Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/aMOMn6lAubmalEOWzjgA62WYRgo.roa
File: aMOMn6lAubmalEOWzjgA62WYRgo.roa (raw, json)
Hash identifier: 1uN+cNDSqiQUce1jKl9rtKImplzPtUfBChV2I0Lzaro=
Subject key identifier: 68:C3:8C:9F:A9:40:B9:B9:9A:94:43:96:CE:38:00:EB:65:98:46:0A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A82722E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/aMOMn6lAubmalEOWzjgA62WYRgo.roa
Signing time: Wed 27 Apr 2022 07:06:23 +0000
ROA not before: Wed 27 Apr 2022 07:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 89.116.112.0/24 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.115.0/24 maxlen: 24
89.116.141.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
86.38.182.0/23 maxlen: 24
89.116.171.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176321070 (0xa82722e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 27 07:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68c38c9fa940b9b99a944396ce3800eb6598460a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:8d:6b:07:68:c4:67:e6:5e:19:b0:9c:c9:
27:44:c1:9a:d8:06:62:90:fb:47:2c:38:6a:05:54:
a5:88:a4:7e:98:40:94:66:fc:86:f9:c1:88:55:67:
c0:67:1c:f2:2a:b9:9c:f5:3d:f5:97:8f:bf:bb:df:
fc:5e:1f:a0:c8:35:a3:62:7d:5d:dd:dd:9d:9d:a7:
c9:5a:d3:3a:cb:c0:82:cf:2c:42:1c:55:5d:32:2d:
bf:2f:55:86:d5:c4:72:ef:f3:78:6e:50:08:c1:33:
2a:f1:21:88:50:bb:8c:31:80:11:b9:56:6c:6c:00:
e1:02:d5:83:9a:44:35:ad:55:f7:c4:09:5c:bb:3f:
e8:e5:b5:83:c4:51:12:99:40:e9:50:1e:5f:9e:6b:
ef:2b:8e:6b:db:7a:c0:81:fe:bb:e9:e1:3c:9f:e8:
ef:1c:67:0c:31:e0:e7:43:78:bd:f4:54:83:cc:b0:
b8:a0:19:e6:c6:1a:a2:bb:2e:35:dd:c9:77:4d:cc:
3a:f9:0c:b8:de:e4:08:df:99:3e:e4:e3:85:3f:f7:
c0:a1:db:d1:6d:07:5e:d8:09:04:5e:48:02:db:dc:
a0:0a:70:24:f4:2b:13:21:e3:70:36:3b:60:13:0e:
10:31:c8:49:4a:8e:4a:9e:71:8a:c8:5e:e7:13:df:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:8C:9F:A9:40:B9:B9:9A:94:43:96:CE:38:00:EB:65:98:46:0A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/aMOMn6lAubmalEOWzjgA62WYRgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.182.0/23
86.38.202.0/23
89.116.54.0/24
89.116.70.0/24
89.116.99.0/24
89.116.103.0/24
89.116.112.0/23
89.116.115.0/24
89.116.141.0/24
89.116.156.0/24
89.116.171.0/24
89.116.202.0/23
89.116.208.0/23
89.116.220.0/23
89.116.223.0/24
89.116.233.0/24
89.116.253.0/24
89.116.255.0/24
89.117.130.0/24
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b6:1a:f2:23:3c:ed:6b:1b:22:34:52:93:97:51:c4:b8:23:
93:3a:95:9a:66:d1:41:1b:12:51:be:74:83:13:74:8b:79:74:
95:7d:01:e0:c3:5c:e0:49:3b:f2:59:98:88:24:66:30:25:28:
e6:31:db:8d:ea:13:1c:a8:f2:c2:d1:7c:4e:6a:7b:77:27:e5:
76:d6:c7:3d:9c:d2:f2:54:ae:c3:70:35:38:c8:b3:73:d1:0f:
97:2e:67:d6:54:32:61:2d:45:ce:10:9b:28:4f:0e:69:f4:c6:
a0:76:33:72:5d:1e:23:9b:cd:63:00:04:48:6d:fe:f1:44:c4:
72:48:f1:b2:e2:98:85:50:ee:61:33:fc:72:5e:a1:68:a4:85:
cb:a7:f8:27:b3:7f:1f:e6:0c:5b:b6:6b:90:fe:97:c2:18:c4:
5c:7b:ea:a9:d3:94:5d:ae:0f:3c:c9:c4:bf:da:ac:f3:1e:62:
26:a3:a1:6c:97:50:6a:e2:40:6e:cc:37:b5:cd:af:6d:0d:9f:
79:9d:46:15:c7:2b:b3:36:5e:c3:ba:b2:8d:db:cb:5e:79:2f:
6f:38:8d:78:6c:7e:53:2a:99:81:a4:15:e9:fa:9f:b2:bc:2f:
84:b0:9f:bc:8f:a4:8a:e1:63:9e:2e:32:be:f9:65:13:82:d3:
b4:35:53:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org