Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/XsPbCbitfQGxIZe3cReU3q7jA6g.roa
File: XsPbCbitfQGxIZe3cReU3q7jA6g.roa (raw, json)
Hash identifier: 5poucaT0QS4zoIr+VuRcEIgLH9ukItmnhNGDquMZhJU=
Subject key identifier: 5E:C3:DB:09:B8:AD:7D:01:B1:21:97:B7:71:17:94:DE:AE:E3:03:A8
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 08E82D01
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/XsPbCbitfQGxIZe3cReU3q7jA6g.roa
Signing time: Sat 15 Jan 2022 16:34:26 +0000
ROA not before: Sat 15 Jan 2022 16:34:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.116.115.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
84.46.170.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149433601 (0x8e82d01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jan 15 16:34:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ec3db09b8ad7d01b12197b7711794deaee303a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:f0:98:27:a4:05:d4:13:30:8d:5b:f6:cc:
d0:90:32:15:e5:35:aa:d9:eb:0d:42:21:d9:27:08:
74:ce:48:c7:b1:b0:bd:71:19:e4:bb:aa:b3:22:c7:
46:b1:49:76:d1:ff:9a:91:70:b9:cb:31:ec:e4:8a:
66:df:c6:2c:d4:c1:92:c1:f3:d5:b8:c9:ab:62:a4:
d8:1a:bd:0c:7e:67:a9:cf:ca:b5:80:67:ad:21:82:
d3:2d:82:61:52:c5:46:a1:21:f9:39:73:b0:e3:c8:
c4:4b:93:80:98:18:7a:37:58:5f:f1:8a:11:86:a1:
bc:d9:f1:f1:61:d3:dc:37:63:80:24:27:90:b9:ff:
9c:d4:3a:89:e6:1d:34:c3:42:4c:b4:3b:5a:42:35:
25:1c:28:1f:84:5d:25:21:d4:ad:2c:5b:3d:42:05:
4b:0b:05:f6:6a:12:6d:0b:a8:c8:2c:3f:34:c2:e2:
cf:d3:21:92:f9:52:59:e1:f3:d4:4b:09:0b:5b:ab:
b5:f6:dc:8c:72:c6:09:1c:0b:55:8e:05:09:fb:d4:
69:af:46:71:32:aa:d4:7a:a9:a1:9b:ee:95:1d:0c:
90:ee:9d:c8:a0:af:9c:b0:cd:07:f0:bf:c6:21:dc:
19:1f:4a:8a:d4:e8:94:08:6d:76:62:a6:f0:15:56:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C3:DB:09:B8:AD:7D:01:B1:21:97:B7:71:17:94:DE:AE:E3:03:A8
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/XsPbCbitfQGxIZe3cReU3q7jA6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/23
86.38.7.0/24
86.38.37.0/24
86.38.177.0/24
86.38.200.0/24
86.38.235.0/24
86.38.238.0/24
89.116.56.0/24
89.116.115.0/24
89.117.109.0/24
89.117.139.0/24
89.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
18:24:36:5a:59:f6:c6:99:82:a0:69:1b:1b:5c:fd:5d:4b:04:
eb:cb:fb:a6:f9:4c:a9:a1:aa:5c:5c:16:45:ef:83:cc:40:ed:
b8:a8:d4:f1:90:d6:d1:c3:0f:da:60:66:bc:4b:52:dc:95:62:
d5:e9:f2:7b:87:f3:36:82:39:a0:09:8e:cb:1f:94:c9:a7:e9:
87:5e:6c:bd:a2:f4:d2:a9:4b:93:be:52:6b:8c:30:21:79:a1:
a5:90:a5:c9:04:82:b3:87:e7:14:2e:a3:62:28:ae:71:e5:f0:
32:f1:9c:85:6b:45:96:a3:ed:b4:fe:01:ad:e2:95:c6:75:cf:
d9:78:9e:bd:11:11:fd:00:31:6a:c4:7a:f6:31:6d:1c:2f:e5:
4d:47:36:19:1d:d2:6b:0a:ca:d7:41:cb:0b:6e:d2:e5:1f:67:
d0:74:94:5a:04:99:59:b3:3a:34:4a:27:4e:4a:c5:f1:06:a0:
14:7a:b6:2f:a1:1f:f6:bb:4e:b4:fb:39:39:bb:0b:c5:c1:73:
8d:39:10:24:51:c9:dc:b6:f4:2f:82:c3:0d:9b:9c:85:6b:a1:
ca:aa:4e:14:6c:0e:c5:51:47:1a:20:48:8b:fc:97:6d:46:60:
db:c3:24:20:39:2d:44:00:78:17:94:f8:8d:ca:b8:81:f0:50:
57:0d:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org