Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/bjW-_CE84Ooz3LLXqMZ7el5tHaI.roa
File: bjW-_CE84Ooz3LLXqMZ7el5tHaI.roa (raw, json)
Hash identifier: rJP9b/Lx+CiFHOATNc2ktwsQqWAwZIVnGIk85n+J4Zg=
Subject key identifier: 6E:35:BE:FC:21:3C:E0:EA:33:DC:B2:D7:A8:C6:7B:7A:5E:6D:1D:A2
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B9518F3
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/bjW-_CE84Ooz3LLXqMZ7el5tHaI.roa
Signing time: Sun 26 Jun 2022 12:34:22 +0000
ROA not before: Sun 26 Jun 2022 12:34:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.116.115.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.117.87.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194320627 (0xb9518f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 26 12:34:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e35befc213ce0ea33dcb2d7a8c67b7a5e6d1da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:3a:c2:27:a2:57:bb:68:7a:23:3f:ec:05:
a5:00:d5:28:a3:f7:ef:10:55:a5:b1:a3:33:c6:f9:
65:53:7f:da:14:d5:0c:53:06:4d:dc:a8:20:9c:2a:
f7:e9:ee:00:af:14:ac:a8:b2:96:3c:47:c6:3a:9c:
b6:0b:6e:7f:71:24:ae:cd:0d:fc:05:39:0c:68:d0:
6e:fd:c0:98:66:f8:0b:e1:80:ee:8b:5a:60:42:4e:
4a:05:57:56:22:3f:e5:a0:25:79:18:05:82:03:0c:
90:4c:e1:c3:55:47:bc:e9:34:7a:50:5b:49:5d:56:
24:5a:c8:58:ee:20:af:eb:84:d6:e5:86:6e:1e:39:
54:85:25:32:76:bc:70:a3:27:d3:a9:dd:70:e7:5c:
b7:78:00:d5:d4:1b:30:3c:8e:a9:4f:3f:76:26:24:
59:2b:9b:7f:a1:c3:be:93:ba:f7:0b:f3:ab:fc:fe:
f4:65:f4:29:30:ab:0d:2c:6a:57:11:ba:ba:7d:b6:
45:eb:45:87:63:26:24:58:9e:ba:29:b7:f9:72:e5:
7c:5f:19:cc:62:27:c4:90:cb:ce:a4:a0:c5:97:86:
d8:3d:50:79:d1:94:89:fb:f3:1d:a7:a4:03:0a:6d:
c4:fc:1d:27:db:18:17:b5:5d:c4:d2:10:02:8f:64:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:35:BE:FC:21:3C:E0:EA:33:DC:B2:D7:A8:C6:7B:7A:5E:6D:1D:A2
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/bjW-_CE84Ooz3LLXqMZ7el5tHaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.171.0/24
86.38.7.0/24
86.38.37.0/24
86.38.177.0/24
86.38.200.0/24
86.38.235.0/24
89.116.56.0/24
89.116.100.0/24
89.116.115.0/24
89.116.125.0/24
89.117.27.0/24
89.117.87.0/24
89.117.109.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:56:15:89:29:73:28:3e:0e:d2:7f:e5:fd:79:fa:31:21:20:
d5:7d:ab:06:35:88:c5:33:b8:ae:36:f1:91:96:a1:11:2c:00:
29:17:3a:2f:cb:df:04:b0:e5:00:58:bc:bb:bd:f0:ac:11:a3:
1b:79:0b:c0:23:7d:09:c5:a6:00:9e:b0:f1:d6:25:c6:bc:56:
41:0a:3f:7f:5f:10:ce:e5:6a:9a:98:0e:ba:e6:ff:0a:a5:85:
98:b3:d7:49:c1:7a:50:e1:60:65:f4:de:76:b3:99:9b:69:32:
17:5d:dd:a8:d0:bd:8b:8e:ce:6a:d0:6e:ff:1e:b3:2c:0b:26:
b0:00:aa:90:41:4d:13:2c:98:54:f3:3b:e0:48:c3:e9:ed:c5:
51:22:e8:a8:64:b7:1d:01:c4:f7:18:82:9f:1d:98:74:08:a8:
a1:59:d1:59:07:6a:87:0a:be:e1:04:ea:46:2f:c2:60:ba:24:
ec:3f:f8:a1:74:f8:43:70:95:e0:2b:1d:5f:f3:32:ca:b6:2a:
8b:e4:34:4e:e5:67:c1:10:88:5d:70:55:c1:c3:a2:52:e8:4f:
da:a5:00:f3:a2:dc:a2:35:91:7b:e4:fc:db:e9:ed:48:1c:2b:
f6:98:1a:b8:6d:12:c7:f5:41:1f:96:3d:4e:32:3b:d7:23:ae:
1c:c3:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org