Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/aOD1q2FcQoWUZ-KBNLVLVY7eF3k.roa
File: aOD1q2FcQoWUZ-KBNLVLVY7eF3k.roa (raw, json)
Hash identifier: Xm7alDPGP2mX0bRoRI/jvhi1whw1engyY5v+4s+MVJw=
Subject key identifier: 68:E0:F5:AB:61:5C:42:85:94:67:E2:81:34:B5:4B:55:8E:DE:17:79
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182A09CA0856F1264E2E9E52829BE7D132F
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/aOD1q2FcQoWUZ-KBNLVLVY7eF3k.roa
Signing time: Mon 15 Aug 2022 08:26:35 +0000
ROA not before: Mon 15 Aug 2022 08:26:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 89.117.68.0/24 maxlen: 24
89.116.234.0/24 maxlen: 24
89.116.244.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.117.35.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a0:9c:a0:85:6f:12:64:e2:e9:e5:28:29:be:7d:13:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 15 08:26:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=68e0f5ab615c42859467e28134b54b558ede1779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:50:af:9b:70:fc:2c:dd:4d:41:36:29:2e:
31:3b:f1:5f:14:47:13:c3:62:09:53:71:32:ae:57:
b9:cc:15:62:99:8a:60:34:8a:61:a0:ce:27:49:0f:
b2:d4:14:e7:c3:9a:f7:8c:e9:28:97:5b:f6:80:0e:
d9:e8:ee:58:f4:2f:35:99:7a:60:42:93:1c:97:98:
47:69:84:6c:f0:16:eb:bf:99:82:3c:39:e8:52:6b:
97:14:af:1e:8e:1d:ce:6c:11:ba:db:7b:19:8e:4c:
43:54:b1:04:e6:10:78:82:c9:27:e1:9d:40:65:5a:
1b:ce:9e:72:58:a7:bf:f4:86:a7:ad:0a:41:93:fe:
d2:97:61:5a:a3:b3:14:90:41:23:33:ae:82:9c:ea:
8a:30:9c:14:e5:34:bc:b2:eb:57:13:b3:fe:ad:af:
a3:20:f6:a3:57:a3:d6:bd:ff:ce:df:ab:ce:75:30:
d8:e7:c7:47:68:ab:2c:2e:18:b7:6c:bc:9c:7a:c9:
ad:b2:3f:b7:28:e7:aa:80:a6:d8:c6:25:90:d3:47:
62:50:90:49:9e:ef:0e:96:cb:79:ae:18:ba:36:07:
3b:01:96:fd:35:29:f4:b5:53:b4:1c:e3:57:13:80:
e0:f7:99:eb:4f:b3:d4:a5:68:9b:a5:ba:54:3b:ea:
06:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E0:F5:AB:61:5C:42:85:94:67:E2:81:34:B5:4B:55:8E:DE:17:79
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/aOD1q2FcQoWUZ-KBNLVLVY7eF3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.175.0/24
86.38.177.0/24
86.38.190.0/24
89.116.70.0/24
89.116.102.0/24
89.116.175.0/24
89.116.234.0/24
89.116.244.0/24
89.117.35.0/24
89.117.68.0/24
89.117.109.0/24
89.117.218.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:0b:3a:58:0a:9c:73:98:cc:a0:d9:44:3d:27:ff:07:54:ce:
a6:09:5e:b4:97:d6:e1:b2:2c:14:b5:55:7b:56:b8:45:e8:3a:
29:7e:4f:39:a0:e2:b1:ac:79:fc:8c:fa:59:ed:1a:12:fe:f9:
64:cb:db:19:24:76:33:6c:90:7b:7e:0b:98:06:9e:bf:8a:a8:
1c:35:a4:87:d4:fa:94:67:4d:06:4e:c5:fe:73:15:6b:66:51:
36:91:43:0f:30:fc:90:1f:10:fe:6a:0a:9a:f6:98:2f:57:0c:
61:a6:c9:c0:4a:b4:66:a6:d0:fd:9b:45:b6:5f:99:50:52:99:
ae:c2:c5:59:ca:5d:17:f9:e0:1a:99:44:72:2a:c3:93:f1:55:
f2:c2:70:ef:be:b0:3e:53:1a:2f:fb:ba:ba:c2:43:2a:5b:e7:
a5:7b:b5:e9:dc:ad:84:81:fe:9e:03:0e:a8:28:76:93:79:eb:
8a:e7:e6:72:7c:fd:c0:e1:e4:c2:69:22:fa:46:af:42:6c:cb:
d5:e9:b3:11:35:59:01:7c:c9:b7:28:37:dc:fe:24:bd:1a:88:
ce:aa:3c:8f:08:38:df:f1:3b:05:f5:58:84:75:5a:92:64:75:
9e:8f:be:97:c6:d2:da:75:60:40:a1:c4:b4:b9:fc:de:d6:39:
be:fa:a2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org