Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VJ7Og3Bh6rcY7YYLAD26gJsiZOk.roa
File: VJ7Og3Bh6rcY7YYLAD26gJsiZOk.roa (raw, json)
Hash identifier: kVgvAD3Iqi3q/u2+0CLolKHNvzx3PfeELV+/T9PlpJg=
Subject key identifier: 54:9E:CE:83:70:61:EA:B7:18:ED:86:0B:00:3D:BA:80:9B:22:64:E9
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 091C7732
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VJ7Og3Bh6rcY7YYLAD26gJsiZOk.roa
Signing time: Thu 27 Jan 2022 06:19:13 +0000
ROA not before: Thu 27 Jan 2022 06:19:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 86.38.246.0/23 maxlen: 24
89.117.70.0/23 maxlen: 24
89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.80.0/22 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.117.112.0/22 maxlen: 24
89.116.58.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.116.72.0/22 maxlen: 24
89.116.88.0/23 maxlen: 24
89.117.64.0/22 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.116.180.0/22 maxlen: 24
89.117.142.0/23 maxlen: 24
89.117.160.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152860466 (0x91c7732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jan 27 06:19:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=549ece837061eab718ed860b003dba809b2264e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:3f:7b:30:fd:1d:08:e9:d1:af:a3:1f:02:
e2:56:01:92:80:32:e3:da:82:c7:b2:62:07:a2:54:
7e:f6:77:f8:c0:5a:9b:7e:a4:dd:4a:48:2e:5f:2d:
75:f2:5c:48:8b:a9:5a:81:40:62:62:af:5f:99:2e:
33:6f:14:c9:76:52:2a:48:b3:b0:0f:ea:a9:19:fa:
8f:4a:24:41:0b:c8:26:88:05:3d:4c:93:0a:d3:fd:
2d:a5:88:94:95:15:64:c2:90:d4:d2:42:28:c0:ec:
62:53:bd:70:a6:88:d6:79:d4:ad:22:5e:f6:90:ba:
e8:7e:52:3c:e0:fe:e4:77:43:0d:20:37:a1:1e:ef:
41:bb:0b:c7:6f:98:8b:34:5c:25:39:fd:0f:de:58:
d5:eb:01:7f:ff:84:7b:16:90:bd:04:dd:3c:fb:f0:
9c:38:ea:31:dc:c6:00:92:b3:c7:f0:19:32:9c:74:
91:2a:a3:01:1d:01:c9:3d:5c:2b:3e:6b:98:7d:21:
44:8e:36:5d:6b:6e:60:9f:b0:2e:06:c6:3d:47:40:
f2:5e:72:08:c7:d8:c3:05:1e:e1:2b:d7:4d:aa:64:
12:0f:d6:fb:e6:e9:47:90:88:d6:2e:5b:5a:c3:41:
fb:84:e9:f3:ee:a7:c1:41:79:14:10:23:fa:1f:70:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9E:CE:83:70:61:EA:B7:18:ED:86:0B:00:3D:BA:80:9B:22:64:E9
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VJ7Og3Bh6rcY7YYLAD26gJsiZOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.182.0/23
86.38.202.0/23
86.38.246.0/23
89.116.58.0/23
89.116.68.0/23
89.116.72.0/22
89.116.88.0/23
89.116.180.0/22
89.116.212.0/22
89.117.24.0/23
89.117.28.0/22
89.117.64.0/22
89.117.70.0-89.117.85.255
89.117.88.0/22
89.117.96.0/22
89.117.112.0/22
89.117.132.0/22
89.117.142.0/23
89.117.160.0/22
Signature Algorithm: sha256WithRSAEncryption
26:68:7d:00:58:1a:5f:54:51:07:6d:c8:51:31:34:ee:1b:43:
bb:c2:98:e4:2f:5e:0d:ea:db:fa:2a:73:9d:17:12:d7:d0:36:
3a:46:bb:a0:e7:c6:9a:30:29:a3:71:76:ff:9e:88:5f:11:62:
c3:10:3e:c6:10:0a:f9:31:9e:26:d3:e8:28:ed:1d:f9:d2:c0:
29:7c:f2:43:fd:d3:c4:fc:5e:4a:dd:4f:f6:4c:75:92:e3:d0:
66:eb:0b:e1:cf:13:e0:f8:8b:26:5c:99:76:45:bb:a6:90:17:
88:1e:14:ee:bb:59:71:33:8a:67:2c:9e:fc:93:fd:f3:ca:60:
c4:29:d7:df:1f:13:34:a2:b5:f2:fe:21:9b:22:49:50:88:3e:
44:ef:d5:62:a5:ef:46:28:4d:6e:5f:a3:29:42:95:a1:6f:25:
9a:56:f5:79:d1:8c:e6:6e:8e:8f:11:5e:0d:3e:40:aa:d4:27:
b9:64:01:b8:fd:94:1a:45:94:a5:e1:26:8a:92:f6:c1:97:ac:
c9:32:80:2e:fa:59:7a:6c:ab:95:5b:4d:68:ed:31:b4:18:c6:
88:ac:73:65:66:b1:18:ac:77:17:c0:59:72:8f:f1:6c:0d:fc:
15:48:e4:c7:f4:a8:0f:62:ec:8f:cb:34:67:0c:8d:e4:33:ef:
62:01:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org