Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pcffJt9dzCOkkUJaEcV97UwebEI.roa
File: pcffJt9dzCOkkUJaEcV97UwebEI.roa (raw, json)
Hash identifier: Kw3NoE2Myf4F2KGGxWkJg8L5RtIRGJvNZ5Tc//sKrqI=
Subject key identifier: A5:C7:DF:26:DF:5D:CC:23:A4:91:42:5A:11:C5:7D:ED:4C:1E:6C:42
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B69EC6F
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pcffJt9dzCOkkUJaEcV97UwebEI.roa
Signing time: Wed 15 Jun 2022 12:49:44 +0000
ROA not before: Wed 15 Jun 2022 12:49:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 89.117.70.0/23 maxlen: 24
89.117.226.0/23 maxlen: 24
86.38.189.0/24 maxlen: 24
89.117.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191491183 (0xb69ec6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 15 12:49:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5c7df26df5dcc23a491425a11c57ded4c1e6c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:e8:80:4e:4a:a0:75:95:79:cb:c2:27:3c:
fa:c4:ba:c1:f1:3e:5a:18:ba:ec:66:6e:84:45:7f:
47:41:09:4c:99:5b:74:d5:2f:31:5b:95:8b:eb:c5:
d5:3a:e6:1f:09:9a:f7:4d:2f:72:f1:32:0e:e8:55:
63:7b:bd:4b:12:e4:b6:a3:34:bf:56:29:10:7f:76:
51:36:e9:97:48:b4:d3:56:93:f7:c5:cc:fe:7e:25:
b4:7c:aa:99:0a:2b:0f:1a:07:44:c8:ba:e0:88:26:
c6:eb:ac:44:e6:b8:59:3c:c8:6d:25:64:92:eb:e3:
2c:b3:f4:e3:7c:5e:b5:cf:9c:8d:36:96:f9:bd:fc:
fc:4e:83:fd:3c:0f:ce:f7:6a:04:d4:54:e1:80:6c:
56:d2:47:ad:bf:1f:41:3e:7a:e8:0b:6f:23:d3:08:
8d:f2:62:81:0c:d9:16:4f:bd:8d:6e:cf:ea:bc:d9:
c7:94:51:52:ec:a2:f3:0c:d1:94:e6:5b:21:86:98:
c3:9c:9a:d1:dd:40:ec:2d:30:b8:a1:9b:0f:b8:d3:
c4:b4:89:ae:25:11:26:fe:6d:87:b8:ca:43:a5:af:
59:b6:56:42:0c:08:fc:fb:a3:3a:85:5e:29:87:b1:
08:25:cf:69:15:5f:83:fd:b7:60:c3:e2:63:57:c7:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C7:DF:26:DF:5D:CC:23:A4:91:42:5A:11:C5:7D:ED:4C:1E:6C:42
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pcffJt9dzCOkkUJaEcV97UwebEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.189.0/24
89.117.70.0/23
89.117.158.0/23
89.117.226.0/23
Signature Algorithm: sha256WithRSAEncryption
68:02:7b:9f:95:b0:4b:32:a1:8a:85:48:52:0d:ef:b5:49:63:
5d:32:95:e9:4e:23:cb:1c:5a:0f:af:bd:82:91:80:01:71:22:
71:93:a1:e2:1f:e8:c1:ec:76:c6:6f:21:10:a4:57:81:09:71:
44:07:86:74:bb:5f:1f:71:51:67:e9:33:0e:cd:77:02:ca:e7:
78:bb:bc:8a:c2:7e:eb:ae:f3:a0:5f:94:13:8f:52:c9:95:33:
30:17:ab:8c:e1:83:30:07:c6:02:1e:2c:ce:5b:b0:6f:25:e9:
46:be:c5:60:6d:af:82:73:3a:28:74:b8:ee:67:01:5e:12:58:
d6:ac:a0:d8:83:35:f8:5e:44:70:54:1e:82:12:ed:f9:1e:f7:
ee:b8:a8:ca:78:22:3c:ed:47:52:de:d5:59:58:be:ad:85:c6:
41:11:6f:21:ca:15:a2:65:c8:56:f7:bc:47:7b:2f:d3:50:de:
9b:cf:25:69:94:31:e2:1b:8d:1f:86:ae:8f:2f:67:62:50:8a:
de:e8:8e:d8:86:0e:5e:ce:c1:4b:f0:f1:4d:25:d2:4c:f0:c9:
94:39:b6:0f:82:90:9e:1a:f2:16:c6:fa:48:4c:c8:b3:cb:df:
b4:7d:b9:46:ce:d9:20:83:6d:a1:25:ae:bd:86:6c:bc:31:15:
0c:60:ac:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org