Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/SKE0AatE9TRdVi1uIaDl4FB676g.roa
File: SKE0AatE9TRdVi1uIaDl4FB676g.roa (raw, json)
Hash identifier: hGhyyh7LJcHRo2ue213tSl9L9uQnZCqYoQ6E8Epjun8=
Subject key identifier: 48:A1:34:01:AB:44:F5:34:5D:56:2D:6E:21:A0:E5:E0:50:7A:EF:A8
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182EEBD0E9102D18E96F469CC94F81DB0A2
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/SKE0AatE9TRdVi1uIaDl4FB676g.roa
Signing time: Tue 30 Aug 2022 12:32:23 +0000
ROA not before: Tue 30 Aug 2022 12:32:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 89.117.94.0/23 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
89.117.228.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:bd:0e:91:02:d1:8e:96:f4:69:cc:94:f8:1d:b0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 30 12:32:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48a13401ab44f5345d562d6e21a0e5e0507aefa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:8c:b6:e5:2e:e2:ce:10:d7:28:4e:e3:a0:
ca:b0:5d:8c:1e:dc:a6:9b:14:7e:bd:af:a3:0b:f4:
35:d4:c2:12:be:b8:33:88:84:d6:84:05:15:9d:54:
6e:93:c7:da:63:5a:f2:9f:8d:7c:b9:e1:45:f8:0c:
ca:fc:de:d5:97:89:43:69:9e:ce:44:7c:55:bb:36:
99:e0:39:5d:c7:f8:5a:3c:7e:62:71:83:ad:17:ed:
63:43:14:f4:9c:25:9c:2c:c5:1a:bc:04:35:2b:5c:
66:b7:31:64:90:7b:fe:1d:8e:cb:ed:50:a9:32:ed:
3a:8a:d0:04:61:9d:7e:f6:31:53:7f:1a:ac:c6:b6:
f9:e7:13:22:24:56:12:70:af:1c:79:f5:44:ad:c8:
5a:ed:1b:d4:73:f2:5b:b3:e1:74:86:81:33:89:64:
cb:5d:be:4f:34:69:72:df:8c:a5:b4:1d:d6:d7:22:
37:ff:53:bb:c2:2e:75:1e:71:59:94:23:a4:be:dd:
39:a1:02:bf:a4:ef:0b:cd:76:c7:f6:98:d5:32:d9:
61:0a:57:a8:14:9e:71:7e:2b:f1:c5:53:3f:e3:f8:
6b:22:86:2d:7d:7f:72:c4:2f:46:c8:79:d8:6d:52:
93:bf:b5:07:48:0c:e7:1a:ba:da:6f:16:32:21:43:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A1:34:01:AB:44:F5:34:5D:56:2D:6E:21:A0:E5:E0:50:7A:EF:A8
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/SKE0AatE9TRdVi1uIaDl4FB676g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.108.0/24
89.116.125.0/24
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.184.0/23
89.116.210.0/23
89.116.252.0/24
89.117.8.0/23
89.117.32.0/23
89.117.94.0/23
89.117.116.0/23
89.117.190.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:72:58:a5:2d:5f:b2:4f:c6:d4:1f:1b:17:1b:25:14:5c:cc:
b2:97:fb:fe:75:40:f1:d0:23:11:ea:7c:7a:6c:92:04:61:b9:
eb:65:18:3c:33:a4:8b:ca:ac:cf:e5:4d:27:bd:b4:2a:9e:25:
ce:21:16:98:a4:0f:29:be:58:fc:8c:1f:c9:20:e8:52:8e:d0:
2b:48:92:39:95:55:6d:76:12:c3:63:6f:3d:75:9d:36:8c:5a:
ce:3e:c3:00:72:fa:32:20:84:2c:96:ec:67:74:96:cd:70:04:
fe:0a:75:03:30:4c:03:6a:65:40:4b:27:ee:69:f3:8c:aa:eb:
b4:cf:fa:27:3a:55:af:be:c3:31:9a:91:5b:56:f6:d7:cf:25:
75:ef:50:48:22:e3:7e:43:0c:db:8d:3f:4f:11:7e:b9:db:16:
ec:c2:fc:4b:1b:8d:8f:09:24:d5:73:b7:ea:7e:10:5b:a1:a4:
3b:78:10:52:02:6a:02:33:c6:0c:2c:8a:df:c9:47:67:c3:53:
62:2e:9e:b6:11:a1:2e:e1:b5:a2:39:f9:33:9d:91:aa:30:0d:
ec:6c:82:f5:27:cc:42:42:d5:d3:b6:13:da:ba:e3:45:f3:d1:
63:fc:e9:92:27:ff:c2:cb:83:4f:94:92:ae:d0:29:21:be:92:
14:02:36:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org