Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Q39SCd_OAl8wpaxV85knj-mm3C8.roa
File: Q39SCd_OAl8wpaxV85knj-mm3C8.roa (raw, json)
Hash identifier: /FP9OyWTpBWR1HhbZbHkHenTZhu8kOt/66Gdgk3NBCw=
Subject key identifier: 43:7F:52:09:DF:CE:02:5F:30:A5:AC:55:F3:99:27:8F:E9:A6:DC:2F
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182AFF70C03C8CA8D6D4F36BC45C742C36B
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Q39SCd_OAl8wpaxV85knj-mm3C8.roa
Signing time: Thu 18 Aug 2022 07:59:39 +0000
ROA not before: Thu 18 Aug 2022 07:59:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
89.117.16.0/21 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.80.0/21 maxlen: 24
86.38.4.0/23 maxlen: 24
86.38.220.0/23 maxlen: 24
84.46.236.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:af:f7:0c:03:c8:ca:8d:6d:4f:36:bc:45:c7:42:c3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 18 07:59:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=437f5209dfce025f30a5ac55f399278fe9a6dc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:c2:16:72:f6:03:8c:d0:33:86:ac:7d:e5:
27:5a:ee:77:f8:2b:0c:24:e9:09:c0:c3:3e:cc:ec:
72:d6:2c:54:ae:86:16:96:ef:e7:8c:b1:6d:19:11:
b7:99:aa:f9:b7:1d:f5:b7:41:7a:88:6a:bb:ca:18:
f5:eb:c5:1d:9e:aa:a0:ae:85:e5:b4:a4:c2:e5:92:
ff:5a:88:c6:b0:42:23:13:7b:c5:ff:05:bb:4b:c1:
ea:7f:49:00:04:57:0e:27:66:7c:be:02:99:1b:61:
96:d4:c9:1c:db:ad:1e:ae:6b:aa:c5:1a:65:d1:72:
01:73:47:45:57:d3:9d:21:09:50:09:b3:eb:c7:8c:
a3:71:aa:23:d8:24:e9:f2:a2:76:5c:9e:db:1c:b2:
eb:85:b5:48:ed:7b:f2:a6:a1:90:bf:b1:77:73:5a:
1f:cb:1c:62:f6:c7:4f:68:76:05:ec:b3:bb:41:f7:
b6:43:04:6a:76:e8:13:f4:d5:27:b9:ef:44:df:2e:
3d:4a:08:b5:2d:72:e1:bf:ca:c8:eb:6a:9c:80:77:
41:0a:f6:20:5b:b6:41:57:4e:0d:01:72:16:45:06:
1f:9b:7b:ea:40:f4:a0:e4:f8:6e:e9:c5:28:56:1f:
21:d8:5d:57:44:d9:22:91:cc:93:6f:9d:6e:5b:25:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7F:52:09:DF:CE:02:5F:30:A5:AC:55:F3:99:27:8F:E9:A6:DC:2F
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Q39SCd_OAl8wpaxV85knj-mm3C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0-84.46.239.255
86.38.4.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.220.0/23
89.116.80.0/21
89.116.242.0/23
89.116.246.0/23
89.117.16.0/21
Signature Algorithm: sha256WithRSAEncryption
28:22:bb:39:06:49:89:a9:0c:9d:6c:94:ef:3f:5c:35:a2:fc:
14:a8:3e:a0:44:e3:e9:e6:4c:fc:70:6c:5c:c0:84:37:3c:a5:
a8:a6:dc:df:28:a1:4a:bb:8c:78:54:8d:eb:e9:ec:df:ce:4f:
27:e7:c6:7b:f4:a8:10:a6:e6:0c:4b:d5:c6:7c:fa:d0:6d:44:
4e:ff:79:20:56:8c:5c:5d:2d:d7:ea:5d:b6:b7:be:17:79:fb:
a6:09:e3:00:b1:7e:5c:38:30:5b:cf:01:81:bb:7c:e5:22:ba:
f5:d7:3f:0c:ac:9e:75:30:c7:4b:3e:82:01:15:fe:a0:2f:c3:
d1:51:dd:c7:70:ae:69:ba:93:4c:f6:f7:f0:34:b3:87:73:8f:
18:66:e6:43:a9:b8:13:b6:4b:cd:ca:00:f1:09:ad:7f:0d:e9:
1f:97:20:b2:fe:e4:cd:5d:e1:92:9f:79:9f:a5:1c:8c:07:30:
d9:7e:65:62:cd:22:08:0d:65:65:f3:52:90:ea:3e:ee:03:1a:
1f:06:ee:5e:d2:ce:34:12:8a:53:b5:be:6e:d2:e8:33:de:35:
a2:d5:c9:68:1e:8f:f0:09:fb:40:15:31:b4:a2:ed:d3:a9:a8:
eb:8a:e9:08:82:ec:f1:60:c2:df:83:26:7b:c6:f5:87:54:a5:
e4:98:e6:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org