Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/UgJ_UGn5RSpZvzH1zZMZ2FuVsoo.roa
File: UgJ_UGn5RSpZvzH1zZMZ2FuVsoo.roa (raw, json)
Hash identifier: g/BcScrX32TRxy1jCZmlw8T2KkbLkh4E+/NbRamZm8M=
Subject key identifier: 52:02:7F:50:69:F9:45:2A:59:BF:31:F5:CD:93:19:D8:5B:95:B2:8A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B815B6E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/UgJ_UGn5RSpZvzH1zZMZ2FuVsoo.roa
Signing time: Wed 22 Jun 2022 14:43:32 +0000
ROA not before: Wed 22 Jun 2022 14:43:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 84.46.170.0/24 maxlen: 24
89.117.101.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
86.38.214.0/24 maxlen: 24
89.117.167.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193026926 (0xb815b6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 22 14:43:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52027f5069f9452a59bf31f5cd9319d85b95b28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:f2:b2:ee:47:c1:cc:35:43:85:96:dc:dd:
fb:25:86:35:cd:f2:56:1a:84:60:bb:8c:cd:34:a2:
31:e3:e4:d2:f3:fd:43:72:c1:b2:58:29:5b:68:15:
00:d7:32:9d:69:8a:d5:9a:9e:0f:86:95:36:1e:f8:
74:a6:15:fe:5e:fc:06:d9:f8:43:4d:e3:af:44:d3:
ed:35:57:4e:52:95:52:ca:0a:53:1d:ec:43:40:5f:
c0:1c:f0:ff:da:06:26:51:23:85:49:15:79:70:52:
47:cc:a3:fa:e0:6f:fb:90:0a:bd:68:8c:a0:89:96:
01:ac:78:2d:cd:fa:d5:65:e4:43:14:24:6e:52:e4:
a3:54:e1:c6:70:00:0d:d2:9f:ea:ff:c6:7a:4b:8e:
de:c0:a5:03:cd:6c:32:4f:be:76:25:56:53:21:38:
ce:3a:03:3e:d8:9e:44:16:db:46:33:3b:50:02:bb:
88:1d:1a:b5:db:fd:e7:4c:f9:1c:06:d1:3f:d3:a6:
45:68:b2:e2:5b:b5:1b:80:fb:55:44:30:4d:3b:1d:
86:b4:5b:26:2e:6d:4d:0f:05:6b:fa:c4:68:52:16:
72:01:4c:3d:9f:4f:65:6e:0b:94:da:45:da:e7:2e:
0e:7a:9d:0f:5d:d5:ae:4c:42:bf:ca:32:d1:b0:75:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:02:7F:50:69:F9:45:2A:59:BF:31:F5:CD:93:19:D8:5B:95:B2:8A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/UgJ_UGn5RSpZvzH1zZMZ2FuVsoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/24
86.38.214.0/24
89.116.102.0/24
89.116.163.0/24
89.117.101.0/24
89.117.167.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:41:93:62:e0:7f:33:e6:15:25:54:6a:ac:43:39:cc:af:ea:
e3:08:99:db:64:dc:11:64:ee:c0:2f:ad:f7:3c:fa:95:4c:76:
50:17:be:e4:7a:08:fb:65:f0:7b:36:fe:ae:c3:05:72:e2:bd:
a7:4b:d5:e6:6e:03:0a:68:02:86:67:f2:31:34:1d:ed:52:3c:
62:9b:aa:a4:a0:dd:07:73:e5:ca:9f:2f:92:be:07:93:bb:79:
2e:2a:4c:c7:0b:93:0d:85:85:f1:56:c3:17:7e:c3:0a:da:e5:
75:89:d8:fa:a9:83:13:84:b1:57:6f:9f:2f:4d:d8:f3:38:94:
89:be:da:70:b4:4b:c5:60:21:bc:33:2e:e9:14:7d:10:43:2c:
88:b3:07:6f:cb:ef:27:75:37:73:0f:5e:1e:de:08:6c:8c:95:
d8:fc:a7:df:0b:40:a8:cc:b0:99:b3:1f:9f:99:4c:25:74:d9:
d2:60:1c:1e:2d:ff:72:45:68:e2:18:7d:1e:86:60:f8:3d:a5:
d0:32:bb:11:12:22:a9:a7:22:2f:a7:a7:96:e1:71:6a:79:63:
36:2d:b5:c2:af:e1:7e:04:8f:40:0c:0e:6b:bb:20:c3:3f:78:
9a:d0:94:db:0f:b0:7e:09:06:96:a3:ac:96:61:48:f9:6f:61:
d4:15:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org