Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/hGaBa3kS7eRiO2iPv5tviT9KjWw.roa
File: hGaBa3kS7eRiO2iPv5tviT9KjWw.roa (raw, json)
Hash identifier: HRk3NObYCCiOF76wkzMEouTFB+ug0BT08rD7SAMpRv8=
Subject key identifier: 84:66:81:6B:79:12:ED:E4:62:3B:68:8F:BF:9B:6F:89:3F:4A:8D:6C
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182D8FEC1A2EBD7E6FB8F0D8D015E26EEC1
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/hGaBa3kS7eRiO2iPv5tviT9KjWw.roa
Signing time: Fri 26 Aug 2022 07:12:30 +0000
ROA not before: Fri 26 Aug 2022 07:12:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 89.117.72.0/21 maxlen: 24
89.116.123.0/24 maxlen: 24
89.117.88.0/22 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.117.112.0/22 maxlen: 24
89.117.120.0/22 maxlen: 24
89.116.76.0/24 maxlen: 24
86.38.216.0/22 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d8:fe:c1:a2:eb:d7:e6:fb:8f:0d:8d:01:5e:26:ee:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 26 07:12:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8466816b7912ede4623b688fbf9b6f893f4a8d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:78:24:7d:f7:92:9f:78:ff:35:31:49:8e:
46:03:4f:d4:81:d8:8a:b9:1b:59:92:81:0d:13:25:
20:9f:9a:70:71:20:a3:4d:89:d1:6e:12:1a:f8:6d:
10:9a:f4:0e:9d:20:b2:fb:56:69:a0:22:31:63:4f:
f0:39:83:6c:63:32:f3:6b:18:bd:41:26:91:fd:0c:
da:2f:02:5f:c9:6c:c4:c3:59:4a:18:29:22:c5:09:
13:5e:9d:93:52:82:9d:44:ba:41:63:ca:ba:07:2c:
9c:14:ec:3d:83:66:38:ca:b4:0b:e5:25:e7:d6:22:
27:3e:2f:84:c5:f1:de:76:b2:2c:70:7d:5e:62:c5:
af:97:a7:b6:24:f2:3d:6e:df:26:73:8b:12:78:22:
d5:72:ef:cd:38:05:43:6f:d5:bd:db:81:97:ff:14:
9a:34:a5:e6:f5:83:46:8b:8a:f2:d9:cc:31:80:da:
39:12:53:95:a6:ff:36:8c:ed:58:e5:f7:0c:19:ac:
35:b7:fa:b2:36:d2:6d:05:81:68:d5:2c:b2:b9:d8:
b7:5b:fa:37:6c:46:e6:b4:89:30:c2:5a:76:fd:d0:
8e:b0:52:f8:a0:ba:b1:6f:5a:ae:74:e9:7b:59:d1:
9c:e3:2e:5e:4e:a9:ed:e8:8a:b9:2e:e2:28:1e:14:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:66:81:6B:79:12:ED:E4:62:3B:68:8F:BF:9B:6F:89:3F:4A:8D:6C
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/hGaBa3kS7eRiO2iPv5tviT9KjWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.216.0/22
89.116.76.0/24
89.116.91.0/24
89.116.123.0/24
89.116.140.0/24
89.116.212.0/22
89.116.250.0/24
89.117.72.0/21
89.117.88.0/22
89.117.112.0/22
89.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:df:9b:27:32:28:31:7a:78:9e:20:51:db:67:54:40:91:91:
8a:1d:0d:37:bc:d3:cd:47:3c:05:8c:f6:d7:9a:28:03:d4:35:
03:c2:e8:c7:e5:1d:32:1d:d6:e2:1f:e5:3b:f3:78:02:05:a0:
8a:d4:e4:1a:7a:83:6b:0d:1f:cd:8d:17:b7:3a:b2:e2:dd:05:
4d:f6:4d:16:e3:75:7e:0b:da:63:85:6a:c0:67:d1:f9:16:0c:
ce:e4:56:23:de:a1:be:3b:e4:be:9d:96:80:16:83:3e:0c:5c:
19:43:3c:5a:36:99:89:f5:1c:fb:2a:74:e5:40:e9:1a:16:ac:
d1:55:98:72:07:39:34:98:c7:d6:cf:f2:86:1e:f4:25:d0:45:
57:f8:6d:89:9b:24:bc:13:29:49:8f:ff:d4:15:fb:0a:6f:a5:
57:5b:bc:08:12:24:91:92:80:ba:5b:d4:43:ba:c7:66:a1:9e:
ca:7b:b2:22:0c:51:6f:60:43:b1:56:1c:b2:02:77:59:23:f3:
6b:e0:39:22:b0:ab:4c:d9:c9:d7:08:85:c8:a9:21:8c:fd:99:
28:4c:ab:f1:5e:2b:f7:44:7b:36:51:4a:f3:be:ca:32:54:ef:
5b:92:15:e2:18:e9:12:15:f3:bc:bd:0b:10:9a:dc:83:6d:aa:
db:8b:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org