Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/edguuS2Khl9UkzZRp3ESxo0ei2M.roa
File: edguuS2Khl9UkzZRp3ESxo0ei2M.roa (raw, json)
Hash identifier: 48+fOUKCkoL8fRGGk7agjPlLmlN7hNz/kFrJS1X02Fs=
Subject key identifier: 79:D8:2E:B9:2D:8A:86:5F:54:93:36:51:A7:71:12:C6:8D:1E:8B:63
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01840B68060A4930F8C7B6BA16C6A5D4C2C3
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/edguuS2Khl9UkzZRp3ESxo0ei2M.roa
Signing time: Mon 24 Oct 2022 19:11:17 +0000
ROA not before: Mon 24 Oct 2022 19:11:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 84.46.170.0/24 maxlen: 24
89.117.101.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
89.117.35.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
86.38.214.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:68:06:0a:49:30:f8:c7:b6:ba:16:c6:a5:d4:c2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 24 19:11:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79d82eb92d8a865f54933651a77112c68d1e8b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:49:a6:cf:c4:3d:9e:33:0e:bb:5d:8d:11:
40:ed:7d:0b:53:be:ac:0d:40:b4:72:ab:18:c8:2d:
dd:69:07:b7:dc:03:6e:29:ee:04:fc:c9:1e:76:7e:
01:6f:e2:7c:69:76:04:f6:5e:cc:47:eb:b7:33:76:
e1:12:46:47:2c:53:df:9f:80:72:3c:63:dd:96:a3:
10:e7:de:2a:65:40:c2:86:8a:f7:e4:d7:8f:63:2e:
17:12:4f:26:86:dc:5c:d6:92:92:35:40:8e:7b:39:
8a:2e:b9:46:83:bf:cb:4c:b6:62:01:bc:1c:2b:fe:
0b:5f:96:aa:37:9b:26:41:37:51:14:b1:a4:57:38:
bc:77:f5:d9:48:c5:94:56:2e:b1:15:b6:e4:6e:c1:
dd:50:c0:af:9a:87:62:a4:76:b5:a0:d1:b3:e7:64:
0b:db:97:cd:65:e3:ab:a6:66:d4:f2:f1:fa:f7:ac:
7f:e4:34:e1:5a:b2:eb:1f:68:20:c8:01:91:e3:dc:
ab:cf:5f:2b:61:b4:7e:f0:ba:07:91:17:04:27:9c:
d1:ab:b1:82:98:81:ac:09:64:11:a3:03:66:2e:66:
7e:16:88:06:4d:d6:e8:f0:d7:c3:31:96:b2:39:c9:
c0:fc:c4:38:fc:82:99:36:bb:7a:a6:25:d4:38:23:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:2E:B9:2D:8A:86:5F:54:93:36:51:A7:71:12:C6:8D:1E:8B:63
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/edguuS2Khl9UkzZRp3ESxo0ei2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/24
86.38.214.0/24
89.116.102.0/24
89.116.158.0/24
89.116.163.0/24
89.116.190.0/24
89.117.27.0/24
89.117.35.0/24
89.117.101.0/24
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
57:dd:dd:4f:4d:49:dd:39:bf:30:19:5e:a9:2b:5c:5a:e5:53:
8e:81:1b:9c:52:13:a1:33:23:0a:7a:cc:34:9b:e8:ba:e4:59:
d6:35:d0:02:ad:b1:0f:c9:81:18:5f:7a:70:69:98:c0:ee:7e:
45:4d:3e:fb:c3:20:bb:64:1a:b6:76:f2:8c:5b:27:24:2b:e1:
6a:3c:17:b8:c3:a1:7a:88:5f:34:9b:79:96:90:c8:82:b8:81:
bb:68:16:c3:33:0a:8e:44:9e:4c:c0:25:6a:3b:9c:cf:9e:60:
23:41:02:ff:cc:bd:3a:61:85:c2:aa:09:2a:d0:bd:46:06:cf:
e3:b5:c8:ba:dd:9b:44:2e:9c:04:91:dc:9c:3c:33:fe:a6:99:
4b:3b:09:5f:df:76:70:3e:4c:28:ba:54:a7:28:52:b8:43:ed:
6e:c4:03:29:83:d5:bc:f7:3d:e5:e8:48:ea:f4:d1:bb:69:0c:
34:ca:ef:97:2f:15:b5:b0:3c:9c:77:86:b5:56:99:50:18:49:
69:ef:c2:55:3b:73:59:0e:da:2e:2c:4a:1c:6d:62:65:21:60:
c4:d6:ce:4c:15:1a:b6:a1:7f:ed:be:12:f7:6d:74:45:bc:38:
39:d7:3e:08:b8:98:38:68:5d:03:c4:7b:50:51:b0:00:67:fc:
2b:05:d0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org