Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/P_f885reMFdVi71dk6oDZy04fxU.roa
File: P_f885reMFdVi71dk6oDZy04fxU.roa (raw, json)
Hash identifier: ZDIQ+jst/tkYywbC88Wbs65m3hLzzwnJZg7gkett+Z8=
Subject key identifier: 3F:F7:FC:F3:9A:DE:30:57:55:8B:BD:5D:93:AA:03:67:2D:38:7F:15
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01835ADC9C5681556E01005E8828F80319A0
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/P_f885reMFdVi71dk6oDZy04fxU.roa
Signing time: Tue 20 Sep 2022 12:25:50 +0000
ROA not before: Tue 20 Sep 2022 12:25:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 89.116.123.0/24 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:dc:9c:56:81:55:6e:01:00:5e:88:28:f8:03:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 20 12:25:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ff7fcf39ade3057558bbd5d93aa03672d387f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:22:ef:77:0b:fc:31:bd:3e:36:b7:06:9d:73:
6b:ae:43:35:d2:32:14:79:56:b6:d9:9f:93:56:43:
18:b7:b2:53:d5:58:16:e3:64:3d:45:8d:a0:7c:76:
47:8f:93:81:bf:8d:12:66:fb:e5:e2:da:1e:3c:55:
60:68:ef:5a:e3:81:d7:f6:96:69:c2:03:9f:1a:11:
dd:f6:9b:f2:76:b8:07:f4:6a:0d:df:4f:18:f4:88:
fa:81:bd:09:f5:70:a6:d3:eb:23:c6:c6:9c:32:d4:
cc:75:4c:67:92:cc:a8:48:44:82:bd:03:24:5c:50:
91:b4:28:f9:47:5d:1c:a3:76:7a:da:46:04:96:84:
b7:39:b7:4a:34:82:3a:b1:40:a5:8c:07:64:45:38:
c6:c4:ba:5a:64:0a:92:75:05:8a:73:38:9b:66:56:
7c:92:59:eb:22:00:6a:4a:17:a7:65:80:98:6d:d6:
be:e6:2d:1f:c7:dc:93:3f:a0:a3:da:9b:72:c2:06:
4a:b4:a8:e1:47:b3:a2:d3:6a:05:b1:40:3a:97:bb:
01:91:04:cf:3c:61:41:ca:72:ee:08:d1:6e:0d:3a:
dc:c8:ab:c7:51:ca:98:a2:bd:b7:e5:31:fd:ed:89:
47:32:d7:e3:ac:af:d3:35:94:81:ec:80:42:db:1d:
7f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F7:FC:F3:9A:DE:30:57:55:8B:BD:5D:93:AA:03:67:2D:38:7F:15
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/P_f885reMFdVi71dk6oDZy04fxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.235.0/24
89.116.76.0/24
89.116.96.0/24
89.116.123.0/24
89.116.202.0/24
Signature Algorithm: sha256WithRSAEncryption
26:6a:bf:f9:f8:d4:a9:f7:aa:45:99:23:1f:83:32:5a:0c:5b:
52:c4:d0:ae:8f:88:59:5c:b5:45:a0:07:04:c4:48:89:18:b4:
33:8e:02:b8:9c:b3:08:4f:ff:42:96:31:4e:2f:6e:c6:86:98:
b6:82:1d:59:41:f9:67:ef:67:28:c3:d1:1f:7a:65:a9:d1:c0:
72:25:24:56:15:03:49:72:69:fc:03:9c:f5:84:28:88:6a:3c:
fa:67:f3:18:ff:17:94:ab:71:dd:00:40:b2:a3:0d:82:be:59:
f7:95:39:b7:52:aa:44:e5:d8:fb:cc:a7:09:92:2f:c1:4d:c9:
97:87:12:53:08:b3:52:4b:40:c9:a5:ec:af:1c:c6:32:8f:d9:
bc:59:10:ec:79:49:c2:e8:7f:50:67:02:a2:a1:d3:e1:99:40:
b4:54:54:ec:65:80:8b:4c:7f:cf:f8:05:54:49:c2:ee:ba:28:
f9:58:6e:4e:cf:6e:af:15:ab:65:17:32:73:bc:ed:1e:4d:bf:
f2:bf:fc:34:98:4d:27:0d:58:d2:72:ad:35:ce:50:ac:b7:9e:
92:06:62:21:01:89:cf:3c:9d:c9:37:54:bd:1d:2a:96:99:c6:
ea:35:af:14:a7:a8:26:96:d0:d5:d7:fa:b0:10:59:d5:5d:a9:
2c:36:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:58 2025 by rpki-client