Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/h8jiGFvjPtphCVbYPbEYX1GfQOc.roa
File: h8jiGFvjPtphCVbYPbEYX1GfQOc.roa (raw, json)
Hash identifier: NaQDmh8dB13viSxRNC6TkEqNoEhtfmhyXAsz6PR0bTE=
Subject key identifier: 87:C8:E2:18:5B:E3:3E:DA:61:09:56:D8:3D:B1:18:5F:51:9F:40:E7
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182498562EA512C664C85214B11170530E4
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/h8jiGFvjPtphCVbYPbEYX1GfQOc.roa
Signing time: Fri 29 Jul 2022 10:34:14 +0000
ROA not before: Fri 29 Jul 2022 10:34:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 84.46.170.0/24 maxlen: 24
89.117.101.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
86.38.214.0/24 maxlen: 24
89.117.167.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:85:62:ea:51:2c:66:4c:85:21:4b:11:17:05:30:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 29 10:34:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87c8e2185be33eda610956d83db1185f519f40e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:16:d5:76:16:5b:1f:2a:c8:9f:c6:6f:8d:74:
28:16:f1:39:2e:62:e9:0f:a5:15:a7:72:51:e7:24:
8c:21:ef:85:fb:50:a8:fa:b1:8d:83:6a:8b:c0:7b:
ca:46:92:28:72:15:04:e9:c7:a5:51:f9:f1:1b:5c:
95:91:d6:3e:16:2c:69:39:39:d3:c9:92:18:4d:dc:
bc:40:c2:9c:8e:bf:56:72:b5:eb:71:6d:8d:43:ad:
d0:fc:ef:bf:ba:e3:49:4f:70:9e:56:a8:cc:6f:67:
ca:00:17:09:d8:17:9b:0a:cb:a1:9e:36:7e:3e:d8:
80:74:57:bf:74:83:9d:69:f8:1c:f5:f1:2a:b5:72:
44:a6:c1:83:3a:0d:12:5f:82:e1:55:44:5d:85:01:
d6:0a:b3:a2:5e:a1:c2:a7:c3:51:a9:31:07:fd:db:
02:72:5d:37:af:7c:1c:b2:45:9e:2f:a6:c8:ea:28:
f0:e1:1e:07:43:a4:4e:7f:4b:4b:95:f5:9c:c4:07:
ca:00:5c:b2:5b:59:19:7e:32:81:31:90:66:20:c4:
f9:dd:d5:c1:98:56:4d:b9:86:d1:d3:0b:9d:14:02:
8e:02:ce:7a:0d:c2:ab:40:d2:78:10:e2:14:b6:99:
0a:35:ef:48:d3:ff:ba:f5:b1:7b:e2:d9:e8:17:de:
a5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:E2:18:5B:E3:3E:DA:61:09:56:D8:3D:B1:18:5F:51:9F:40:E7
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/h8jiGFvjPtphCVbYPbEYX1GfQOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/24
86.38.214.0/24
89.116.102.0/24
89.116.163.0/24
89.117.101.0/24
89.117.167.0/24
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
07:cf:80:ac:96:f1:39:12:a8:19:ab:2f:db:4d:76:c3:ae:27:
13:e5:62:19:8a:bb:77:47:3c:0e:7e:9f:a3:80:16:3c:1f:d0:
4f:fd:7c:99:eb:97:21:b9:f0:a0:9d:78:cf:27:21:1b:5c:48:
81:da:8b:78:0f:dc:cd:cb:3c:9b:bb:29:2d:4c:d3:e4:1f:5c:
ec:ca:76:7f:87:0e:4c:cb:e2:e8:dd:48:38:f4:af:da:6a:fe:
7e:d4:dc:40:1f:bb:93:51:23:d2:b3:aa:d3:d0:74:4a:f9:ed:
09:62:90:35:9e:aa:dc:4a:e7:6b:54:7c:d2:09:a4:f8:08:32:
a9:46:4f:8e:ce:94:90:45:23:51:2b:6a:fb:81:5b:51:ae:d5:
59:27:12:80:02:12:22:c4:ab:83:69:28:ef:d2:12:6f:b7:13:
b9:80:f9:1f:97:64:01:33:ae:72:e9:82:87:6f:48:8d:8c:df:
16:d6:ca:a7:a8:18:ae:e4:57:40:82:7d:8a:70:98:1a:90:6a:
40:0b:2d:31:66:43:18:b1:06:7d:b8:aa:6b:c3:56:f7:a2:2f:
42:73:76:90:0b:a3:ab:bc:79:17:23:ee:84:cd:c6:03:ea:eb:
41:04:1c:aa:7f:e8:20:ed:0f:98:cc:b8:06:72:6f:8c:e8:3e:
de:15:2d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org