Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pJAjeTyXRhQKrzypE0JFbI1Rr2s.roa
File: pJAjeTyXRhQKrzypE0JFbI1Rr2s.roa (raw, json)
Hash identifier: wAEri5Y8FBvLBZfn16PAIRs9xsJPgmzlAhcT4cdkOGE=
Subject key identifier: A4:90:23:79:3C:97:46:14:0A:AF:3C:A9:13:42:45:6C:8D:51:AF:6B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0995077D
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pJAjeTyXRhQKrzypE0JFbI1Rr2s.roa
Signing time: Wed 16 Feb 2022 14:10:57 +0000
ROA not before: Wed 16 Feb 2022 14:10:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 89.117.118.0/24 maxlen: 24
89.117.124.0/24 maxlen: 24
89.116.168.0/24 maxlen: 24
89.117.136.0/24 maxlen: 24
89.117.38.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160761725 (0x995077d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 16 14:10:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a49023793c9746140aaf3ca91342456c8d51af6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:1c:dd:8a:4e:2d:92:91:16:e4:88:f7:33:
22:9d:ee:4c:4b:56:17:42:a3:b7:ad:4c:90:ce:78:
55:8d:ca:39:74:e4:2d:49:0e:ae:31:45:b3:56:12:
01:f3:3a:7e:16:f3:6b:37:31:64:ac:d3:d7:e3:4f:
ce:6b:0c:3a:58:b5:bf:81:92:20:0b:d7:7a:ee:fc:
9f:02:77:96:0f:5b:e2:00:33:93:27:ae:bc:72:76:
00:27:a3:c1:17:d5:4e:b2:c5:d0:d4:8e:71:3b:bf:
44:5a:63:8e:6e:c2:c7:d8:d0:8c:ab:1b:1d:61:ba:
1c:2f:37:8b:f2:a8:8e:85:46:a6:8e:ab:e1:74:47:
47:82:98:98:c8:01:88:a8:f5:c2:db:0a:a3:94:bd:
2c:63:83:a6:f2:bf:e3:6b:d7:3b:cf:0f:6e:a8:d9:
5b:c7:a9:20:05:1c:12:84:fc:2f:c8:fe:49:c8:f6:
e4:b9:53:e1:c4:7d:aa:de:a5:b0:b5:3d:83:b3:f0:
a6:d1:cc:c2:b1:5f:76:c7:8c:36:c8:eb:81:b4:34:
af:df:74:d8:56:a3:24:d0:c9:66:a1:96:8a:dd:61:
9e:de:25:ca:9d:ee:e6:a0:ea:e3:a4:61:52:6d:25:
1b:c4:9d:ff:a9:27:28:97:19:10:3d:59:36:16:51:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:23:79:3C:97:46:14:0A:AF:3C:A9:13:42:45:6C:8D:51:AF:6B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pJAjeTyXRhQKrzypE0JFbI1Rr2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.7.0/24
89.116.96.0/24
89.116.168.0/24
89.117.38.0/24
89.117.118.0/24
89.117.124.0/24
89.117.136.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7f:9e:b1:9b:7f:82:d7:79:b4:9c:95:45:a3:cb:bc:57:fa:
33:e6:a9:d8:5d:64:a1:d8:f3:11:d3:6d:a3:f4:b8:21:ac:42:
09:5f:8e:7e:e0:1a:c0:24:b0:f5:47:85:96:bf:f3:bf:43:f3:
7e:9e:80:2c:bb:5a:62:5b:a5:33:20:5e:9e:ce:d7:ac:19:10:
36:4f:be:fa:7a:59:a2:be:ea:1e:c4:41:4a:59:16:7b:c6:a5:
d6:11:73:fc:f4:9b:7a:f2:20:49:5c:a4:81:53:24:c9:3f:8a:
9f:2b:18:e1:85:93:02:a4:92:73:39:f2:a7:ec:80:99:b4:8f:
d3:cb:ac:dc:ad:26:01:31:c4:93:ec:39:8b:33:d4:87:42:e5:
02:4d:80:4e:41:dc:7f:5e:76:95:81:57:38:69:b6:cd:9a:58:
5b:73:b7:5e:cc:7f:52:97:db:e3:34:b3:e2:1b:0f:d1:a4:86:
9f:88:9b:ac:f1:8b:19:09:0e:fd:65:5f:7a:1f:d0:d3:a5:97:
15:94:b7:5f:2f:e3:e9:96:d3:4c:94:13:88:50:20:df:a1:1a:
22:da:8a:db:1c:a9:61:92:d7:8d:8f:44:33:19:f7:fc:f2:0f:
7a:00:27:61:f4:91:13:d2:23:1e:3e:4e:3b:b2:a8:e9:84:f1:
c2:d2:a1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org