Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/XRzmGhYmivhWaGOw2Nu_DDkIEZM.roa
File: XRzmGhYmivhWaGOw2Nu_DDkIEZM.roa (raw, json)
Hash identifier: ZnLEDGV0rImD2k0VHkIajQ8t4rGJgIlAR5SHqnnJ+GY=
Subject key identifier: 5D:1C:E6:1A:16:26:8A:F8:56:68:63:B0:D8:DB:BF:0C:39:08:11:93
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A6BCCD5
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/XRzmGhYmivhWaGOw2Nu_DDkIEZM.roa
Signing time: Wed 20 Apr 2022 11:08:16 +0000
ROA not before: Wed 20 Apr 2022 11:08:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 86.38.151.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.118.0/24 maxlen: 24
89.117.124.0/24 maxlen: 24
89.116.168.0/24 maxlen: 24
89.117.136.0/24 maxlen: 24
82.140.182.0/24 maxlen: 24
89.117.38.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174836949 (0xa6bccd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 20 11:08:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d1ce61a16268af8566863b0d8dbbf0c39081193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:30:1b:8a:e9:38:9d:c1:95:50:d8:70:b5:
c1:f4:71:66:95:18:2e:d5:cd:89:7c:17:2c:a8:c6:
da:ab:2b:fa:11:55:f3:24:a6:1f:21:5c:70:0b:41:
a4:28:43:17:35:a8:75:c5:73:1c:18:1b:bb:7e:de:
41:1b:85:28:68:4a:14:48:a0:fb:8d:82:3c:b0:ba:
9e:e5:f0:f3:e0:41:4c:1c:53:9a:22:d8:58:26:4d:
7a:00:1b:3c:0f:4b:ba:f3:db:8f:81:c7:17:db:ba:
7f:5c:92:ad:86:6e:62:10:d4:16:13:c1:a8:ff:66:
66:3c:10:fc:a8:45:90:af:dd:0a:5f:83:51:5f:16:
d3:e2:26:7f:53:80:4e:cb:c9:00:c0:a9:4b:c6:06:
41:d9:af:42:81:4d:4f:46:1b:03:8e:c8:d2:f8:18:
8a:49:ef:c8:8e:1e:fc:e0:93:53:94:7e:d3:ac:4a:
ef:70:02:ac:30:88:7f:92:9d:2c:fa:88:8c:8c:c9:
38:54:c8:12:dc:d3:2d:f9:08:88:30:74:06:8d:27:
6d:36:7f:64:9a:17:15:b7:ce:51:45:b6:b5:f9:62:
96:68:fc:de:55:be:b6:a9:c4:e8:95:c8:52:24:d3:
5a:2b:14:f0:e8:24:91:89:82:22:2d:f4:ab:3d:c4:
d6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1C:E6:1A:16:26:8A:F8:56:68:63:B0:D8:DB:BF:0C:39:08:11:93
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/XRzmGhYmivhWaGOw2Nu_DDkIEZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/24
84.46.171.0/24
86.38.7.0/24
86.38.151.0/24
89.116.96.0/24
89.116.168.0/24
89.117.38.0/24
89.117.118.0/24
89.117.124.0/24
89.117.136.0/24
Signature Algorithm: sha256WithRSAEncryption
92:09:c8:41:05:cb:0a:01:1d:61:72:f8:80:09:86:a3:6d:e3:
8a:19:9a:d8:68:46:f6:cc:71:b1:b8:cf:e2:05:2c:d3:69:f9:
26:06:59:73:e9:2e:2e:92:8f:63:2f:c3:8f:aa:0f:01:5c:75:
d3:8a:94:7e:e6:7f:e7:0e:87:51:84:99:06:21:61:e8:5f:bc:
a1:b7:1c:be:9b:c6:09:2c:98:28:b2:63:7b:54:6a:9b:b7:cf:
00:47:b3:93:23:f6:1e:fd:08:59:89:92:bf:dd:9b:d2:79:9b:
0e:de:48:7d:4f:01:7a:b1:83:89:a1:11:98:1c:71:3f:72:95:
81:29:1a:54:77:2a:81:d2:c5:58:2a:e5:e9:2d:62:61:3f:88:
d9:00:96:88:23:1b:90:3d:c0:3f:e2:f4:8b:4d:52:a1:c9:51:
14:aa:d2:23:8d:37:84:e1:48:a8:b3:b9:7c:7a:5b:aa:aa:06:
2e:34:fd:f7:b8:d1:9d:7d:04:62:b3:fd:05:74:b9:ba:2e:64:
b8:50:df:6f:f4:49:13:27:9b:da:71:e3:c8:ce:e0:c6:c9:aa:
c6:8c:8c:0c:84:90:b1:72:a5:a3:3a:9b:53:9c:74:f7:ad:53:
99:6a:00:8f:b0:29:07:3f:7e:c3:88:0c:06:ca:36:f1:62:39:
a6:96:e2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org