Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/lCxgJIynTQRt1fEcUMIqdmm5lEo.roa
File: lCxgJIynTQRt1fEcUMIqdmm5lEo.roa (raw, json)
Hash identifier: rfdXWU+xYZLWxS3YBLIgDOg+eXEkhhCFsgBUJWnISMI=
Subject key identifier: 94:2C:60:24:8C:A7:4D:04:6D:D5:F1:1C:50:C2:2A:76:69:B9:94:4A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B623383
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/lCxgJIynTQRt1fEcUMIqdmm5lEo.roa
Signing time: Tue 14 Jun 2022 08:52:45 +0000
ROA not before: Tue 14 Jun 2022 08:52:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 89.117.109.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
86.38.4.0/23 maxlen: 24
89.117.48.0/20 maxlen: 24
89.117.64.0/22 maxlen: 24
86.38.180.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.120.0/22 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.246.0/23 maxlen: 24
86.38.242.0/23 maxlen: 24
86.38.241.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
86.38.189.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.200.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.214.0/24 maxlen: 24
86.38.220.0/23 maxlen: 24
86.38.226.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
89.117.11.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190985091 (0xb623383)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 14 08:52:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=942c60248ca74d046dd5f11c50c22a7669b9944a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:68:67:70:ac:fc:35:e6:43:9e:59:b0:8e:
09:f7:2f:d2:b7:04:c0:54:cb:7d:3e:c3:0e:0c:90:
99:44:e0:92:b4:a7:c1:41:8e:72:72:4c:3f:ab:7a:
76:a9:98:4c:9f:bf:4f:5c:1e:5b:ef:21:1f:af:fe:
06:41:7d:ca:3a:e7:21:97:60:d0:26:90:53:d4:36:
5c:61:72:be:9e:80:ca:4f:b5:8f:d9:91:30:f8:5c:
ac:e3:83:71:d4:14:08:cf:df:fe:38:bf:c4:4c:04:
05:1b:e8:a3:21:f3:aa:e9:65:43:02:90:ab:9f:f7:
43:df:39:89:7d:1c:9e:b3:f9:9c:38:1c:a8:47:77:
52:b4:ce:38:2f:f2:a0:af:56:c9:fd:4a:c8:00:5f:
0a:09:54:92:d7:7c:df:3c:7e:62:88:21:c9:89:fc:
4c:87:7f:d2:59:a5:78:6e:27:be:27:c5:c3:6f:a2:
f0:7f:7f:41:2e:a1:70:98:ba:ba:ce:77:b8:05:b4:
71:11:38:02:5d:3e:dd:14:7b:d1:cd:b4:86:af:7e:
8e:37:0b:e5:a9:53:64:0e:84:8b:5d:dd:a7:c3:1d:
a2:3f:c7:5b:e9:d7:95:09:0c:2e:ff:72:ca:48:05:
f4:c9:7f:c4:53:57:f5:b5:43:7e:68:2f:9f:7f:b5:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2C:60:24:8C:A7:4D:04:6D:D5:F1:1C:50:C2:2A:76:69:B9:94:4A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/lCxgJIynTQRt1fEcUMIqdmm5lEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.183.0/24
84.46.200.0/24
86.38.4.0/23
86.38.180.0/22
86.38.189.0/24
86.38.200.0/24
86.38.214.0/24
86.38.220.0/23
86.38.226.0/24
86.38.238.0/24
86.38.241.0-86.38.243.255
86.38.246.0/23
89.116.56.0/24
89.116.58.0/23
89.116.68.0/23
89.116.96.0/24
89.116.135.0/24
89.116.156.0/24
89.116.158.0/24
89.116.175.0/24
89.116.177.0/24
89.116.218.0/24
89.116.242.0/23
89.116.246.0/23
89.117.11.0/24
89.117.48.0-89.117.67.255
89.117.109.0/24
89.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
07:30:79:22:d6:cf:80:56:7d:53:7d:a1:d7:94:de:bf:17:dd:
99:5c:a3:e7:14:38:14:0b:4d:d9:e2:92:81:16:7b:27:ce:5b:
d2:40:65:76:3a:bc:73:5a:6d:71:f6:74:31:c8:6f:ca:20:26:
b4:97:e9:7b:8d:8b:34:8c:7a:e6:0b:10:64:e7:2e:6f:a5:21:
50:bc:0e:22:64:aa:02:06:69:75:50:2d:1d:47:f8:13:31:86:
e4:c6:80:7c:0b:e5:dd:4d:28:79:00:21:ac:1e:09:0e:d9:99:
5e:ca:11:6c:dd:89:db:ac:a6:41:f9:94:ac:b0:a8:13:7e:ab:
7b:cc:77:53:ab:66:89:23:7e:5a:64:88:01:fa:25:13:d7:76:
db:12:38:d4:75:5f:eb:2c:6c:42:f7:9c:95:fb:5a:f8:3a:d0:
a0:2e:2d:ad:18:2d:b3:ac:2c:50:8e:60:b8:a9:48:75:32:02:
fd:83:1d:55:03:d0:5e:a1:be:ec:06:35:c0:60:7c:73:95:f0:
90:2d:0a:8d:79:d4:0a:dd:59:80:66:2b:5c:6e:ba:21:e7:23:
a7:a4:e4:d3:14:49:82:c7:12:b2:e5:a6:70:db:db:29:69:c7:
c1:0f:f7:a8:49:e1:de:16:fe:ec:7d:be:3d:bf:eb:5b:7f:51:
2e:7c:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org