Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/e0voDsMg-oYcKeqBxrkQl-XjUag.roa
File: e0voDsMg-oYcKeqBxrkQl-XjUag.roa (raw, json)
Hash identifier: oYthRWOZ2Y87U6hIJ8JKc+m/jRfzIx1IJM6aiMLDfxE=
Subject key identifier: 7B:4B:E8:0E:C3:20:FA:86:1C:29:EA:81:C6:B9:10:97:E5:E3:51:A8
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 099AC24D
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/e0voDsMg-oYcKeqBxrkQl-XjUag.roa
Signing time: Thu 17 Feb 2022 12:46:12 +0000
ROA not before: Thu 17 Feb 2022 12:46:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.116.224.0/21 maxlen: 24
89.116.237.0/24 maxlen: 24
89.117.0.0/22 maxlen: 24
89.117.16.0/21 maxlen: 24
89.116.60.0/22 maxlen: 22
89.117.152.0/22 maxlen: 22
89.116.80.0/21 maxlen: 24
89.117.157.0/24 maxlen: 24
86.38.232.0/24 maxlen: 24
89.117.164.0/24 maxlen: 24
84.46.236.0/22 maxlen: 24
89.117.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161137229 (0x99ac24d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 17 12:46:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b4be80ec320fa861c29ea81c6b91097e5e351a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:7a:27:8c:18:7a:b0:42:8a:a8:fb:f4:50:
e3:e8:26:df:16:cf:30:11:50:94:9b:5b:1e:4c:b4:
d9:53:86:ee:14:a2:98:5d:e4:73:77:2c:d5:96:d5:
3c:f5:e9:13:10:3d:17:00:47:f7:91:c5:b4:01:c9:
70:e6:aa:0b:83:98:10:fa:15:20:19:fd:4b:0a:f1:
37:2b:66:de:70:9a:a4:83:f3:57:a1:85:a4:c2:88:
f8:d4:eb:6b:84:fd:26:e5:af:a2:af:1f:29:0d:ff:
82:e2:43:52:ae:7e:b8:52:87:f7:30:97:6f:1f:58:
6c:ee:fc:1c:a2:8d:04:3c:d0:cf:5e:ba:91:c1:70:
0c:f7:14:64:56:5d:ef:49:25:e0:39:75:72:88:d0:
d3:ad:63:61:22:f5:34:b3:29:4f:15:bd:6f:f5:43:
98:5f:f5:3f:f8:28:e1:bb:4c:55:e9:e6:f3:8b:94:
f0:ba:2c:95:6b:8d:9c:ef:6c:ac:d8:6d:01:10:ae:
2a:a5:4c:2e:43:9d:80:d2:71:6c:a2:04:85:c0:2f:
14:15:03:15:44:00:c1:65:60:5e:a1:20:23:6f:e1:
78:49:8a:4e:a2:30:af:e1:be:1d:ba:7d:a8:53:39:
9b:1f:13:86:4e:be:ca:76:3b:d2:c9:8a:f8:e2:95:
29:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4B:E8:0E:C3:20:FA:86:1C:29:EA:81:C6:B9:10:97:E5:E3:51:A8
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/e0voDsMg-oYcKeqBxrkQl-XjUag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.232.0/24
89.116.60.0/22
89.116.80.0/21
89.116.224.0/21
89.116.237.0/24
89.117.0.0/22
89.117.16.0/21
89.117.152.0/22
89.117.157.0/24
89.117.164.0/24
89.117.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:67:a5:bc:a7:04:f0:a2:cc:e2:8a:56:87:51:c8:d6:3f:f6:
01:d9:70:12:69:74:ea:69:3e:bd:de:5b:06:e9:9c:53:08:a5:
37:d4:2f:42:d9:63:7b:74:06:88:c0:7d:4f:5c:be:6d:b8:ab:
83:a6:26:95:15:fa:a3:60:ad:15:54:f8:20:02:c4:ec:be:45:
08:83:ab:d5:e2:37:db:95:6b:60:99:0b:2d:70:fe:0f:0e:67:
8d:92:14:1b:35:db:b2:9c:9a:18:d8:58:ba:2e:e7:73:bf:f0:
b3:86:1b:42:46:cf:98:ca:5b:08:03:33:95:77:48:3d:f0:67:
17:af:61:d6:69:71:7e:1b:87:eb:35:8e:0d:4d:8a:45:a7:39:
34:cf:43:d6:e4:c9:69:5f:79:97:a4:da:5e:6c:fe:27:55:85:
b9:6a:b1:5e:da:f9:73:c0:f7:88:86:56:55:bb:bc:df:ad:ad:
ec:ed:40:ee:47:20:19:bf:93:b9:e7:4f:b1:3b:2d:6c:b7:5d:
e1:e0:8c:df:e6:c8:13:c3:eb:f3:8a:e9:4e:f2:9c:27:aa:b9:
9b:9a:f8:5b:01:89:65:4e:60:b7:0d:62:77:b6:c4:dd:52:ef:
4d:32:0a:0f:13:98:49:f0:73:73:e3:c3:e1:17:cb:de:db:19:
6d:71:45:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org