Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Vg8TqXq-lC6zTfz1VMcW5qa2ryM.roa
File: Vg8TqXq-lC6zTfz1VMcW5qa2ryM.roa (raw, json)
Hash identifier: YwtY82baH2PHvOeTd7WLfyVXbToR+IlGq2jriEChb7k=
Subject key identifier: 56:0F:13:A9:7A:BE:94:2E:B3:4D:FC:F5:54:C7:16:E6:A6:B6:AF:23
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 018289994EB65DABA0644B3CB501BB65A802
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Vg8TqXq-lC6zTfz1VMcW5qa2ryM.roa
Signing time: Wed 10 Aug 2022 21:11:41 +0000
ROA not before: Wed 10 Aug 2022 21:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 89.116.132.0/24 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:89:99:4e:b6:5d:ab:a0:64:4b:3c:b5:01:bb:65:a8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 10 21:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=560f13a97abe942eb34dfcf554c716e6a6b6af23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:94:32:35:d8:e1:97:f1:fa:3b:74:6f:6b:9e:
54:f2:3d:cc:86:1e:fb:74:af:77:fe:bd:6c:76:14:
a2:8b:74:c2:02:74:3f:ef:a2:67:db:73:df:cb:1e:
06:8c:3d:20:10:80:86:3a:78:7e:4e:4d:0d:b4:88:
dd:33:57:ec:5a:9f:15:76:eb:32:d0:44:ef:ef:d6:
25:df:8c:be:21:0d:89:2b:68:72:ef:e5:6b:82:e2:
7a:de:a4:b2:ee:74:d4:c0:d6:34:1f:93:bc:48:09:
c2:aa:85:d0:d6:3a:b7:93:c2:00:f2:85:65:c1:77:
fd:5d:8e:97:a5:c5:3a:e7:e6:61:3b:be:c3:c6:b6:
de:d3:5e:50:54:d9:4d:04:01:83:53:33:8f:69:4b:
98:c7:b7:c4:db:fe:7e:d3:50:e5:b5:4b:e7:8e:35:
08:30:97:bd:53:9e:57:17:30:98:f5:0a:b8:d8:ca:
1f:39:d5:12:3e:02:88:22:ca:4a:5e:7e:08:9e:ea:
96:77:92:05:3f:b3:d7:a5:37:f2:f9:e7:f3:0a:11:
64:f1:39:11:96:91:05:a1:b9:1a:54:ed:f6:7c:de:
b3:4a:50:90:a8:af:48:0a:0a:eb:88:e8:8c:59:8d:
83:f2:1b:32:19:4c:e7:16:14:02:bd:cc:8e:60:24:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0F:13:A9:7A:BE:94:2E:B3:4D:FC:F5:54:C7:16:E6:A6:B6:AF:23
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Vg8TqXq-lC6zTfz1VMcW5qa2ryM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.238.0/24
89.116.132.0/24
89.116.140.0/24
89.116.158.0/24
89.116.166.0/24
89.116.255.0/24
89.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c8:e3:ab:8b:2f:13:2d:a1:9e:53:6f:1a:56:99:77:a4:22:
6d:2c:4c:03:b2:08:35:34:33:36:9c:2f:18:fd:3c:45:92:89:
c8:dc:a4:2f:ad:25:fb:45:1f:ac:a7:c3:9f:32:4d:6e:d5:2b:
41:1f:fa:cc:70:48:9d:60:ac:aa:d3:a3:a8:79:86:13:eb:5c:
cc:4c:6b:c6:b4:2e:25:ae:1c:0d:d5:48:2a:90:41:25:66:98:
4c:32:f8:cb:1b:0a:55:da:64:e5:4e:b0:0c:78:e7:f0:07:38:
0f:9c:ac:af:9c:3a:2e:b3:12:dc:5d:c4:a9:53:6c:97:06:0e:
f2:d6:ff:94:b7:a1:8f:2c:61:59:cd:f6:65:9a:69:1e:8a:69:
86:df:5f:af:c1:ee:71:ce:4c:db:a3:cf:89:cd:4e:0b:a7:68:
12:31:3b:5b:e3:55:a7:6a:39:b6:f3:cb:61:f8:a8:e4:07:d5:
ad:af:b0:9a:3d:6e:fe:07:22:1a:5e:93:04:e0:16:b7:8d:9c:
19:df:41:f7:78:12:5a:31:10:31:2d:69:ad:3b:b2:f7:82:3f:
13:d6:02:15:45:90:71:52:09:ee:b8:d7:20:02:5e:b2:5f:10:
92:ab:62:32:95:99:83:fd:d6:b4:bd:9a:a7:fd:9e:30:ae:2d:
2a:fe:4e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org