Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/UOdtgg5nrJhAC5XRgpxDMKGwxog.roa
File: UOdtgg5nrJhAC5XRgpxDMKGwxog.roa (raw, json)
Hash identifier: V4w7bcETD8lFvXO5P1IxMCkVRSKYyEQC+K2jwUGCfrM=
Subject key identifier: 50:E7:6D:82:0E:67:AC:98:40:0B:95:D1:82:9C:43:30:A1:B0:C6:88
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182FDCF15B8537B15A8046EF098BAA7DC14
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/UOdtgg5nrJhAC5XRgpxDMKGwxog.roa
Signing time: Fri 02 Sep 2022 10:46:23 +0000
ROA not before: Fri 02 Sep 2022 10:46:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 89.117.94.0/23 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.117.228.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.184.0/23 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fd:cf:15:b8:53:7b:15:a8:04:6e:f0:98:ba:a7:dc:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 2 10:46:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50e76d820e67ac98400b95d1829c4330a1b0c688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cd:25:db:ce:60:05:be:22:ea:5d:8b:19:10:
e2:6e:86:78:0d:9a:91:9c:b8:e5:2f:e5:f6:b9:c0:
c7:1b:fe:a3:ec:d0:ce:d8:f7:7c:98:e7:0c:93:2e:
db:e7:b8:cf:ca:33:4c:d9:d2:d2:e3:ac:f3:fe:f9:
66:26:3b:b8:58:30:c0:77:7c:8a:91:10:b1:75:fa:
0d:4b:fa:47:a5:e5:f6:b1:13:4e:70:af:12:d4:f7:
43:f7:57:5f:fa:d7:70:cd:8b:d5:1f:a2:c5:3b:db:
b2:62:5a:d7:63:fc:56:a6:0d:25:58:52:d6:84:f2:
61:32:c2:f4:3a:c0:a4:4a:69:00:d6:35:4f:23:fc:
b9:84:46:71:ac:b8:34:dc:96:ea:67:ab:59:7b:b5:
62:43:60:88:02:20:0b:87:7f:00:cf:6e:29:5b:ef:
27:28:90:e4:88:ac:72:61:62:4e:e2:5a:d8:b1:ad:
91:37:0a:44:4a:1c:61:1d:11:86:03:e5:9b:02:e1:
c1:09:4b:63:7a:2e:bb:7e:37:c8:6b:b5:a8:c2:0d:
ca:f6:96:f4:8c:04:d8:05:8f:ab:70:26:7e:f0:cb:
63:1d:ba:41:e7:e3:cb:0a:a7:a1:0d:ec:38:d7:6c:
16:50:cf:bc:98:05:d3:e1:fc:c1:ab:cc:8e:32:75:
0e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E7:6D:82:0E:67:AC:98:40:0B:95:D1:82:9C:43:30:A1:B0:C6:88
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/UOdtgg5nrJhAC5XRgpxDMKGwxog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.108.0/24
89.116.125.0/24
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.184.0/23
89.116.210.0/23
89.116.252.0/24
89.117.8.0/23
89.117.32.0/23
89.117.94.0/23
89.117.116.0/23
89.117.190.0/24
89.117.222.0/24
89.117.228.0/23
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:fd:f1:03:43:b2:44:b6:b0:3f:ad:6c:ee:a6:a8:f6:12:10:
ea:58:7f:66:14:8a:9d:5c:cc:a2:ea:8c:de:c2:32:d6:6d:d7:
8b:85:68:66:89:4d:e2:16:08:ed:57:48:97:79:91:10:97:a3:
91:28:84:2f:97:c8:a4:75:3c:23:0a:24:b6:47:eb:fd:e0:11:
30:b6:da:b2:7e:7f:2a:1d:87:84:bb:ee:57:6d:df:2a:d4:8a:
03:53:b9:6d:71:12:f2:f1:5e:e7:20:6a:ad:2c:e7:5b:71:3d:
3a:a0:aa:29:fa:ea:cc:e6:94:3c:11:ab:b5:d1:3e:0e:bc:49:
9f:e2:9b:32:e3:0f:fc:65:51:ad:62:9f:41:00:f9:81:4c:79:
19:99:d9:de:d0:04:31:3b:b9:a3:0b:b0:54:fc:fe:6b:6b:e1:
0d:ec:92:1a:64:10:ee:d0:1e:b1:eb:ca:b8:bf:7f:ce:36:37:
4d:67:3e:1b:0b:62:c7:b1:26:3e:af:31:b7:22:59:fc:a8:43:
c7:ba:6f:0b:7a:ad:10:72:f7:5a:66:c7:c9:6f:a0:59:90:d1:
d4:1b:34:30:e2:28:fd:68:ce:a4:2b:fd:60:56:db:84:c2:c1:
bb:1b:b8:2c:82:57:85:2a:50:79:49:f5:e6:b9:b3:4a:f1:c1:
86:d0:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org