Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/MAEaGbx86ktB9Q-d04-PJbvlAA0.roa
File: MAEaGbx86ktB9Q-d04-PJbvlAA0.roa (raw, json)
Hash identifier: EdCnPZOH0Cx38kh3Cao/qIbSAotROmoBLZqE7PpnPqY=
Subject key identifier: 30:01:1A:19:BC:7C:EA:4B:41:F5:0F:9D:D3:8F:8F:25:BB:E5:00:0D
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182AF8A19CF2E03F83E0AB196ADF938DC26
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/MAEaGbx86ktB9Q-d04-PJbvlAA0.roa
Signing time: Thu 18 Aug 2022 06:00:39 +0000
ROA not before: Thu 18 Aug 2022 06:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 86.38.246.0/23 maxlen: 24
89.116.224.0/21 maxlen: 24
89.117.80.0/22 maxlen: 24
89.116.32.0/21 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.204.0/23 maxlen: 24
89.116.180.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:af:8a:19:cf:2e:03:f8:3e:0a:b1:96:ad:f9:38:dc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 18 06:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=30011a19bc7cea4b41f50f9dd38f8f25bbe5000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a2:a9:19:d1:69:a7:4a:c1:95:87:64:ba:47:
7d:57:65:6c:d9:85:38:8d:06:ed:08:19:1b:21:1c:
04:d5:32:41:f7:86:d4:8d:99:9c:de:f7:eb:e3:81:
2d:46:81:a1:8a:80:08:e0:47:14:09:97:6b:33:da:
19:18:5d:83:36:22:dc:1e:33:7a:93:b1:cf:d8:9a:
e0:ca:05:24:ae:de:04:62:78:69:b9:12:54:77:a8:
9b:ae:b6:86:58:6c:66:2c:03:a8:dc:09:69:ff:36:
69:29:60:db:0e:14:d1:5f:02:fc:e4:d5:64:45:43:
4c:3d:d8:45:60:26:2b:09:4d:5a:de:e8:a4:ae:ff:
43:fa:36:01:c3:0f:b0:ee:29:04:21:59:83:68:b5:
8f:15:0c:b7:33:a5:ca:a2:2f:34:92:28:39:81:0b:
be:73:5b:77:8c:74:a6:dd:05:34:1b:1e:71:2a:81:
50:04:a0:7c:90:f7:49:80:1e:1d:d0:91:e5:0e:4d:
e6:42:60:50:9f:82:ce:20:b2:c2:c6:1d:b7:e8:77:
5c:f7:e6:f2:f3:91:f7:78:e9:7b:7e:48:5b:db:90:
50:e7:7e:54:43:ef:b2:02:b2:8c:66:c2:fe:74:79:
ab:ab:41:33:00:8d:4a:ef:01:60:76:99:24:36:b0:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:01:1A:19:BC:7C:EA:4B:41:F5:0F:9D:D3:8F:8F:25:BB:E5:00:0D
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/MAEaGbx86ktB9Q-d04-PJbvlAA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.204.0/23
86.38.246.0/23
89.116.32.0/21
89.116.58.0/23
89.116.180.0/22
89.116.224.0/21
89.117.80.0/22
Signature Algorithm: sha256WithRSAEncryption
04:c7:2d:5c:59:7e:6e:1a:6b:ea:3d:41:54:b4:57:04:1f:06:
3d:79:52:4a:42:1a:96:8a:a8:53:28:e2:b2:2f:c0:24:62:79:
20:55:ac:6f:1f:be:13:d1:9a:22:fb:e6:4d:86:72:a4:24:2d:
0b:d5:42:be:27:f7:0d:05:26:0c:b0:22:d6:c9:f7:d5:63:7e:
b7:7f:22:7f:a5:d7:38:11:d2:91:63:26:b1:51:7c:3c:29:0c:
dd:6d:b3:a0:cc:b3:db:4b:14:8a:39:23:91:90:1c:09:96:a6:
ca:9c:4e:de:94:ce:7b:dd:38:a8:8c:8e:e5:0f:c2:6f:2c:be:
c5:25:1d:96:ec:83:ab:9a:85:45:f8:f8:7b:9d:a2:2d:bb:be:
cf:5b:c7:01:51:20:bd:38:1c:33:77:43:94:a4:62:fa:95:45:
0b:e1:3a:f0:96:24:ff:6c:e9:fc:d9:43:f8:e2:5e:3e:d8:47:
cb:d7:a1:b3:11:f2:a1:37:fa:ce:9d:8d:4e:b2:80:af:91:95:
90:3f:30:e5:22:b9:00:2f:c5:6d:53:13:ec:60:71:bc:f6:80:
22:25:fb:a9:dc:8c:c8:90:79:91:8c:39:86:39:fa:21:a3:a4:
0c:d4:21:b3:63:71:bf:76:7b:d5:da:68:ab:86:5f:3b:07:88:
5d:66:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org