Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Ln3Ptaoa97wNEx-8LYSxgLZHdj4.roa
File: Ln3Ptaoa97wNEx-8LYSxgLZHdj4.roa (raw, json)
Hash identifier: RL9uw5ZR4/yWgMu0Azw0yFn+8xgw5FznQjtGyYSHbLw=
Subject key identifier: 2E:7D:CF:B5:AA:1A:F7:BC:0D:13:1F:BC:2D:84:B1:80:B6:47:76:3E
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 018243A0BB00CDF228C25E147BD3A3C1E3A5
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Ln3Ptaoa97wNEx-8LYSxgLZHdj4.roa
Signing time: Thu 28 Jul 2022 07:06:23 +0000
ROA not before: Thu 28 Jul 2022 07:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 89.116.132.0/24 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:a0:bb:00:cd:f2:28:c2:5e:14:7b:d3:a3:c1:e3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 28 07:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2e7dcfb5aa1af7bc0d131fbc2d84b180b647763e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d2:61:52:95:1a:96:0a:33:66:ad:7b:35:3c:
7f:31:7e:7a:10:57:28:4a:9c:2e:5d:d9:8e:d7:be:
43:95:d5:6d:7f:b1:c8:78:65:61:fc:f5:f1:00:a3:
f8:b2:dd:61:52:8c:f8:8d:78:a1:d0:5e:34:33:e7:
5e:ef:7d:62:e2:d2:0d:9f:ca:ac:08:e8:25:23:ce:
f5:a8:6a:5a:9e:c0:ae:da:11:c4:41:ce:af:5b:09:
0a:00:91:de:b4:8c:93:51:36:8b:5d:0b:02:28:69:
26:1c:30:dc:9d:df:93:18:b4:be:99:15:77:6c:3b:
3d:23:d6:de:f0:ad:4c:ca:1f:6f:76:3c:b2:17:b9:
03:12:29:f4:73:26:10:a1:c7:50:e7:e7:5f:3f:5d:
94:03:84:48:6f:5b:dd:e6:69:16:10:d2:12:83:c7:
3a:02:5b:81:b3:f3:06:cd:77:0a:2f:a1:8d:7b:cd:
b6:df:58:3d:56:ce:b1:8b:69:e9:37:20:ae:35:3d:
74:78:ad:d4:37:cf:cb:be:e7:80:e4:53:79:39:74:
ef:97:c5:bd:ab:4f:6a:aa:07:b7:24:49:a6:aa:2e:
e7:7e:0f:f4:87:20:76:af:cb:c1:a1:9f:9d:03:22:
91:18:8a:e8:60:61:d6:a3:cd:88:ee:46:9b:41:b4:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7D:CF:B5:AA:1A:F7:BC:0D:13:1F:BC:2D:84:B1:80:B6:47:76:3E
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Ln3Ptaoa97wNEx-8LYSxgLZHdj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.238.0/24
89.116.132.0/24
89.116.140.0/24
89.116.158.0/24
89.116.166.0/24
Signature Algorithm: sha256WithRSAEncryption
00:31:09:52:02:c6:db:8b:78:d7:53:27:c3:a7:95:9b:4e:16:
8f:c0:de:d0:a0:29:20:06:93:42:72:dc:d7:d3:c2:a6:df:8c:
5d:44:79:1d:20:f8:d1:25:91:82:ed:ba:d3:1b:10:db:34:78:
36:59:09:40:a7:7d:95:26:74:16:27:f7:71:c2:30:47:6d:f1:
66:f8:b0:ef:47:ff:1f:95:ea:94:c7:1b:7e:51:1a:de:82:0a:
76:0e:13:79:95:63:25:0e:b9:13:38:44:1e:36:ab:ca:5b:3e:
10:85:2e:32:92:84:7a:4c:7e:56:21:1b:09:87:35:1c:b1:cf:
3d:2b:d0:8d:00:5e:2e:04:f1:3f:14:6c:fd:3f:43:94:fa:45:
0f:03:2e:e7:c5:cc:d2:78:c2:b5:61:ee:e8:1d:48:55:7b:65:
ef:cf:2b:fe:72:b1:21:a5:f8:cc:ee:36:ed:61:54:a3:c1:94:
6d:cb:19:3c:9d:75:14:b6:8d:3c:80:f7:92:4b:c5:aa:9a:25:
23:98:f0:06:dc:27:48:dd:ff:48:d8:a9:ce:27:05:0d:9f:90:
f0:51:2b:ce:00:c1:c3:81:d7:09:0f:63:73:bb:87:b5:bf:91:
16:89:d3:ae:cd:23:ca:fa:42:41:9a:92:fd:b9:59:87:de:eb:
58:a6:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org