Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/liY5Ndq1O-BGgNnZgOMOqwYOhgk.roa
File: liY5Ndq1O-BGgNnZgOMOqwYOhgk.roa (raw, json)
Hash identifier: Q9OPCu7lSTkTDluOeojGxxR8IRg8+/V8FnhtyFFarXM=
Subject key identifier: 96:26:39:35:DA:B5:3B:E0:46:80:D9:D9:80:E3:0E:AB:06:0E:86:09
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AA18943
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/liY5Ndq1O-BGgNnZgOMOqwYOhgk.roa
Signing time: Fri 06 May 2022 07:40:05 +0000
ROA not before: Fri 06 May 2022 07:40:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 89.117.109.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
82.140.182.0/24 maxlen: 24
86.38.4.0/23 maxlen: 24
89.117.48.0/20 maxlen: 24
86.38.175.0/24 maxlen: 24
86.38.180.0/23 maxlen: 24
89.117.120.0/22 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.242.0/23 maxlen: 24
86.38.241.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
86.38.189.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
89.116.58.0/23 maxlen: 24
86.38.200.0/24 maxlen: 24
89.116.68.0/23 maxlen: 24
86.38.214.0/24 maxlen: 24
86.38.216.0/22 maxlen: 24
86.38.220.0/23 maxlen: 24
86.38.225.0/24 maxlen: 24
86.38.226.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
89.117.11.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178358595 (0xaa18943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 6 07:40:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96263935dab53be04680d9d980e30eab060e8609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:ff:6e:f9:8b:38:f0:9e:02:02:7f:7d:c1:
ee:30:1d:10:4b:5d:09:08:c0:3e:f5:8e:85:a9:e6:
30:b9:a3:08:8d:be:5d:fe:88:2c:55:e7:6d:d5:fe:
56:55:d9:68:08:65:f2:fd:8e:f4:3a:8f:81:e2:32:
b3:1f:fe:fe:20:6b:6e:ad:b9:60:21:1f:0d:34:63:
10:53:14:41:dc:fb:af:7c:cd:7b:c1:dc:cc:26:ed:
76:f3:18:0f:9e:27:3a:88:a4:ac:6d:90:e7:da:c7:
46:0b:5d:3d:75:08:de:3c:60:ea:3e:7a:33:f8:b1:
39:e4:40:d5:c9:a7:0f:a2:0f:9a:c2:45:cf:82:65:
10:93:88:09:c1:ae:b8:be:3a:c8:92:b6:b9:62:46:
b8:7c:78:e2:c3:4d:94:e1:17:55:18:11:08:42:11:
46:af:fe:f0:17:24:e5:5c:a2:91:44:53:21:b2:45:
6e:d1:ef:08:36:11:65:d4:53:62:d1:a6:55:4b:37:
bf:04:e8:73:88:88:a9:e7:38:d5:86:df:60:d2:7e:
40:9b:1b:45:eb:6e:e7:f8:ad:67:d3:31:b8:6a:21:
91:c9:66:00:52:cc:ce:39:d1:4e:ee:15:02:20:b6:
0a:7a:e6:c5:03:07:5e:b6:0f:5b:34:79:70:58:bb:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:26:39:35:DA:B5:3B:E0:46:80:D9:D9:80:E3:0E:AB:06:0E:86:09
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/liY5Ndq1O-BGgNnZgOMOqwYOhgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/23
84.46.200.0/24
86.38.4.0/23
86.38.175.0/24
86.38.180.0/23
86.38.189.0-86.38.190.255
86.38.200.0/24
86.38.214.0/24
86.38.216.0-86.38.221.255
86.38.225.0-86.38.226.255
86.38.238.0/24
86.38.241.0-86.38.243.255
89.116.56.0/24
89.116.58.0/23
89.116.68.0/23
89.116.96.0/24
89.116.135.0/24
89.116.156.0/24
89.116.158.0/24
89.116.175.0/24
89.116.177.0/24
89.116.218.0/24
89.116.242.0/23
89.116.246.0/23
89.117.11.0/24
89.117.48.0/20
89.117.109.0/24
89.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
11:11:7c:a0:40:bd:30:a1:e1:72:20:04:62:d3:7c:fb:ca:76:
04:2e:9e:51:00:db:40:b7:a9:d8:d7:ec:ea:2d:3c:4b:9a:2f:
d8:75:45:07:51:52:d2:31:6b:de:45:b1:82:34:df:bd:0a:91:
41:bd:a0:e8:fc:88:ed:96:8c:38:53:18:4a:ce:40:82:3a:ff:
f5:61:46:11:ac:84:2f:ae:e8:9c:46:66:8b:f1:9e:c0:b7:14:
f5:a6:0a:db:5f:e3:a0:57:14:7a:77:f6:6b:14:ae:67:80:83:
f0:dc:6f:64:d5:e6:1f:4e:33:5d:9c:e4:dd:c9:92:6f:dc:2e:
56:8e:9e:47:59:06:39:a0:27:a8:c0:b6:c8:cb:74:36:cf:b6:
fb:b8:50:04:47:f1:1b:47:8f:d1:8f:b2:d3:5e:31:d5:d4:a5:
03:8a:e2:32:be:13:0a:88:31:be:8c:46:46:dc:40:d4:22:95:
17:3f:91:2a:9f:e2:e5:3a:d9:ac:c9:fb:33:c5:29:38:ef:c0:
74:b5:72:24:2a:60:f9:7c:f3:6b:46:73:f8:64:05:c7:5e:82:
78:8a:ea:8e:80:7f:34:4d:43:4f:fd:41:a2:da:4c:5f:fe:5e:
a3:8a:3f:8e:51:0b:95:c1:3c:52:25:66:b5:1d:07:a8:24:0c:
05:78:e6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org