Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/nJoJxhvLzVWDhZ4S8Q3LJmNoTqo.roa
File: nJoJxhvLzVWDhZ4S8Q3LJmNoTqo.roa (raw, json)
Hash identifier: vwD2l3ozlsvqotQJB2FfERgo6w0EFH/hfhfQyDgT8Z8=
Subject key identifier: 9C:9A:09:C6:1B:CB:CD:55:83:85:9E:12:F1:0D:CB:26:63:68:4E:AA
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01837F802F3F8BB02BE3984D021587662A7E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/nJoJxhvLzVWDhZ4S8Q3LJmNoTqo.roa
Signing time: Tue 27 Sep 2022 15:10:50 +0000
ROA not before: Tue 27 Sep 2022 15:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.37.0/24 maxlen: 24
86.38.248.0/21 maxlen: 24
86.38.156.0/24 maxlen: 24
89.116.248.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.116.64.0/22 maxlen: 24
84.46.200.0/24 maxlen: 24
89.117.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:80:2f:3f:8b:b0:2b:e3:98:4d:02:15:87:66:2a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 27 15:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c9a09c61bcbcd5583859e12f10dcb2663684eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:1b:d7:94:64:c5:c3:43:34:77:83:60:8d:
b8:70:67:1f:77:55:cb:0d:5d:ea:9d:08:ec:21:84:
86:65:c9:7f:71:0c:43:7f:f7:c4:dc:ad:9a:80:ac:
55:96:26:47:c8:81:17:a3:b4:dd:41:32:2d:47:31:
76:e0:8f:36:8c:39:b6:be:9e:58:d9:7c:bd:d0:6f:
85:c2:5d:69:0e:0f:c4:3f:d9:34:71:60:46:af:1b:
03:50:4d:19:43:7a:6b:c2:58:35:97:6c:5e:b8:a9:
cc:c2:ae:65:80:c7:48:be:e8:49:bd:e7:96:0a:21:
17:42:cf:20:46:64:d1:e7:e7:f7:33:5e:05:46:d9:
81:eb:c4:27:1b:a6:d7:48:9f:f7:91:ed:0c:71:a8:
58:80:aa:c2:ef:18:76:f9:6a:a7:17:61:7b:40:ba:
21:3f:01:da:67:b7:ed:a1:f6:bc:7b:bc:82:76:73:
ca:f1:e3:1b:7b:ae:71:2e:5c:fb:df:12:27:cf:11:
6c:33:67:c8:66:24:0e:83:0a:5e:60:a4:3c:65:cd:
bf:80:c8:0d:ed:6f:29:5e:15:08:6a:2c:58:a4:57:
e8:62:a5:4a:45:87:6a:43:77:d8:18:bf:d2:87:2a:
e7:d5:25:72:c7:55:ef:67:41:b9:64:f8:14:da:0f:
e8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9A:09:C6:1B:CB:CD:55:83:85:9E:12:F1:0D:CB:26:63:68:4E:AA
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/nJoJxhvLzVWDhZ4S8Q3LJmNoTqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.200.0/24
84.46.240.0/20
86.38.37.0/24
86.38.156.0/24
86.38.177.0/24
86.38.248.0/21
89.116.64.0/22
89.116.248.0/24
89.117.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:6c:f6:cc:33:e1:46:1f:d8:e3:0c:1f:c9:6d:5d:78:19:3e:
49:a8:98:ed:c6:5c:5d:60:67:0d:12:ee:25:60:18:d9:09:1e:
a6:da:23:91:32:cd:ea:00:39:6b:79:a0:45:2d:da:4c:2b:bf:
03:06:48:db:e1:77:cb:11:c1:01:20:b3:43:a4:24:07:90:3b:
43:46:ec:34:e4:4e:ac:9b:c4:3a:01:e9:06:6a:49:00:46:55:
b7:eb:93:0f:f6:0a:91:bb:72:06:49:97:b4:f1:27:bf:c9:7e:
81:e7:b6:f4:13:79:2a:b4:c1:a8:be:e2:6b:48:40:de:3d:52:
20:16:72:3b:7c:9a:75:1e:1e:cc:2a:60:b2:92:15:b5:0f:4c:
71:79:be:d1:80:20:00:93:b5:0b:cf:17:89:77:4a:ce:a4:0c:
d3:c0:b6:b2:f9:d5:99:14:84:b0:55:ab:67:84:63:b9:d3:bf:
7f:e2:32:45:08:8c:4b:86:b0:c4:c2:5a:fe:dc:79:62:12:1a:
18:53:0e:b0:72:95:b9:e3:02:db:35:4c:54:8a:c6:00:27:66:
36:50:6c:36:8b:62:87:6d:95:61:ec:bc:fe:2c:5e:11:b0:8c:
d1:b9:17:74:d6:5f:dd:4b:67:b3:ca:e6:56:f7:cb:8e:20:15:
16:a8:3c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org