Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/jD6nVxAqzq8U6MXAApU5PkF5Lrk.roa
File: jD6nVxAqzq8U6MXAApU5PkF5Lrk.roa (raw, json)
Hash identifier: 8F0BaC+rOaDccnCjEBmWdY02XFb2p1rbEE+WB4BmaQM=
Subject key identifier: 8C:3E:A7:57:10:2A:CE:AF:14:E8:C5:C0:02:95:39:3E:41:79:2E:B9
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0BAE5DC4
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/jD6nVxAqzq8U6MXAApU5PkF5Lrk.roa
Signing time: Fri 01 Jul 2022 05:45:02 +0000
ROA not before: Fri 01 Jul 2022 05:45:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.117.80.0/22 maxlen: 24
89.117.104.0/22 maxlen: 24
89.117.16.0/21 maxlen: 24
89.116.80.0/21 maxlen: 24
89.116.224.0/21 maxlen: 24
89.116.237.0/24 maxlen: 24
89.116.32.0/21 maxlen: 24
89.117.0.0/22 maxlen: 24
89.116.180.0/22 maxlen: 24
89.117.157.0/24 maxlen: 24
89.117.164.0/24 maxlen: 24
84.46.236.0/22 maxlen: 24
89.117.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195976644 (0xbae5dc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 1 05:45:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c3ea757102aceaf14e8c5c00295393e41792eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:f5:9e:ac:bf:53:03:04:68:a2:eb:0d:b3:
40:68:cf:c5:97:cf:27:e6:83:27:87:ce:c6:98:40:
b0:b8:6c:7e:e5:1c:7f:b7:31:4b:13:90:63:fd:16:
83:08:22:ca:06:19:70:80:7d:c9:a7:17:89:d1:c8:
75:77:f4:61:5b:3e:fd:a1:a2:3a:5a:41:03:94:5d:
bc:5e:1e:81:29:17:6f:93:4f:4a:9d:ab:ab:41:4f:
9e:2e:7a:41:37:aa:5d:8d:5e:c3:d7:54:1f:05:22:
5b:c9:6b:c2:db:f9:29:d8:a5:f6:0d:ed:cc:3f:b0:
92:22:02:d6:65:2f:81:fe:20:bf:21:a6:b3:34:e5:
1f:a0:72:0b:41:5d:65:70:2c:e5:f4:b0:95:67:72:
75:f2:cd:27:df:8c:22:9b:e5:10:08:fd:43:9d:2f:
ab:51:ed:2e:0e:90:fc:72:86:0e:f3:4d:2f:51:66:
40:e1:f4:06:0f:89:6b:1f:07:72:9b:97:13:cf:01:
1c:03:a4:32:e8:c9:ed:af:04:0b:dd:19:81:0c:ce:
23:8f:4d:e8:23:b8:d2:61:98:b5:4d:26:0f:fa:d5:
19:a9:fd:f3:32:46:4b:ef:c1:f4:95:cc:d0:d2:8e:
45:08:fc:67:37:be:f8:ca:a1:49:30:64:7d:c2:75:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3E:A7:57:10:2A:CE:AF:14:E8:C5:C0:02:95:39:3E:41:79:2E:B9
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/jD6nVxAqzq8U6MXAApU5PkF5Lrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
89.116.32.0/21
89.116.80.0/21
89.116.180.0/22
89.116.224.0/21
89.116.237.0/24
89.117.0.0/22
89.117.16.0/21
89.117.80.0/22
89.117.104.0/22
89.117.157.0/24
89.117.164.0/24
89.117.171.0/24
Signature Algorithm: sha256WithRSAEncryption
57:91:8f:1a:36:fe:80:91:31:55:3c:47:fe:b8:5e:26:af:38:
14:5a:70:e2:75:3c:59:82:10:b8:15:d7:51:43:f3:2a:9b:68:
ae:53:c7:19:37:2c:58:41:af:7c:91:05:38:24:28:c9:57:c8:
8c:eb:a7:44:60:44:e7:93:b7:17:2f:c7:b0:6a:3c:dc:88:ab:
be:eb:f9:56:d4:fc:b5:8a:de:a0:76:99:eb:11:28:15:08:cc:
9d:1f:76:3f:c6:3a:40:0e:5e:cc:11:d0:41:cd:3f:8e:11:cc:
9c:78:bf:94:10:73:f4:dc:75:a0:91:4d:98:10:13:16:d2:57:
03:1d:c4:c9:a1:0a:95:8d:4e:10:77:98:82:53:0f:f6:f8:62:
ce:e6:0b:57:a4:a2:6b:a5:e2:07:00:d9:71:00:05:cc:f5:50:
ea:5f:95:7a:f2:6c:67:b6:0b:1c:2e:05:0a:61:3d:5a:3f:52:
b2:d6:2a:4e:a4:e1:17:29:27:6f:67:30:42:a1:fc:ba:cf:d8:
7a:2a:43:07:7e:fb:17:5b:14:6f:07:3c:b0:27:d9:db:37:68:
7f:ab:20:3c:ab:5a:71:e4:5b:1a:c8:aa:e1:77:d5:74:a2:3a:
79:25:c8:c9:ec:a1:43:ae:fe:b3:a1:3b:90:00:2c:0d:40:5f:
81:e9:0e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:40 2025 by rpki-client