Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VGYW3Dh-o2HAATf8g2doXdgFMLY.roa
File: VGYW3Dh-o2HAATf8g2doXdgFMLY.roa (raw, json)
Hash identifier: icGYgA/xDzrcCh6ytdo4f/JmD6H6tHDCL4mhZh5AX28=
Subject key identifier: 54:66:16:DC:38:7E:A3:61:C0:01:37:FC:83:67:68:5D:D8:05:30:B6
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B020C58
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VGYW3Dh-o2HAATf8g2doXdgFMLY.roa
Signing time: Tue 24 May 2022 06:53:30 +0000
ROA not before: Tue 24 May 2022 06:53:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 86.38.151.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.118.0/24 maxlen: 24
89.117.15.0/24 maxlen: 24
89.117.124.0/24 maxlen: 24
89.116.168.0/24 maxlen: 24
89.117.136.0/24 maxlen: 24
82.140.182.0/24 maxlen: 24
89.117.38.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184683608 (0xb020c58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 24 06:53:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=546616dc387ea361c00137fc8367685dd80530b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:61:8e:23:d5:0e:a4:2d:9c:1e:28:8d:c1:
7d:45:1e:aa:56:fe:72:e0:29:33:d7:62:db:39:cc:
18:fc:d9:ed:72:0d:42:d0:bb:87:d9:85:cb:4e:8c:
fe:88:37:d6:f9:06:75:0d:21:3f:51:7c:28:4d:4b:
0e:5e:12:f3:2a:37:ca:08:cb:31:cb:28:d6:2b:48:
ba:38:75:e1:66:91:60:80:3f:ac:af:b4:24:7f:bc:
2c:6d:2a:79:b6:81:cf:1f:c8:64:f1:1f:54:51:f5:
03:e0:26:75:ce:64:18:87:cc:9c:62:c5:7b:d7:93:
02:52:07:87:e8:5c:84:0f:dd:a2:9b:b5:97:af:6b:
82:66:75:33:b7:4c:64:6a:d2:09:4d:f8:fb:7d:77:
bd:9a:e5:5c:b1:b5:2f:6e:bc:5c:b2:92:17:f4:67:
81:b0:43:25:55:ce:fd:b8:e0:e4:fe:18:27:52:4d:
c9:b9:38:86:ca:3a:a0:39:a0:f1:92:bb:43:27:83:
85:69:78:4b:53:ee:ac:ff:52:74:86:e7:37:8c:09:
a1:d8:08:5e:b8:39:d8:71:03:15:9e:38:b3:96:a3:
d3:8b:17:59:bc:14:c1:7e:09:42:e7:e1:a1:ad:68:
19:5d:3c:cb:48:d2:3d:39:48:07:d9:84:2e:d4:7d:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:66:16:DC:38:7E:A3:61:C0:01:37:FC:83:67:68:5D:D8:05:30:B6
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VGYW3Dh-o2HAATf8g2doXdgFMLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/24
84.46.171.0/24
86.38.7.0/24
86.38.151.0/24
89.116.96.0/24
89.116.168.0/24
89.116.193.0/24
89.117.15.0/24
89.117.38.0/24
89.117.118.0/24
89.117.124.0/24
89.117.136.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9d:26:9b:57:da:c2:a5:74:6b:19:e4:93:b0:54:4c:ed:6c:
01:87:b0:99:0e:a9:97:15:0a:3d:fd:ee:e5:cf:d3:ef:3e:ac:
a2:52:6f:90:ff:dd:08:ad:0e:52:81:7d:b5:d6:97:fa:b0:12:
5b:fa:0e:19:97:90:ec:da:87:7b:0f:9b:0b:8d:bd:5e:7c:64:
0d:16:8a:92:84:ae:71:72:87:ad:f1:61:4d:67:a4:7c:4c:e1:
c4:de:48:08:e8:44:5d:99:ad:ac:af:b8:57:d8:16:c5:91:9e:
5f:e0:f4:8f:ee:b6:31:62:35:ee:31:c8:82:7c:aa:64:05:3a:
3d:49:d3:cd:ad:f1:b9:aa:bf:e1:4b:ce:43:70:c4:cd:5f:b8:
8d:e0:f0:12:9c:86:a4:e9:5b:66:48:4c:20:90:82:bc:00:49:
14:d0:dd:d2:47:43:64:52:86:de:38:09:3b:d0:b1:2a:ea:79:
d0:d8:6a:ba:14:1f:0b:fc:1c:4a:90:02:1f:4d:a1:93:f0:62:
10:ba:5e:1b:d2:fd:3a:90:0a:a9:60:63:8c:76:7d:8c:c3:6b:
c3:25:ee:a0:ea:df:dd:79:b3:58:a0:a4:ce:4d:ec:cb:d5:b2:
7c:4a:9f:8a:35:a5:42:17:ae:78:43:db:d4:79:72:4f:9a:a5:
49:31:ae:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org