Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/l3WGDswl_uZKopzQzDyt6-HAyGY.roa
File: l3WGDswl_uZKopzQzDyt6-HAyGY.roa (raw, json)
Hash identifier: 0ItgALM/ePkZzm7nUUZeYc2zrqbKK/QkxclJ4DuIjHE=
Subject key identifier: 97:75:86:0E:CC:25:FE:E6:4A:A2:9C:D0:CC:3C:AD:EB:E1:C0:C8:66
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AE4D6AF
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/l3WGDswl_uZKopzQzDyt6-HAyGY.roa
Signing time: Tue 17 May 2022 11:30:09 +0000
ROA not before: Tue 17 May 2022 11:30:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 89.117.190.0/24 maxlen: 24
86.38.151.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
89.116.137.0/24 maxlen: 24
89.117.245.0/24 maxlen: 24
89.116.180.0/22 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182769327 (0xae4d6af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 17 11:30:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9775860ecc25fee64aa29cd0cc3cadebe1c0c866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:57:70:0a:f4:70:9c:60:ad:da:eb:71:46:a9:
3a:d9:e7:f3:40:fe:0e:d6:22:bf:99:a8:94:9e:e1:
cf:53:8b:f8:84:9e:93:23:e1:e9:bf:c5:3d:c4:21:
15:d0:95:18:26:b5:36:fe:69:11:94:53:36:20:e6:
c9:43:15:64:2d:97:63:60:eb:dc:2f:79:02:55:55:
1d:cf:ba:28:61:9e:54:41:54:06:e1:9b:9b:da:57:
3b:60:e7:60:0a:cd:6f:26:af:2e:45:7d:79:5f:ca:
76:3b:29:9f:6d:5e:5e:e2:63:e3:23:ef:34:9b:73:
a5:e3:03:b5:7f:8b:b6:d3:ed:6b:63:d2:1f:97:47:
21:e6:70:ca:32:e1:a5:2f:10:40:e0:b4:46:d9:bb:
65:dd:84:c3:66:41:2c:a8:d1:da:d7:2f:ce:bd:28:
aa:30:10:9a:36:37:c9:0c:ef:ae:73:dc:48:35:72:
93:d3:ab:16:55:51:24:05:6a:b9:fd:f5:82:7f:80:
36:c5:c6:8a:57:75:1d:b2:85:48:13:87:a5:7c:bb:
de:a4:05:91:a2:7f:11:e3:61:9a:72:03:60:86:75:
a0:ad:9c:2c:4d:ba:f2:10:ac:e2:f8:8a:90:c2:09:
2f:a5:c1:39:5f:d1:dd:6f:01:55:41:9f:75:88:8a:
e7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:75:86:0E:CC:25:FE:E6:4A:A2:9C:D0:CC:3C:AD:EB:E1:C0:C8:66
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/l3WGDswl_uZKopzQzDyt6-HAyGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.151.0/24
86.38.156.0/24
86.38.235.0/24
89.116.96.0/24
89.116.137.0/24
89.116.180.0/22
89.117.190.0/24
89.117.245.0/24
Signature Algorithm: sha256WithRSAEncryption
48:10:d9:24:fe:59:bb:c0:42:c2:dd:78:85:15:81:af:21:d7:
a3:ae:74:45:a8:4a:3f:42:e1:b0:53:ab:b9:aa:78:3a:c8:11:
ae:74:8d:c9:19:fc:a2:bd:f1:99:aa:1e:d5:fb:19:1b:c8:57:
18:22:b2:0a:d0:59:79:3e:46:b8:0a:75:49:90:6a:42:8d:2d:
26:ba:fc:d0:22:95:c2:c5:2e:71:80:a9:c4:72:67:82:e7:c3:
a5:d0:ef:5c:ba:ba:57:b4:22:d3:ac:77:73:b6:cd:29:9c:fe:
ef:0a:2a:bd:d8:a6:18:94:3e:f6:d6:a0:f7:65:db:94:96:22:
b6:16:f5:5c:93:b6:bd:e6:b4:89:33:b6:52:da:8e:e6:2d:f7:
8d:a9:a9:41:74:cc:a6:7f:65:bc:4f:49:64:53:44:5e:32:24:
68:eb:43:6f:08:a6:ba:49:92:a7:5f:cc:b8:bd:97:a6:16:05:
10:44:1c:90:6d:14:dc:47:b0:80:01:17:5e:21:cf:b8:1c:d4:
d1:58:a1:6b:5b:97:01:25:8a:44:ad:7d:cb:d0:c9:09:97:4a:
78:99:46:9f:fb:4c:1b:e4:bd:7b:57:87:8d:df:7a:2a:3b:38:
ed:75:76:79:d7:a9:35:8a:2d:3c:e1:2f:47:0e:c8:1b:ab:8e:
af:1a:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org