Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/KSXgUBiw6S6lM3Wksj9fuSb29ZE.roa
File: KSXgUBiw6S6lM3Wksj9fuSb29ZE.roa (raw, json)
Hash identifier: CMQXoo8bGw6Qlj8x7YUTT26wHJWhiyTdE87Yg8HjqrE=
Subject key identifier: 29:25:E0:50:18:B0:E9:2E:A5:33:75:A4:B2:3F:5F:B9:26:F6:F5:91
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 096C15DE
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/KSXgUBiw6S6lM3Wksj9fuSb29ZE.roa
Signing time: Wed 09 Feb 2022 07:22:08 +0000
ROA not before: Wed 09 Feb 2022 07:22:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.116.115.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
84.46.170.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158078430 (0x96c15de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 9 07:22:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2925e05018b0e92ea53375a4b23f5fb926f6f591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:5f:81:86:60:e6:e5:48:97:fc:8c:cc:ee:
47:d4:a3:54:2b:68:b4:20:e2:e7:8e:64:13:f2:41:
25:2e:69:df:9a:0e:cb:fd:26:a5:3b:2f:8f:6b:f2:
56:83:67:99:34:a0:64:22:94:1e:ea:ff:48:b3:b5:
fe:6b:81:94:97:c2:b5:d4:39:cc:f0:a2:0e:30:b4:
6c:35:24:88:63:51:1e:07:66:12:8e:99:a1:10:35:
31:b7:33:13:f3:f3:b9:d3:6b:ac:9b:2b:95:5d:a7:
46:49:a2:d2:a6:cd:d1:66:b5:21:f0:d1:a4:9b:9b:
55:9a:20:0c:87:d3:ff:61:8e:06:4a:2c:bb:1f:30:
3c:62:8a:73:ac:72:db:30:0d:c8:1d:e5:5f:0c:bb:
8c:f9:fe:93:2d:40:5b:df:a4:61:92:c5:14:5f:ed:
03:22:52:28:07:f4:cb:fc:2c:c7:a0:b1:e0:aa:9d:
bf:f5:3c:f0:60:79:cb:ad:dc:fa:32:54:95:19:62:
a4:86:ac:33:52:40:e2:81:7b:33:e9:1c:28:17:01:
1f:42:46:72:3f:2c:f3:40:42:9d:e8:10:7a:ff:cf:
bb:c6:5d:f4:6e:40:4f:e0:c3:15:ee:a6:cc:23:b7:
8b:22:8f:bb:53:56:94:4b:d8:f9:03:21:ec:25:ba:
73:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:25:E0:50:18:B0:E9:2E:A5:33:75:A4:B2:3F:5F:B9:26:F6:F5:91
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/KSXgUBiw6S6lM3Wksj9fuSb29ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/23
86.38.7.0/24
86.38.37.0/24
86.38.177.0/24
86.38.200.0/24
86.38.235.0/24
86.38.238.0/24
89.116.56.0/24
89.116.115.0/24
89.117.109.0/24
89.117.139.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e5:2c:44:e1:50:c7:4f:0a:af:6c:9d:32:38:62:48:8e:10:
b9:06:99:c1:1c:ad:32:c2:02:a4:59:b6:18:e1:59:d4:ce:81:
40:a2:f7:ea:fb:e6:d7:2e:2b:b0:af:e7:6b:e2:0e:83:61:0f:
ec:e4:49:53:c8:ff:21:79:5d:9e:43:56:d7:08:12:8b:4e:63:
70:c7:41:e8:19:42:43:b0:0e:dd:c9:a7:62:c1:12:25:b2:63:
5e:03:c0:5d:f7:4a:3b:84:03:db:04:86:14:3b:d0:15:9a:4c:
da:ff:52:98:90:10:41:d2:9f:36:22:df:6c:9e:84:41:70:1f:
20:c7:cb:8d:79:b2:12:7c:0b:04:96:86:58:be:b7:b1:8d:67:
7c:31:9b:14:aa:39:d1:7a:d6:31:04:b0:28:15:b9:dd:f7:2f:
e1:87:87:a5:72:4f:d5:b7:eb:a4:6d:a3:34:47:47:76:e3:a1:
3c:26:2c:18:14:86:f3:0c:2a:68:48:6a:63:4a:7a:3d:28:24:
b0:52:93:6d:93:83:3b:f3:53:a1:6b:c6:ad:6a:cf:f7:0c:dc:
d7:af:58:a4:7a:3e:47:9a:42:1e:14:d9:23:5e:95:e8:43:ff:
3d:0c:71:ff:11:e1:d3:ae:67:cb:1d:b2:80:c5:46:c5:61:d1:
ad:f7:d5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org