Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/o9oRcN3St7-IMv_LPFG7OcByDTw.roa
File: o9oRcN3St7-IMv_LPFG7OcByDTw.roa (raw, json)
Hash identifier: qgK9zrAe80soTXfvP7f9RC1wsLbjc0DMFnTLXoGur3E=
Subject key identifier: A3:DA:11:70:DD:D2:B7:BF:88:32:FF:CB:3C:51:BB:39:C0:72:0D:3C
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0BA68A00
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/o9oRcN3St7-IMv_LPFG7OcByDTw.roa
Signing time: Wed 29 Jun 2022 07:53:02 +0000
ROA not before: Wed 29 Jun 2022 07:53:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.116.115.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195463680 (0xba68a00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 29 07:53:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3da1170ddd2b7bf8832ffcb3c51bb39c0720d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:20:67:54:7d:61:6b:43:c2:a2:97:c9:ca:4e:
d5:21:b6:cb:8b:de:4d:3e:5d:00:c4:0b:88:a8:5c:
4c:2c:2f:64:90:e4:81:e5:b5:14:61:56:36:60:07:
16:1a:e9:85:5e:1f:9a:17:f1:a8:fd:7f:58:49:5a:
79:c9:cf:30:03:20:c4:25:5c:52:0b:c7:4e:85:77:
55:96:2d:66:10:8d:c8:fa:3e:46:f5:53:02:a5:58:
b7:4b:c1:7e:f7:47:a1:ec:8e:da:8e:3d:60:c4:f3:
2f:3d:da:09:65:ad:7b:82:07:24:9f:e5:f1:e6:ac:
72:02:89:80:d5:7e:f9:28:41:b7:87:2c:1d:39:e7:
ce:99:a8:71:8f:5d:d4:cc:67:de:cd:fd:5c:11:ae:
fd:28:4a:b7:21:da:ed:3d:aa:72:eb:84:26:fe:95:
b3:d0:a6:c1:d5:d2:f7:43:fe:4c:6e:8f:ee:8d:1a:
32:8d:26:87:95:b4:d8:09:28:a3:72:b4:de:1c:f0:
3a:30:cf:d0:f1:7a:12:23:b8:be:a2:1e:55:c7:13:
6b:0d:bb:77:a2:a9:08:ca:d0:2f:c3:18:66:5f:0a:
f9:2b:4b:bb:5c:a9:66:dd:92:c9:0d:3f:66:8b:9a:
fd:61:e8:9a:d9:98:06:4d:4f:ac:68:f0:94:2f:dd:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DA:11:70:DD:D2:B7:BF:88:32:FF:CB:3C:51:BB:39:C0:72:0D:3C
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/o9oRcN3St7-IMv_LPFG7OcByDTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.171.0/24
86.38.7.0/24
86.38.37.0/24
86.38.177.0/24
86.38.200.0/24
86.38.235.0/24
89.116.56.0/24
89.116.100.0/24
89.116.115.0/24
89.116.125.0/24
89.117.27.0/24
89.117.109.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:de:3e:94:ce:51:ed:08:36:e1:c9:a4:1e:5a:2b:bf:dc:67:
87:17:19:d1:b4:5c:a9:77:84:86:96:63:fe:c4:31:27:a2:4f:
00:ff:10:a7:dd:c0:df:0a:d9:34:a8:da:1b:92:1a:f4:f9:79:
b3:0c:b5:be:35:f1:04:bc:26:dc:2c:4b:8c:a5:4f:d7:0c:0c:
d3:58:7b:5c:e7:40:f9:1f:98:fe:43:0b:87:ec:13:16:d6:69:
04:20:81:5f:b4:93:77:a2:a8:af:76:b0:89:df:d1:b2:18:ec:
65:b4:be:48:06:f4:31:1b:7e:49:75:98:ab:f0:f9:4d:73:ed:
8c:c2:60:b4:bb:fd:c6:13:60:49:b1:be:db:55:c5:80:cb:5e:
8b:52:4f:10:2b:14:02:5d:f9:9c:16:a9:23:9f:bf:e4:ad:be:
e1:bf:83:3c:72:98:48:14:7d:31:6f:ab:ff:60:dc:6f:6a:b7:
cc:32:1f:5a:5b:a3:18:90:ec:56:f7:cf:3d:fd:00:4a:31:c2:
1e:a7:a4:c7:ec:00:b3:3f:b5:59:23:c6:84:b9:a6:ce:10:cd:
74:f6:a1:6e:21:c5:a5:e3:37:b8:06:7d:fc:38:1e:c0:af:6c:
85:95:c7:9b:08:d1:93:a2:1a:c6:ee:ce:6d:50:91:fa:25:5b:
bc:5e:1f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org