Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/h2ah8SNWIAfZSHE_dq1wT4ne810.roa
File: h2ah8SNWIAfZSHE_dq1wT4ne810.roa (raw, json)
Hash identifier: c5JPQ1M+XmbIJv/anRNdzZobYo7edtYHZsDfZJj4/dY=
Subject key identifier: 87:66:A1:F1:23:56:20:07:D9:48:71:3F:76:AD:70:4F:89:DE:F3:5D
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 096CFFC7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/h2ah8SNWIAfZSHE_dq1wT4ne810.roa
Signing time: Wed 09 Feb 2022 07:22:09 +0000
ROA not before: Wed 09 Feb 2022 07:22:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 89.117.190.0/24 maxlen: 24
86.38.151.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.117.245.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158138311 (0x96cffc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 9 07:22:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8766a1f123562007d948713f76ad704f89def35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:1d:52:d2:fc:ae:75:12:1a:ef:e0:0d:51:
f6:1a:cb:a3:6f:b0:3d:be:21:2f:c6:ab:bb:3b:17:
46:d2:ba:dd:fe:33:39:67:e3:66:fe:f0:e6:45:78:
55:6b:7e:82:7b:7b:d8:a0:20:67:af:e2:c2:5d:76:
51:56:96:64:f1:2d:e9:2f:82:7e:15:d5:59:16:e8:
32:8a:17:ec:e1:f2:68:f9:f2:78:66:e8:07:f1:9e:
34:36:88:73:1f:fa:6a:02:e0:c4:fc:02:44:2e:bd:
ea:bb:60:40:d2:f5:16:c8:02:e6:52:51:dc:79:a4:
2b:08:2a:56:1e:ff:4f:ad:3d:9c:6b:0b:a4:e3:60:
37:a1:64:a0:f8:47:c1:ea:56:a3:32:32:07:da:a6:
9d:df:b1:f3:ff:4e:d1:46:ba:a3:58:89:a2:ba:0d:
1e:b1:10:73:82:e5:7c:51:cf:a9:93:52:48:3b:ff:
fc:ef:e3:e5:50:ad:2b:d4:90:ee:65:54:f8:07:aa:
33:36:43:47:eb:f2:ad:42:06:83:64:c9:f1:19:0d:
e7:9e:16:7a:6a:64:b9:96:c6:27:10:ad:f2:53:4c:
d5:0e:59:e0:f6:b6:9e:19:49:11:fa:47:4c:59:06:
1a:01:7c:90:18:4d:95:77:e0:e6:34:65:0d:8a:07:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:66:A1:F1:23:56:20:07:D9:48:71:3F:76:AD:70:4F:89:DE:F3:5D
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/h2ah8SNWIAfZSHE_dq1wT4ne810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.151.0/24
86.38.156.0/24
86.38.235.0/24
89.116.96.0/24
89.116.137.0/24
89.117.190.0/24
89.117.245.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a6:2f:f6:c5:df:f3:76:3e:11:6c:4f:e0:5a:85:94:88:35:
4d:43:d9:62:7c:7b:6d:98:3b:5d:a3:c1:84:fa:86:af:27:06:
60:b8:d5:e9:5e:5d:80:44:aa:78:47:d5:75:fc:31:70:43:c5:
eb:8c:0d:d1:0e:b5:ca:e6:23:de:76:a1:8f:7d:bd:af:50:2d:
2f:0f:51:a3:60:b2:c1:d3:5a:e2:28:95:d5:6c:f1:71:29:4f:
88:60:e7:41:a6:ad:51:df:cb:38:65:01:34:ea:27:7c:d7:06:
68:46:0e:d7:19:d6:1a:4a:ad:c5:c6:d6:e4:e2:0d:84:40:8a:
f4:6c:92:d5:e0:5e:87:4f:84:5f:b6:05:0d:a3:2c:06:b0:51:
b7:2f:3d:a5:bd:2d:f3:84:8d:8e:02:75:f8:76:41:1d:06:ee:
c4:6a:00:d3:bb:e5:f5:b4:a8:00:65:24:99:7d:b0:ec:16:e1:
6f:10:f9:54:5e:a2:9e:31:49:2f:cd:ce:67:eb:2a:b4:4d:3f:
56:37:69:4a:a8:01:86:7a:0b:70:21:34:70:80:a3:ab:c6:8c:
cc:8e:50:63:cd:27:35:6c:9a:db:a8:78:2f:7e:43:c7:e0:3e:
24:dc:50:46:3a:8c:98:ec:15:c5:75:89:13:05:f2:3a:58:13:
96:a0:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org