Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/_cBESWXuqJoFfrgAyGXawaPRlJ8.roa
File: _cBESWXuqJoFfrgAyGXawaPRlJ8.roa (raw, json)
Hash identifier: PxXSxtCsd4S6IdHcUnQLATpKXiGNmGpub7snGr2SPBM=
Subject key identifier: FD:C0:44:49:65:EE:A8:9A:05:7E:B8:00:C8:65:DA:C1:A3:D1:94:9F
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A4BC47A
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/_cBESWXuqJoFfrgAyGXawaPRlJ8.roa
Signing time: Wed 13 Apr 2022 05:18:00 +0000
ROA not before: Wed 13 Apr 2022 05:18:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.117.104.0/22 maxlen: 24
89.117.16.0/21 maxlen: 24
89.116.60.0/22 maxlen: 22
89.116.72.0/22 maxlen: 24
89.116.80.0/21 maxlen: 24
86.38.232.0/24 maxlen: 24
89.116.224.0/21 maxlen: 24
89.116.237.0/24 maxlen: 24
89.117.0.0/22 maxlen: 24
89.116.180.0/22 maxlen: 24
89.117.152.0/22 maxlen: 22
89.117.157.0/24 maxlen: 24
89.117.164.0/24 maxlen: 24
84.46.236.0/22 maxlen: 24
89.116.212.0/22 maxlen: 24
89.117.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172737658 (0xa4bc47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 13 05:18:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdc0444965eea89a057eb800c865dac1a3d1949f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:07:c6:b6:e1:a1:dd:99:de:4a:00:7f:35:21:
ca:97:f9:3d:a0:96:a4:27:62:1e:76:0e:26:60:37:
6e:98:59:5a:4b:93:00:84:50:2c:01:76:64:b1:55:
b6:48:7f:0c:3d:da:6e:bd:e4:bd:c3:49:c2:e1:c2:
30:0f:de:f7:57:1e:03:6c:2a:f9:02:9e:28:24:e8:
6b:b0:a5:aa:21:16:c5:69:6c:fd:e9:f3:78:57:0e:
aa:3c:c6:a4:03:55:b3:42:00:58:c1:97:51:4a:3d:
4b:d5:02:ef:43:f6:35:e6:b8:e5:1b:2b:f6:f8:50:
19:5d:2b:d8:00:16:7d:a3:34:9e:ff:ef:61:66:c7:
09:73:00:b0:5a:c5:63:5b:d5:3a:00:49:af:b9:ca:
16:2e:d0:04:85:21:9c:0b:f0:c7:bd:3a:f5:b5:60:
d2:cc:bd:49:01:6f:ea:a2:76:cc:be:76:34:8f:97:
6b:05:12:ef:02:63:40:3f:cc:ed:5a:61:a7:48:ed:
7a:5d:31:04:e1:d5:be:58:ed:40:5e:08:cd:9c:cf:
c0:34:c6:0a:69:94:81:1a:37:5d:ce:45:68:24:d6:
6d:87:77:08:4e:dd:37:7e:29:57:4d:ce:ad:22:38:
68:67:79:04:c1:2c:f6:ee:02:81:49:70:9b:35:62:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C0:44:49:65:EE:A8:9A:05:7E:B8:00:C8:65:DA:C1:A3:D1:94:9F
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/_cBESWXuqJoFfrgAyGXawaPRlJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.232.0/24
89.116.60.0/22
89.116.72.0/22
89.116.80.0/21
89.116.180.0/22
89.116.212.0/22
89.116.224.0/21
89.116.237.0/24
89.117.0.0/22
89.117.16.0/21
89.117.104.0/22
89.117.152.0/22
89.117.157.0/24
89.117.164.0/24
89.117.171.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b4:78:83:4a:43:09:a1:4d:03:c1:36:81:3f:e4:46:06:5a:
4f:06:ae:27:09:2c:5f:1a:12:9e:55:43:5f:1b:b4:1c:5a:ee:
0c:88:64:7e:56:a2:60:9c:e7:ff:86:89:bc:1b:9e:e2:02:ff:
92:14:19:69:c0:e1:c6:ef:c4:0a:e6:69:bd:90:5d:0c:54:02:
fa:77:50:73:78:b5:f9:a6:00:fb:17:dc:f9:d1:9a:72:a6:5d:
0f:28:4e:89:12:70:a9:9c:36:ff:84:19:4f:38:4b:23:9f:7e:
88:a7:68:09:63:46:29:59:38:3f:fe:b5:23:cb:22:33:d5:38:
97:81:bd:e8:1f:9a:b3:cd:5b:66:4f:01:f8:25:c0:e1:9e:be:
d0:fc:69:1c:32:e5:29:4f:03:bc:b1:c3:ac:5f:94:e8:da:17:
42:aa:26:f4:0b:e2:a3:63:32:cb:9e:56:79:f8:a8:66:6f:c7:
19:dd:de:e1:0e:e6:d5:06:4a:e8:fa:32:6f:26:82:40:76:3d:
75:64:83:93:91:5a:71:55:67:4e:0f:b5:17:33:4e:32:b4:04:
be:b0:d2:c0:db:b6:92:1d:f9:83:5e:01:99:76:74:ff:03:89:
40:ad:f2:48:31:06:1e:19:75:2a:b6:2f:c8:a4:4b:9f:36:ad:
da:3b:36:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org