Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/npkcQbqj6CJOprljDvKKTjX8GCo.roa
File: npkcQbqj6CJOprljDvKKTjX8GCo.roa (raw, json)
Hash identifier: 8n6nhbfdWxxcj8wrN7eYk5hdTQmMpG9pvHF4D1A+lx8=
Subject key identifier: 9E:99:1C:41:BA:A3:E8:22:4E:A6:B9:63:0E:F2:8A:4E:35:FC:18:2A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182EEBD0AAE3B63DA8FEB61BA0405B6A6AA
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/npkcQbqj6CJOprljDvKKTjX8GCo.roa
Signing time: Tue 30 Aug 2022 12:32:22 +0000
ROA not before: Tue 30 Aug 2022 12:32:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.115.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.54.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.103.0/24 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.221.0/24 maxlen: 24
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.209.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:bd:0a:ae:3b:63:da:8f:eb:61:ba:04:05:b6:a6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 30 12:32:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e991c41baa3e8224ea6b9630ef28a4e35fc182a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ea:d4:82:0c:bd:c2:a3:7f:78:e2:1d:d0:c8:
bc:ba:bf:c5:00:4d:02:c3:fb:eb:0f:2c:a0:a0:cc:
33:c8:ea:a6:6d:ba:84:76:9e:5b:94:f5:3f:3a:22:
c4:f1:d0:19:e4:90:3b:f9:ef:92:31:7d:47:96:17:
d2:67:ff:a5:ab:f5:f6:17:41:5f:fd:80:ce:49:22:
90:d2:6b:b6:a0:67:27:08:24:ce:8b:6c:cf:2a:3d:
0f:8e:3c:e3:19:84:e2:9e:8e:cb:6b:ff:f4:63:cd:
e3:a8:b3:95:d3:10:c5:56:ee:f5:0b:09:84:bc:80:
46:56:06:c6:63:31:ab:69:ee:2d:da:6e:3c:0f:a2:
f4:ff:6a:b8:b1:53:50:9a:d8:23:45:64:e7:45:2d:
a6:f7:8f:ed:4a:c5:dd:cc:f4:98:57:46:74:96:b7:
f1:e5:0d:d3:a2:f2:b3:6f:09:c0:f7:63:bd:5a:3e:
55:24:8f:82:39:6f:94:d4:89:b4:e5:ea:8c:7e:19:
85:b9:94:f3:22:49:cf:b1:a3:6e:7f:51:7d:36:fc:
7e:e1:c6:44:07:88:67:6e:a1:35:0f:95:48:ff:a9:
5e:51:a9:10:a9:f4:eb:ca:71:c2:e3:5f:62:0d:3f:
1b:97:ab:76:c5:56:6a:bf:ea:a1:a5:5d:ae:77:84:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:1C:41:BA:A3:E8:22:4E:A6:B9:63:0E:F2:8A:4E:35:FC:18:2A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/npkcQbqj6CJOprljDvKKTjX8GCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.202.0/23
89.116.54.0/24
89.116.70.0/24
89.116.99.0/24
89.116.103.0/24
89.116.112.0/23
89.116.115.0/24
89.116.135.0/24
89.116.156.0/24
89.116.161.0/24
89.116.171.0/24
89.116.175.0/24
89.116.177.0/24
89.116.193.0/24
89.116.203.0/24
89.116.208.0/22
89.116.218.0/24
89.116.220.0/23
89.116.223.0/24
89.116.233.0/24
89.116.252.0/24
89.117.28.0-89.117.33.255
89.117.68.0/24
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.109.0/24
89.117.129.0-89.117.130.255
89.117.132.0/22
89.117.142.0/23
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
85:87:c6:7c:1a:52:75:f1:07:14:67:76:00:d9:83:05:35:4f:
06:b8:a4:f4:5c:60:bc:53:f1:dd:2d:fd:dc:f7:70:da:3b:21:
2f:a0:62:af:7b:35:9c:68:16:2e:47:9d:54:a9:07:77:51:0b:
ad:2a:77:40:4a:23:20:6f:2b:cb:f3:d3:54:1e:e2:00:08:3f:
52:0b:3b:b3:a4:1f:64:80:06:bf:42:9d:91:8a:dd:ee:ca:e5:
3d:f0:d3:6b:89:7a:2e:da:57:08:e0:43:14:01:62:96:4c:63:
d6:a4:ed:74:cf:4d:f8:5a:12:9c:6f:f2:0b:4f:a4:6e:75:e0:
c3:16:37:42:93:ad:ae:18:c0:9d:ed:1d:8c:01:72:7e:ff:24:
0e:96:0b:e8:64:2f:30:ef:02:f6:bd:26:cd:e0:1e:d1:a6:7a:
b1:35:94:be:80:2a:09:b7:d2:4e:0d:cd:9c:78:13:c9:9e:b7:
d0:41:81:99:9f:c0:58:00:90:93:5f:9a:16:98:78:32:66:4d:
c5:7f:d1:cf:38:10:0c:05:8b:64:0f:dd:cc:ae:9d:7f:af:00:
b5:c4:cc:2f:8f:fb:b7:9e:67:e4:65:25:91:c7:7f:ed:0e:43:
7a:c7:90:0a:53:d8:8c:d9:42:09:a1:d3:60:c0:b5:13:51:a8:
d0:b2:e7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org