Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/MAm2M6QfsE5scE15Pcoko1XTcRs.roa
File: MAm2M6QfsE5scE15Pcoko1XTcRs.roa (raw, json)
Hash identifier: O1dkCfSDt+kbXnmbmhxSYivb9/+lhhkqHSZNEoVDnPw=
Subject key identifier: 30:09:B6:33:A4:1F:B0:4E:6C:70:4D:79:3D:CA:24:A3:55:D3:71:1B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09738E54
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/MAm2M6QfsE5scE15Pcoko1XTcRs.roa
Signing time: Thu 10 Feb 2022 07:03:23 +0000
ROA not before: Thu 10 Feb 2022 07:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.116.224.0/21 maxlen: 24
89.117.0.0/22 maxlen: 24
89.116.60.0/22 maxlen: 22
89.117.152.0/22 maxlen: 22
86.38.232.0/24 maxlen: 24
84.46.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158568020 (0x9738e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 10 07:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3009b633a41fb04e6c704d793dca24a355d3711b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:7b:86:f4:16:23:7e:bd:84:bc:8b:d1:a9:
25:73:6c:8d:6b:fc:a2:58:2f:12:88:d5:9f:c5:56:
25:a7:22:76:62:9c:ec:1a:92:ad:74:4c:a7:c7:e0:
b9:d3:aa:0b:5c:1b:a8:c4:d6:d0:f1:04:fd:8e:78:
a6:0d:6d:af:f1:10:0b:7c:1b:be:24:5e:35:08:d8:
ac:51:f2:22:fe:4c:2a:1e:aa:cd:84:75:c9:b1:d7:
42:df:23:6b:41:74:7c:d7:d3:d3:60:95:f9:ee:0f:
04:94:31:e4:04:a6:d7:68:41:41:80:8d:02:55:b4:
2e:2f:2c:c1:13:c8:a4:4e:36:19:2d:14:90:fd:08:
a0:64:ec:8a:4a:1c:49:cb:ed:36:9e:ef:77:25:1a:
a7:34:6f:a7:4b:82:2f:a1:8f:0a:d4:d1:0a:2a:2b:
b4:ee:c3:d1:2c:da:75:ad:74:99:65:d5:7f:f4:34:
5d:3f:71:64:e9:8e:d5:9d:6b:f6:c3:4a:3b:77:b0:
e9:d6:14:e6:cd:04:a6:fb:61:df:2c:cb:d7:69:d0:
08:e8:c2:75:85:67:9d:38:57:71:21:a0:16:5f:ed:
3c:b0:cc:b1:55:c4:ef:e5:bd:78:34:b1:0f:c0:5d:
8d:79:02:ba:92:fa:ae:12:bc:e2:97:30:db:7b:28:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:09:B6:33:A4:1F:B0:4E:6C:70:4D:79:3D:CA:24:A3:55:D3:71:1B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/MAm2M6QfsE5scE15Pcoko1XTcRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.232.0/24
89.116.60.0/22
89.116.224.0/21
89.117.0.0/22
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:69:0e:c7:fb:de:85:38:7e:f4:ac:1f:1d:8b:51:49:c3:16:
1e:ff:3c:f0:30:be:8f:94:41:b5:1d:00:e6:d2:56:80:6d:12:
6f:ef:d8:c9:29:cf:e9:55:1a:47:ee:d1:ba:7c:dd:5a:30:23:
6a:02:cd:b3:92:30:d9:64:11:1e:ac:8d:67:dd:28:a8:b5:51:
3a:2b:96:88:07:fe:fb:7f:ef:2c:8c:2e:70:f2:c6:82:22:3f:
65:6c:2b:db:b4:b7:d4:0b:a6:57:10:2f:e0:47:e6:cc:31:6e:
6d:b7:bf:3b:25:ad:94:fb:fe:1a:18:1d:69:2a:1f:61:a3:01:
43:63:e4:91:d2:ce:46:f3:b4:14:a3:f1:5f:1d:b5:e3:4a:e2:
b9:9c:d6:dc:b3:da:e6:bb:1c:cd:50:34:3e:06:2a:c2:8c:eb:
2b:fe:3c:63:b5:c9:c3:65:1d:22:ea:ff:0a:0a:55:8c:df:b3:
57:39:3c:8d:20:22:a4:83:37:81:a1:b3:94:56:64:b8:c6:91:
64:b0:be:46:5a:1c:90:8d:76:97:27:12:e0:ae:76:64:52:ba:
0a:f8:85:43:63:ff:63:93:a7:cc:f7:cb:a4:15:d0:2b:3c:34:
ad:26:fe:5e:7c:cb:5c:34:ca:95:4d:34:2e:35:ce:85:fe:98:
5d:9a:e1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org