Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/jYmuMTnnK2YcyS-0E0f6FiXGB3c.roa
File: jYmuMTnnK2YcyS-0E0f6FiXGB3c.roa (raw, json)
Hash identifier: wVO10m2KzTR7dOI8TF0ap5valrFUOyg8va8UJA13zP8=
Subject key identifier: 8D:89:AE:31:39:E7:2B:66:1C:C9:2F:B4:13:47:FA:16:25:C6:07:77
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AAA6BCA
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/jYmuMTnnK2YcyS-0E0f6FiXGB3c.roa
Signing time: Sat 07 May 2022 20:14:55 +0000
ROA not before: Sat 07 May 2022 20:14:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 89.116.123.0/24 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.76.0/24 maxlen: 24
86.38.216.0/22 maxlen: 24
89.116.91.0/24 maxlen: 24
86.38.232.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178940874 (0xaaa6bca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 7 20:14:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d89ae3139e72b661cc92fb41347fa1625c60777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:28:82:50:58:af:0d:7a:08:ad:04:54:88:
d2:a5:d2:d7:34:80:a1:9c:0a:51:68:be:e6:6c:3d:
09:0b:00:3f:45:31:c9:44:34:0c:bf:2c:f6:30:b9:
ea:8d:31:1b:da:84:bd:a4:ff:c4:0c:ba:7b:08:eb:
f8:d2:61:54:55:de:56:98:86:3c:dc:a0:17:5d:e7:
54:d2:c0:4b:93:a4:b9:73:4a:4c:c5:8d:3f:78:cb:
18:65:b6:30:ef:3e:2c:74:dd:d6:b1:cb:e9:1c:b8:
05:ba:ac:b4:7a:72:15:07:f3:4e:aa:e0:2e:ae:1b:
65:49:ac:5b:f5:9e:1f:a8:f8:cb:02:8d:48:2d:32:
7d:13:56:7e:b2:52:ee:ac:42:9c:ea:2b:36:f6:ae:
2b:71:61:be:c0:6b:af:7e:68:8f:90:80:c7:eb:f7:
2a:9e:18:8c:15:a2:92:f1:1b:4d:9f:7a:59:1e:6f:
20:ff:ad:2c:91:ae:c5:0f:97:11:0c:d7:dd:6d:25:
34:b7:0d:9e:c3:45:67:86:59:aa:92:e1:a0:90:0a:
3b:08:7f:ef:7a:9e:32:a3:6d:37:c3:54:10:05:e7:
66:34:3c:77:bf:85:27:3b:13:e2:70:d3:6c:f0:1b:
50:af:47:3c:4a:f6:22:e2:79:7d:75:fc:87:ea:d9:
60:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:89:AE:31:39:E7:2B:66:1C:C9:2F:B4:13:47:FA:16:25:C6:07:77
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/jYmuMTnnK2YcyS-0E0f6FiXGB3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.216.0/22
86.38.232.0/24
89.116.76.0/24
89.116.91.0/24
89.116.123.0/24
89.116.140.0/24
89.116.202.0/24
89.116.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:00:85:58:20:1f:b2:ad:41:25:47:69:ab:72:70:34:8f:74:
d7:cb:fb:b0:3e:07:15:c9:58:bb:29:3b:4d:19:31:b0:c9:af:
39:72:ab:6b:ff:8a:6b:dc:34:0a:7d:db:1e:54:99:4f:5e:66:
84:3e:1e:fb:4c:f8:86:c4:8e:4f:52:4a:36:9d:ad:9c:df:01:
ef:c5:cd:3c:82:10:2b:e0:c4:de:a7:81:48:1c:e8:30:14:4d:
1b:c6:ce:e5:57:12:2d:44:f0:b5:e4:d4:f7:3c:5c:b9:db:98:
95:91:05:a5:3b:89:63:cb:96:31:59:77:bb:78:3e:24:62:aa:
74:5d:41:16:4c:7b:c5:dd:18:28:b4:96:f4:7f:3b:22:23:e7:
92:ec:c4:e0:a1:64:0c:ae:61:fa:5e:ea:39:26:fb:07:16:52:
b6:de:ba:f0:6c:20:fd:ce:6b:21:b0:3c:d0:b7:13:4c:ba:59:
e4:ec:24:fb:e5:26:3e:70:85:0b:97:11:f7:df:f0:97:52:5e:
a1:19:8f:f4:bf:ee:8d:d8:45:81:6a:ab:6d:0e:c9:78:2b:ab:
4e:7b:79:10:75:0d:37:70:c8:5e:0d:8a:47:8b:16:70:1a:40:
85:6e:15:13:ef:5d:ea:4e:23:be:7d:a3:ce:bf:b1:be:df:fd:
21:52:91:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org