Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/SiekW9SH2vBl3VmKK9dn5kX67uQ.roa
File: SiekW9SH2vBl3VmKK9dn5kX67uQ.roa (raw, json)
Hash identifier: Veum1wr4Q+TbcFpNvbh2wNaenNmE3wIuOK5WDwJGD5Q=
Subject key identifier: 4A:27:A4:5B:D4:87:DA:F0:65:DD:59:8A:2B:D7:67:E6:45:FA:EE:E4
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AE8E8B0
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/SiekW9SH2vBl3VmKK9dn5kX67uQ.roa
Signing time: Wed 18 May 2022 08:20:18 +0000
ROA not before: Wed 18 May 2022 08:20:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 89.117.68.0/24 maxlen: 24
84.46.170.0/24 maxlen: 24
89.117.15.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
89.117.35.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
89.116.236.0/24 maxlen: 24
89.116.234.0/24 maxlen: 24
89.116.244.0/24 maxlen: 24
89.116.241.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183036080 (0xae8e8b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 18 08:20:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a27a45bd487daf065dd598a2bd767e645faeee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:8d:ef:6b:27:48:d8:e3:74:65:d0:52:70:
4c:e0:f6:80:f7:8b:68:a3:84:6d:3b:94:da:b5:1e:
66:25:1d:56:dc:8c:78:ae:41:97:91:c7:71:c1:a5:
11:d4:b0:be:95:3b:22:1d:f3:66:00:7f:1e:36:54:
ad:fd:43:72:61:b2:1a:77:db:53:fc:c0:a6:13:6e:
35:9a:e8:64:0f:99:b5:2b:e8:5c:13:14:82:5a:70:
1c:89:1d:5a:46:fc:47:5f:f9:ea:b6:0c:cd:e7:22:
8c:52:de:e3:b9:29:40:5a:60:1a:80:d2:a5:77:8c:
ff:ad:e1:31:28:b8:03:84:4a:c8:f0:52:89:19:60:
80:2f:f0:b1:33:43:7d:e8:87:9e:43:30:56:88:ca:
60:05:d8:b4:57:8d:c9:c7:95:37:3c:7c:b5:0d:8b:
20:20:74:ea:41:28:52:5d:68:72:57:8d:6f:39:0a:
b2:63:48:18:2c:74:33:dd:f0:07:70:8f:ea:40:c7:
b6:84:7c:30:5c:1c:8f:90:93:2f:2c:ae:c8:e6:78:
26:b9:04:ff:3f:1d:37:70:58:83:84:1a:01:d2:82:
0d:4d:21:58:36:09:1c:17:ef:00:ce:3c:eb:ff:9a:
37:6c:11:b6:ed:2f:b6:e5:57:56:8b:70:81:df:76:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:27:A4:5B:D4:87:DA:F0:65:DD:59:8A:2B:D7:67:E6:45:FA:EE:E4
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/SiekW9SH2vBl3VmKK9dn5kX67uQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/24
86.38.175.0/24
86.38.190.0/24
89.116.70.0/24
89.116.102.0/24
89.116.234.0/24
89.116.236.0/24
89.116.241.0/24
89.116.244.0/24
89.117.15.0/24
89.117.35.0/24
89.117.68.0/24
89.117.218.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f8:ab:fc:85:80:8f:79:51:96:1b:64:0c:d7:25:4f:2a:9b:
1a:5c:bd:71:75:16:00:b4:7b:37:5e:80:ed:4b:69:85:10:d7:
6e:1a:29:26:1f:d3:0a:00:50:ce:a8:92:24:0d:da:d5:17:e5:
6f:b9:fe:c6:28:20:0f:b8:8e:cd:0e:60:06:1a:49:ae:d5:5c:
36:42:13:b2:f2:c4:b2:a8:7c:f6:e7:9f:fd:73:0c:8e:1a:1d:
5d:ef:d0:6c:70:69:2e:39:ad:4a:49:d3:da:c3:fd:21:43:50:
ae:17:f2:e9:30:3b:e3:87:74:c0:83:6b:09:03:d2:b6:e4:76:
cc:76:75:2c:e4:0a:3a:78:1c:a1:66:21:89:91:8f:7c:31:fd:
e2:89:15:e0:65:41:d7:13:7d:83:ff:9a:60:f8:9d:6e:fa:db:
aa:a3:66:4f:01:1e:37:9a:b6:0c:b5:f9:f0:8d:6c:69:7b:e0:
04:77:67:f7:b6:a3:e2:36:c1:83:c7:a9:ce:99:04:5b:e2:b0:
4a:c8:62:b0:6b:93:d0:03:fa:b1:51:59:7a:9e:7c:25:35:7f:
46:26:9d:39:c4:30:dc:49:6f:5a:29:6a:59:2d:0a:fb:90:8d:
d7:45:23:b1:c2:dd:b7:7c:e5:22:91:7a:58:ea:72:1d:1f:4e:
27:23:84:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org