Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/XVuYYcW2YF-CuJW-RUJmtdJfMIM.roa
File: XVuYYcW2YF-CuJW-RUJmtdJfMIM.roa (raw, json)
Hash identifier: juordXcxvpX52wDw9Tu0bftGz9OtMkSqpY/SDJczLT0=
Subject key identifier: 5D:5B:98:61:C5:B6:60:5F:82:B8:95:BE:45:42:66:B5:D2:5F:30:83
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09635D94
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/XVuYYcW2YF-CuJW-RUJmtdJfMIM.roa
Signing time: Tue 08 Feb 2022 07:26:15 +0000
ROA not before: Tue 08 Feb 2022 07:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 86.38.248.0/21 maxlen: 24
86.38.37.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.116.64.0/22 maxlen: 24
84.46.200.0/24 maxlen: 24
89.117.172.0/22 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157506964 (0x9635d94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 8 07:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d5b9861c5b6605f82b895be454266b5d25f3083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:fb:af:0f:6a:ee:9d:ed:70:d3:e9:ca:a2:
09:0c:66:db:a3:d7:0e:77:1b:03:af:ca:8c:40:d9:
79:fd:3a:97:00:54:a9:60:e3:27:ee:74:56:e8:e7:
b7:b9:ef:70:0a:9e:d6:b5:90:55:54:17:7e:e8:6e:
f6:b9:5e:ee:2e:bd:bb:87:03:6e:4f:ea:1b:c3:dd:
91:0a:f2:b4:a2:ee:e6:29:53:ba:de:71:a6:45:96:
82:9e:11:26:c0:14:f5:a8:89:72:e6:8a:a6:20:1b:
40:e6:2a:0f:b8:7b:5e:e3:6c:ff:b8:c8:8e:8c:14:
de:08:91:6c:30:7f:9a:9a:fe:e1:61:b7:d0:74:ed:
8c:9a:88:a7:d0:ed:b5:f0:c7:3d:dc:67:23:f4:5c:
16:a5:08:13:db:05:ab:f4:b6:12:66:8a:5f:96:df:
c1:37:0f:10:99:5f:7f:69:92:f0:79:3c:c1:3a:07:
14:fe:0e:69:42:e5:dd:db:87:79:5d:d0:34:a4:7e:
6b:47:e9:e8:35:e8:ac:3f:7c:a3:4a:84:9c:e9:17:
ce:1b:52:46:6f:1b:5d:fe:87:0c:35:44:20:99:93:
47:1d:c5:a8:18:00:c1:49:50:0b:93:2e:de:d9:2e:
49:2f:be:32:72:06:46:a2:c6:78:2b:12:d5:56:48:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5B:98:61:C5:B6:60:5F:82:B8:95:BE:45:42:66:B5:D2:5F:30:83
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/XVuYYcW2YF-CuJW-RUJmtdJfMIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.200.0/24
86.38.37.0/24
86.38.156.0/24
86.38.177.0/24
86.38.235.0/24
86.38.238.0/24
86.38.248.0/21
89.116.64.0/22
89.117.172.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:30:ad:a2:f2:60:aa:17:7d:b0:e5:41:41:5e:95:dc:54:d0:
1d:80:dc:48:16:c0:08:de:4b:82:22:75:1a:20:01:fe:1e:b2:
d2:3b:5f:c3:ca:09:0a:3f:72:15:05:fd:8f:3e:d3:e2:72:1f:
06:09:88:a9:cf:7b:fb:1c:5d:8c:b0:6c:45:28:a9:a0:47:de:
e2:80:b2:8e:c2:67:57:a8:02:fd:6e:02:29:4a:aa:93:e8:00:
5c:65:69:e8:64:1b:7d:d0:b9:6e:ca:43:c7:96:b7:82:44:bc:
be:e1:b9:9c:08:d8:b9:35:de:b1:2b:fa:1a:c8:9b:0f:ec:d1:
1f:f5:86:ab:1b:07:b3:9a:45:8e:08:5f:c4:ad:5f:2e:ad:6d:
12:da:4f:73:b3:ce:db:39:b9:2f:d8:b6:fa:5f:d5:07:31:24:
3c:37:5d:7a:1c:25:03:12:ee:08:2a:a1:0c:8a:4b:a0:18:fd:
09:bc:89:ff:17:30:95:bf:8f:7a:2e:99:3f:d1:d8:fb:0b:9c:
31:68:36:74:d5:13:87:cd:f9:dc:5b:ca:f3:91:5f:e3:34:db:
56:18:f9:b0:85:27:56:48:43:eb:bb:ee:8f:61:ff:1b:43:8e:
db:3a:10:22:07:ac:5b:74:8f:bd:e5:d5:b0:af:86:10:25:cf:
ee:49:1e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org