a3:09:65:47:16:e3:
34:c2:72:f2:10:c0:c8:f6:95:75:7a:de:82:b4:d4:34:98:32:
e2:ee:73:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org