Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/U3UBiDe6xKXv8ulg4nV8gjc8fcw.roa
File: U3UBiDe6xKXv8ulg4nV8gjc8fcw.roa (raw, json)
Hash identifier: EInxZMxPe7xxEKcRtTS/QbC42R3p8KISk6P6S42A08M=
Subject key identifier: 53:75:01:88:37:BA:C4:A5:EF:F2:E9:60:E2:75:7C:82:37:3C:7D:CC
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B115F01
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/U3UBiDe6xKXv8ulg4nV8gjc8fcw.roa
Signing time: Thu 26 May 2022 13:16:13 +0000
ROA not before: Thu 26 May 2022 13:16:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 89.117.68.0/24 maxlen: 24
89.116.236.0/24 maxlen: 24
89.116.234.0/24 maxlen: 24
89.116.244.0/24 maxlen: 24
84.46.170.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
89.117.15.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
89.117.35.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185687809 (0xb115f01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 26 13:16:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5375018837bac4a5eff2e960e2757c82373c7dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:62:38:dc:aa:b6:00:e2:fc:cb:2c:60:73:
13:85:2e:bc:a3:95:4d:bc:11:3f:0f:59:1c:05:f9:
a1:81:bf:da:ce:8f:04:9f:d9:b9:41:9e:3b:32:ab:
11:94:69:4f:fd:52:4c:90:03:a1:0a:f7:53:a4:3c:
96:87:cc:92:be:38:41:c8:d8:aa:ac:82:0d:58:08:
8a:d9:39:f7:42:08:25:31:aa:10:a9:21:01:8e:fe:
04:b1:db:68:d0:b4:ca:44:bb:00:c3:f5:3a:e9:ec:
9a:50:65:2e:ce:e7:c1:df:8e:21:a1:e0:e1:6e:8c:
21:cf:c9:4e:a0:94:ef:c2:a3:85:d9:60:2b:64:d9:
4d:e6:dd:a4:b7:f4:c5:6b:82:15:ed:d9:38:97:ce:
1c:25:02:51:aa:24:a4:ef:c2:86:ca:44:97:e1:dc:
04:89:3e:ab:74:f1:93:93:d1:5e:c6:f7:13:2c:be:
f3:06:eb:ac:cd:9c:46:df:08:e6:6a:a6:7f:2f:00:
74:80:f2:f4:da:e6:98:05:16:48:65:b7:70:bc:c2:
7e:d2:8f:ac:9c:95:85:8b:6e:66:8b:22:bd:dd:24:
6e:b2:d1:3a:fb:62:39:b3:17:3c:8b:00:47:3a:ec:
cf:d5:2b:14:9c:73:9b:b5:67:49:02:c6:eb:88:b9:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:75:01:88:37:BA:C4:A5:EF:F2:E9:60:E2:75:7C:82:37:3C:7D:CC
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/U3UBiDe6xKXv8ulg4nV8gjc8fcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/24
86.38.175.0/24
86.38.190.0/24
89.116.70.0/24
89.116.102.0/24
89.116.234.0/24
89.116.236.0/24
89.116.244.0/24
89.117.15.0/24
89.117.35.0/24
89.117.68.0/24
89.117.218.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:c4:93:b6:8e:72:d9:e4:dd:b8:b2:89:09:29:e8:f3:cb:2b:
c7:88:63:ff:c3:aa:03:89:51:85:fc:bc:7a:cc:e6:d3:c6:21:
3c:67:22:7e:13:21:e5:14:ce:02:dc:30:3d:80:85:d6:13:e7:
5c:d9:9d:ff:40:19:7f:1d:50:ad:56:e7:09:21:80:77:63:32:
dd:69:ed:f4:c0:cf:2e:f6:7a:eb:20:d7:96:a8:48:c2:57:92:
ff:50:20:ae:5d:7e:2f:7b:9f:cc:d4:c5:68:c6:93:8c:99:35:
97:e0:e9:96:ed:95:12:be:26:f9:a8:8b:2a:c7:f5:3b:c9:1e:
ef:80:4c:e7:48:f4:b3:1e:07:4d:d9:35:7c:5d:8f:b8:7f:fe:
71:1e:38:8f:6c:81:90:5b:66:31:7b:07:4b:ae:d5:06:0e:91:
8e:06:04:27:a4:2a:e0:a8:72:bc:7d:41:5f:58:34:dd:c0:2a:
43:01:64:46:b4:b6:ca:58:b3:7c:fb:7f:98:47:27:dc:84:40:
eb:cf:91:a8:6d:d4:02:83:69:95:2f:c8:5d:ca:83:d0:93:34:
be:a7:e8:68:cb:c1:0a:bc:0c:0f:05:da:60:bb:17:ad:cb:81:
94:9b:74:db:4d:3d:2e:a5:f9:f1:7b:47:e4:26:46:a4:d5:b8:
7e:99:83:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org