Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pFew63iEWvLKgn_EsHoWIrdp2AQ.roa
File: pFew63iEWvLKgn_EsHoWIrdp2AQ.roa (raw, json)
Hash identifier: O2KJoC5hXBwPJCkMh9Xh8wmP7fq9ZQgfL1fxk0S9P30=
Subject key identifier: A4:57:B0:EB:78:84:5A:F2:CA:82:7F:C4:B0:7A:16:22:B7:69:D8:04
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 018418B04484B797114BF85129DEFA8386A7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pFew63iEWvLKgn_EsHoWIrdp2AQ.roa
Signing time: Thu 27 Oct 2022 09:05:15 +0000
ROA not before: Thu 27 Oct 2022 09:05:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 84.46.170.0/24 maxlen: 24
89.117.101.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
89.117.35.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
86.38.214.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:b0:44:84:b7:97:11:4b:f8:51:29:de:fa:83:86:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 27 09:05:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a457b0eb78845af2ca827fc4b07a1622b769d804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:fb:a9:5e:42:08:01:3e:89:3d:e0:f4:a2:
7b:f9:12:35:82:12:5d:4c:2c:b2:7d:57:af:45:e5:
50:1b:69:6c:41:16:ab:c0:44:d5:c4:af:c0:69:1c:
75:64:40:65:69:a8:07:1f:28:da:53:45:d3:23:37:
ea:42:45:a6:85:ec:7b:b7:06:a6:fe:25:0d:e1:ff:
b4:e5:22:20:f0:77:3a:d4:99:b2:55:28:c7:1b:0e:
44:71:d7:a6:e9:83:8b:cf:f8:c3:32:11:dc:17:18:
25:67:f9:23:a2:c7:e1:f2:a8:2f:2a:8f:a3:1b:11:
17:f8:36:60:a3:35:1d:6a:d7:d3:7f:01:f3:57:3b:
10:94:bb:9b:98:8f:03:01:25:f5:da:43:42:58:3f:
bc:6f:70:66:71:f3:b0:0a:8b:3b:ce:80:88:f0:13:
15:2c:83:0d:39:c3:ac:e4:cb:32:b2:83:59:b6:4d:
15:e6:4c:74:e4:b9:b4:ec:12:b6:93:42:8b:1f:ef:
7a:38:4c:67:9d:71:40:f2:eb:26:78:a2:2a:4e:02:
a7:e6:93:17:07:0c:cf:21:f9:15:f4:74:3f:b3:03:
37:cf:17:e6:4c:7b:3c:9c:be:bb:91:76:1f:33:70:
12:48:c1:2b:35:0e:12:c4:89:20:62:38:66:18:52:
94:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:57:B0:EB:78:84:5A:F2:CA:82:7F:C4:B0:7A:16:22:B7:69:D8:04
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pFew63iEWvLKgn_EsHoWIrdp2AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/24
86.38.177.0/24
86.38.214.0/24
89.116.102.0/24
89.116.158.0/24
89.116.163.0/24
89.116.190.0/24
89.117.27.0/24
89.117.35.0/24
89.117.101.0/24
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:1e:28:69:03:5a:14:4e:2e:6a:36:49:d5:18:70:7b:2a:66:
4e:d0:77:8d:f6:29:85:95:a1:5b:b9:ac:34:71:7b:2c:93:d7:
7e:46:d8:9f:8f:80:10:a7:72:5e:42:a3:e9:cb:58:68:25:3b:
83:02:8a:e6:09:49:c8:09:1e:db:49:40:5c:85:93:65:3b:e1:
25:12:ae:bb:a9:06:98:0e:0e:df:23:55:59:1c:db:b5:18:29:
ec:47:c2:dc:36:47:27:f8:21:e6:c8:8a:f9:ce:40:f6:92:21:
03:9b:07:88:7a:71:31:0e:29:71:9d:6f:2e:0d:f3:a1:39:82:
e2:3c:eb:10:f3:b8:2e:3d:da:bb:49:f8:d7:93:87:50:7e:d7:
a2:59:b8:93:20:d2:c9:b1:e7:de:2f:85:39:81:9e:d7:29:bd:
4c:a4:2e:f4:33:25:7f:a0:80:f0:3a:4e:ed:9d:89:a0:bc:86:
12:30:6b:0d:32:2c:d3:69:e7:d7:80:71:30:56:09:5f:46:fd:
86:64:82:a4:e3:13:92:10:64:7c:e1:68:36:fb:5d:4e:12:98:
9b:69:dc:53:5d:14:4f:50:66:de:1b:59:94:ef:47:a8:2b:ee:
b6:8e:15:08:68:ce:08:59:fa:fb:86:2e:d8:ca:e2:d7:06:06:
40:ea:47:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org