Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/bO4DXIncjdCZVthEHSka9Sezbfo.roa
File: bO4DXIncjdCZVthEHSka9Sezbfo.roa (raw, json)
Hash identifier: upv8OFTjk0ZX96xp7Pat9OdJjPx+l2EiCng0Z/wh3hA=
Subject key identifier: 6C:EE:03:5C:89:DC:8D:D0:99:56:D8:44:1D:29:1A:F5:27:B3:6D:FA
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182C562B1D77323C784E4809BE2DCC2568D
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/bO4DXIncjdCZVthEHSka9Sezbfo.roa
Signing time: Mon 22 Aug 2022 11:49:15 +0000
ROA not before: Mon 22 Aug 2022 11:49:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 89.117.72.0/21 maxlen: 24
89.116.123.0/24 maxlen: 24
89.117.88.0/22 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.117.120.0/22 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
86.38.216.0/22 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c5:62:b1:d7:73:23:c7:84:e4:80:9b:e2:dc:c2:56:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 22 11:49:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cee035c89dc8dd09956d8441d291af527b36dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:e5:62:ce:fa:85:f3:1a:56:d4:6c:17:96:
97:1d:e6:8d:b7:c4:4b:83:b4:77:8e:ac:30:c5:fa:
e0:47:9d:f4:75:6c:cd:7d:fe:fc:d8:9a:b8:75:0d:
fc:fe:57:97:88:ba:ac:54:c7:3a:da:ac:38:db:f0:
28:b5:77:17:16:24:c6:8b:62:bd:11:df:6e:d3:a8:
4b:b1:5d:5a:dd:18:e4:37:2b:2f:3a:94:c0:3b:3d:
30:19:b6:64:2a:a4:ca:ce:ac:62:30:83:61:c1:cf:
24:27:b7:bd:15:b9:84:28:ec:39:ce:8f:ac:06:8b:
b0:ff:a0:7d:09:49:6b:0e:ef:3d:b3:b5:92:24:ae:
d4:d2:42:92:82:ea:91:9c:ab:9a:bb:da:14:aa:3c:
e2:1d:3c:24:48:d0:55:12:30:4a:ef:70:79:46:93:
a3:f6:20:9e:54:9f:03:d6:71:c4:24:66:11:e1:a1:
ec:4c:1f:0f:c5:40:14:c4:a2:23:7d:46:1b:86:b6:
a1:8d:db:c4:08:60:51:ff:26:2a:53:87:06:fc:95:
df:6a:25:1b:2c:1b:b9:64:ad:84:14:9b:88:b2:e6:
a0:8c:c4:6a:1a:62:1e:cb:ef:05:9f:d3:cd:21:3b:
03:04:f9:ab:95:fd:98:b6:85:76:31:db:bd:e6:ff:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EE:03:5C:89:DC:8D:D0:99:56:D8:44:1D:29:1A:F5:27:B3:6D:FA
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/bO4DXIncjdCZVthEHSka9Sezbfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.216.0/22
89.116.76.0/24
89.116.91.0/24
89.116.123.0/24
89.116.140.0/24
89.116.212.0/22
89.116.250.0/24
89.117.12.0/23
89.117.24.0/23
89.117.72.0/21
89.117.88.0/22
89.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
32:d2:0b:7c:d4:8f:c8:16:af:26:d5:c8:6e:0b:01:c0:79:0c:
f2:dd:24:60:a2:8c:8d:bb:f9:da:30:35:7a:6b:57:91:1d:3e:
4c:49:43:f1:3b:ba:cf:57:21:3f:81:9a:8a:72:6e:cc:90:8a:
2a:5f:26:68:5a:a0:1d:51:f7:07:72:fd:26:dc:89:ed:b3:8d:
59:ac:eb:63:3d:75:88:99:4a:94:3c:af:92:92:d3:c3:6d:88:
f6:7c:f4:71:40:9e:d8:05:5d:84:9c:91:a8:dd:28:1a:a9:4c:
4a:b5:e4:f3:30:c8:9b:f4:15:40:8b:ac:d4:4a:e3:8f:0c:4a:
a5:e2:07:0e:6a:26:b5:bd:07:80:3d:ea:b6:99:0f:0d:3a:c0:
95:d4:9a:63:34:d1:e7:15:84:fc:d7:b5:b3:18:24:13:2c:45:
d4:4b:ed:f1:19:6f:8b:bf:28:65:55:9a:b5:77:82:c6:fe:5d:
2d:8b:e5:9e:68:b0:fb:8c:7f:48:54:de:7c:4d:e8:1b:bb:81:
03:ef:70:86:3b:e5:5c:dc:c2:a5:26:1a:18:f7:7b:be:da:f0:
90:49:6f:51:d8:52:3c:30:8a:02:f4:1f:d3:bc:cc:eb:96:4d:
b2:0e:ce:38:ef:72:20:2d:b0:e4:9b:fe:3d:ba:fc:c4:9d:dc:
b9:a3:7d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org