Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/YyIyS3_DPwBJtDB92uQNh-5xdQg.roa
File: YyIyS3_DPwBJtDB92uQNh-5xdQg.roa (raw, json)
Hash identifier: veEYYTRKfUCdyAiPtP0v7CfF2d6u2FsnFM1BnPoNlqU=
Subject key identifier: 63:22:32:4B:7F:C3:3F:00:49:B4:30:7D:DA:E4:0D:87:EE:71:75:08
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183E0BFEACA9EF329EDD1C3BA7A7EBECFE1
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/YyIyS3_DPwBJtDB92uQNh-5xdQg.roa
Signing time: Sun 16 Oct 2022 12:23:37 +0000
ROA not before: Sun 16 Oct 2022 12:23:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 89.117.70.0/23 maxlen: 24
89.116.130.0/23 maxlen: 24
89.116.148.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.226.0/23 maxlen: 24
89.117.6.0/23 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.117.36.0/23 maxlen: 24
89.117.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e0:bf:ea:ca:9e:f3:29:ed:d1:c3:ba:7a:7e:be:cf:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 16 12:23:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6322324b7fc33f0049b4307ddae40d87ee717508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:03:7f:90:39:88:87:8f:b8:bd:98:2f:0a:
83:c9:db:9c:d2:5c:13:9b:fb:fb:57:9f:12:39:41:
89:3a:bb:c2:b3:86:a9:6a:2a:b8:d5:30:c8:fa:2c:
68:7e:e2:f6:81:16:a7:14:8b:6e:bf:0a:12:4a:c4:
63:37:de:d9:7a:71:07:4f:2f:36:06:5e:f4:4b:63:
28:51:a8:d6:95:53:42:13:0a:7f:9f:8d:8c:c5:13:
a8:b9:a2:1d:f0:77:85:4e:5f:62:22:ca:8b:40:38:
8c:92:dd:83:e0:66:b5:31:e4:1c:0a:a2:b6:f9:e1:
6c:e8:de:02:cb:1b:62:2d:e9:5b:35:0e:b0:43:a6:
67:67:1f:3d:c1:95:7e:29:d1:9b:f4:fc:e4:92:36:
0d:05:26:d2:d1:88:91:6a:11:dd:99:21:6a:4f:41:
62:0c:cc:d4:c0:d9:34:47:17:2e:a1:1a:67:13:f5:
c3:ff:37:91:b5:84:8f:f7:d4:8b:f6:66:7b:e1:a6:
ad:59:86:d7:55:02:b5:16:30:45:3e:6c:23:98:08:
92:f5:f0:53:20:c6:5e:b4:b5:98:a1:8e:5c:70:9e:
22:a1:87:f3:c7:c3:46:af:6e:8b:a8:c9:86:4b:b7:
85:89:e4:d1:b0:77:18:94:bf:5b:62:50:3d:5b:b3:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:22:32:4B:7F:C3:3F:00:49:B4:30:7D:DA:E4:0D:87:EE:71:75:08
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/YyIyS3_DPwBJtDB92uQNh-5xdQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.182.0/23
89.116.130.0/23
89.116.148.0/23
89.117.6.0/23
89.117.12.0/23
89.117.24.0/23
89.117.36.0/23
89.117.70.0/23
89.117.158.0/23
89.117.226.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:26:3f:09:fe:a3:67:77:21:14:41:74:cc:7d:d1:6a:11:21:
39:25:39:fa:9f:c5:3f:d7:0b:9e:2a:09:6d:3e:66:bd:17:5b:
80:88:ea:9a:0e:84:ff:4b:eb:ad:55:e2:40:75:1b:01:55:fd:
32:6a:4d:4f:a4:40:72:c0:dc:c5:13:30:6c:f5:e4:41:45:4d:
d8:8b:2d:0d:e8:f4:80:84:5a:28:15:35:e9:43:e8:49:ec:18:
92:cf:59:ec:65:d6:50:04:8d:23:1e:01:a9:07:65:d3:57:ab:
09:bf:68:92:d1:f6:4a:d2:c0:05:80:ce:95:90:40:cf:4d:5f:
01:63:7e:84:ff:24:f9:f3:7a:40:d9:82:9a:15:f7:4c:43:58:
ef:16:9d:82:36:e8:47:5b:b6:c1:08:20:04:65:07:cf:a0:b1:
b4:40:34:4a:19:39:ca:4b:1a:aa:24:3f:be:ed:a5:cf:6f:e3:
02:46:60:31:7d:fb:ed:6c:25:6c:f1:ca:db:d1:bd:10:59:cf:
eb:2e:bf:17:3c:90:c6:8b:99:c9:4f:43:ff:43:65:40:ca:ef:
d1:8c:20:e1:d3:ff:eb:5f:98:04:21:85:9d:42:eb:58:55:35:
37:0c:31:55:43:48:ee:a4:ed:c1:0f:3b:48:e5:cd:6a:a2:f9:
28:65:19:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org