Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/i1z_0cgGvKjIV9MUOkDBw_hdMZc.roa
File: i1z_0cgGvKjIV9MUOkDBw_hdMZc.roa (raw, json)
Hash identifier: VYgtLYAAFjZzJLXkPm3Rwp22AfjH6O2AtAcrAw3pup4=
Subject key identifier: 8B:5C:FF:D1:C8:06:BC:A8:C8:57:D3:14:3A:40:C1:C3:F8:5D:31:97
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AA5B348
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/i1z_0cgGvKjIV9MUOkDBw_hdMZc.roa
Signing time: Fri 06 May 2022 21:16:27 +0000
ROA not before: Fri 06 May 2022 21:16:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 89.116.140.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
86.38.216.0/22 maxlen: 24
89.116.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178631496 (0xaa5b348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 6 21:16:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b5cffd1c806bca8c857d3143a40c1c3f85d3197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:de:ec:ee:87:b4:52:be:94:3b:3a:64:64:58:
31:df:1f:39:9e:10:c3:09:0e:15:a3:4d:1a:02:84:
a2:44:7b:93:78:65:99:85:cf:ff:9b:64:1b:99:96:
e0:e3:bf:2d:49:27:aa:82:01:6e:aa:18:4c:b8:6f:
d5:12:80:20:dc:44:84:08:9c:cd:d5:9c:fa:e2:0a:
5b:58:f1:c8:1d:1f:94:64:db:c1:9f:04:48:a1:8a:
eb:4b:03:a3:c2:64:ef:87:02:91:db:58:05:1d:b0:
8d:e1:78:b5:bd:0b:47:ab:a3:7c:86:d6:dc:3f:c0:
75:40:8f:08:91:dd:ac:63:b8:db:13:96:8a:dc:b5:
16:a4:b6:dd:93:69:be:f5:5e:61:d3:51:e5:39:8f:
43:0d:ac:1e:0a:e2:51:3e:1c:ee:56:fe:25:80:6b:
b5:7a:15:25:12:86:aa:81:9b:72:4c:34:38:cb:42:
01:95:86:56:b3:2b:11:00:9b:fe:d1:ce:e1:65:aa:
f5:79:d4:9e:3c:c3:9f:42:41:24:4b:bf:b9:a0:42:
37:38:e2:ff:92:b2:f7:58:78:d3:16:03:11:12:b6:
70:e9:bd:a8:33:56:a6:c2:b1:e0:15:37:73:4a:cb:
95:aa:ac:94:a0:af:50:00:6a:d5:bd:ca:a6:ea:1f:
98:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5C:FF:D1:C8:06:BC:A8:C8:57:D3:14:3A:40:C1:C3:F8:5D:31:97
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/i1z_0cgGvKjIV9MUOkDBw_hdMZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.216.0/22
89.116.140.0/24
89.116.202.0/24
89.116.250.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:01:95:df:bd:3f:07:eb:e5:45:5e:45:75:1c:9a:b9:3a:33:
6c:a5:e3:93:ce:9a:bf:bd:32:a2:56:92:eb:6d:2e:c2:81:5f:
df:6c:41:4f:9f:1c:73:d0:6d:02:a8:d0:7b:77:60:59:b1:0f:
84:a6:fc:87:76:dd:be:c9:57:c9:1e:fc:f6:1e:ab:0d:6c:ec:
a9:c6:04:a1:13:7d:fc:44:b0:98:ba:32:de:06:ad:cf:1d:85:
fe:c8:09:12:0f:f1:4e:1a:d1:de:95:f1:6b:42:9d:a8:46:68:
60:d2:bb:59:2b:9b:81:fe:eb:d4:a0:03:28:70:03:d5:32:67:
f2:9c:05:93:0f:88:0f:4f:9e:30:fb:26:1b:cf:d3:09:89:4d:
26:68:82:55:b9:4c:f9:b1:ab:ed:68:4f:41:64:7b:3c:2d:97:
b6:26:78:ef:86:69:d6:3c:54:cd:37:16:52:20:d6:7c:a5:c4:
15:af:94:fc:72:0e:8d:d8:80:10:8e:3e:d5:7b:f9:0b:d4:b5:
29:63:17:4d:2d:18:fe:41:07:f5:d5:42:cd:b2:85:12:9b:51:
79:8c:6d:fd:1c:ef:9f:e6:d8:b5:c8:64:06:5d:96:d0:c0:e0:
90:05:d6:ad:72:53:d6:2c:ae:ed:2a:c9:2a:54:b9:2f:f8:bd:
aa:e8:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org