Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/_MvFkzTLoOgts8VCGpUzhWAqnFo.roa
File: _MvFkzTLoOgts8VCGpUzhWAqnFo.roa (raw, json)
Hash identifier: IsNuLxJQnVg7tsuEY8yfbvQ4m85G5TpFngqocKtSOoo=
Subject key identifier: FC:CB:C5:93:34:CB:A0:E8:2D:B3:C5:42:1A:95:33:85:60:2A:9C:5A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AFB6F04
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/_MvFkzTLoOgts8VCGpUzhWAqnFo.roa
Signing time: Mon 23 May 2022 06:09:30 +0000
ROA not before: Mon 23 May 2022 06:09:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.116.115.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
89.117.87.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184250116 (0xafb6f04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 23 06:09:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fccbc59334cba0e82db3c5421a953385602a9c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:4f:3d:c3:6d:06:e7:d9:4b:45:a4:19:a1:
56:41:6f:21:ba:c7:6b:69:1a:18:83:c3:a6:10:4e:
b5:16:7e:91:dd:96:86:e4:75:92:7b:ca:80:3b:62:
a8:ac:40:49:a4:77:a2:0e:0f:bc:07:8c:04:2f:a3:
d0:b0:1d:27:d0:48:ad:2f:54:9e:f8:1f:4e:f4:e0:
99:88:34:df:16:d1:2c:b9:93:c8:2c:27:da:bf:be:
7f:00:ea:1d:5e:01:8d:4d:ec:14:47:3e:b7:c1:d8:
21:11:e1:78:34:4a:3a:1c:be:39:a1:4d:56:25:af:
28:75:28:1e:7b:0a:27:a8:81:e2:99:12:87:d0:bc:
54:b0:f0:ee:2d:d7:e9:67:b2:6a:b1:8c:ab:b6:1a:
52:8c:7f:12:1f:14:16:92:9b:a6:eb:15:29:0d:f7:
be:41:78:98:ec:82:4a:55:6a:8f:0b:01:f3:81:29:
89:0e:e7:36:b8:57:0f:65:12:a7:57:95:55:1a:60:
b8:79:1a:11:e8:80:b1:ae:13:a2:e0:04:0f:49:70:
e6:c2:e7:7a:d2:cf:54:66:17:b4:4c:4d:03:7e:a0:
ea:3f:7d:0c:0f:2a:fa:a1:b8:08:c1:1d:ca:b1:46:
c9:14:25:e9:f4:f5:07:8c:04:8f:86:92:11:d4:89:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CB:C5:93:34:CB:A0:E8:2D:B3:C5:42:1A:95:33:85:60:2A:9C:5A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/_MvFkzTLoOgts8VCGpUzhWAqnFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.171.0/24
86.38.7.0/24
86.38.37.0/24
86.38.177.0/24
86.38.200.0/24
86.38.235.0/24
86.38.238.0/24
89.116.56.0/24
89.116.100.0/24
89.116.115.0/24
89.117.27.0/24
89.117.87.0/24
89.117.109.0/24
89.117.139.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:9b:cf:a9:d8:3f:6f:3c:3d:7d:d8:cb:a4:30:2a:b6:a5:40:
00:45:21:b9:17:b3:ec:1f:5b:8a:49:5b:3b:3b:b2:8a:e3:bd:
db:56:ff:3d:99:e1:dc:de:29:45:5d:4b:04:5f:83:0f:98:e2:
be:8b:2c:2d:e5:d0:fe:79:6a:94:49:a2:df:a0:b9:ca:f6:da:
00:8b:12:50:28:00:8c:a2:56:c6:1e:32:80:42:ac:6e:db:a0:
2d:13:45:b6:63:8a:34:55:ea:94:89:82:31:1a:16:3c:6e:26:
b6:1c:dc:5a:04:ac:95:03:67:b6:8e:0c:5a:c7:0d:0f:fc:08:
91:77:6f:21:9c:f3:b8:45:cd:b3:f9:37:10:0d:c8:20:57:6f:
90:20:09:4c:c1:44:d6:cf:94:47:6c:9a:9e:00:ff:40:ef:4e:
3d:b8:7e:29:23:9e:be:2e:b2:fc:04:05:e8:98:c8:5b:59:17:
6c:c2:c1:06:12:df:0e:aa:e0:45:1b:3e:26:cd:24:ed:58:35:
c9:9b:d1:76:6b:a1:ac:84:24:72:1d:da:9d:1c:9c:2b:c0:7f:
17:6d:5a:ad:d4:c4:f4:b6:e5:7c:04:b2:27:37:93:07:7a:27:
da:bc:12:8b:52:a8:d8:92:3b:18:39:3e:c3:ff:4b:5a:e6:88:
06:94:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org