Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/qUH_W9WBjucNC9lfN0A30vPXEFU.roa
File: qUH_W9WBjucNC9lfN0A30vPXEFU.roa (raw, json)
Hash identifier: NVf6i5YGUbMPtMIfLVkyzFkgjLp92DQ0Iv8ykrTFZ0A=
Subject key identifier: A9:41:FF:5B:D5:81:8E:E7:0D:0B:D9:5F:37:40:37:D2:F3:D7:10:55
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01841AB0989A8CE06FABAD85AEC441656712
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/qUH_W9WBjucNC9lfN0A30vPXEFU.roa
Signing time: Thu 27 Oct 2022 18:24:51 +0000
ROA not before: Thu 27 Oct 2022 18:24:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.115.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:b0:98:9a:8c:e0:6f:ab:ad:85:ae:c4:41:65:67:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 27 18:24:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a941ff5bd5818ee70d0bd95f374037d2f3d71055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:5d:e6:ec:ec:73:72:0e:c2:de:14:2e:24:
41:3a:1c:09:dd:de:05:97:e9:ca:cd:3d:db:50:77:
4d:ef:68:cc:69:49:32:44:20:7b:fe:f2:9c:9a:48:
f1:99:3e:81:48:f2:7c:bf:fd:fa:9c:76:a1:98:86:
c0:8b:36:ef:b6:42:e2:a3:d4:62:d3:39:ff:37:4e:
91:5b:ae:b6:24:f2:8a:60:39:ba:e8:4c:2c:7d:7d:
5d:e6:77:54:92:63:be:f9:a4:c4:9b:1b:62:b9:76:
58:99:81:d9:39:a1:e9:13:39:07:e5:b9:49:e3:57:
24:79:26:32:87:fc:9b:d3:86:6e:54:98:b8:da:91:
1b:39:6d:4a:bb:4f:ed:03:3d:ca:9b:0b:b4:77:2c:
dc:92:9b:65:93:92:28:ac:fd:c1:bb:d5:58:22:7a:
28:e8:ea:88:e7:6f:fb:d6:49:10:71:43:0c:26:9c:
e3:e7:e7:62:c0:92:9f:83:66:cc:f5:7f:82:d8:86:
6b:ab:5b:5c:08:c0:a4:d6:cd:10:63:ec:ba:80:8e:
c5:69:ea:c0:26:14:cc:98:c4:60:56:fc:4a:a6:c7:
9d:f6:46:ca:86:2f:f0:43:15:9c:f9:c5:e5:57:d5:
da:7a:40:0c:5f:af:57:5b:e9:29:d4:4b:da:8a:08:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:41:FF:5B:D5:81:8E:E7:0D:0B:D9:5F:37:40:37:D2:F3:D7:10:55
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/qUH_W9WBjucNC9lfN0A30vPXEFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.202.0/23
89.116.70.0/24
89.116.99.0/24
89.116.112.0/23
89.116.115.0/24
89.116.135.0/24
89.116.156.0/24
89.116.161.0/24
89.116.171.0/24
89.116.175.0/24
89.116.177.0/24
89.116.193.0/24
89.116.203.0/24
89.116.208.0/24
89.116.210.0/23
89.116.218.0/24
89.116.220.0/24
89.116.223.0/24
89.116.233.0/24
89.116.252.0/24
89.117.28.0-89.117.33.255
89.117.68.0/24
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.109.0/24
89.117.129.0-89.117.130.255
89.117.132.0/22
89.117.142.0/23
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3a:cc:66:6d:1e:2e:4d:17:1c:74:fd:8c:0f:50:f0:7a:6e:
c8:71:ef:b8:6e:23:4f:a0:38:24:32:60:54:b2:2f:4a:24:94:
76:40:8b:54:6a:5f:56:15:80:dd:db:e6:53:8b:1c:f9:c2:f7:
8a:30:0a:4a:39:05:c2:62:cb:9b:9c:1c:8a:c8:0c:44:5d:00:
2d:44:70:3d:c8:b4:9e:cb:fd:c0:af:16:b9:13:de:27:f4:ca:
88:25:46:29:ab:d1:67:ff:34:3f:07:ec:4b:47:a4:80:85:c9:
73:bf:8b:23:42:49:00:9e:66:b5:c2:0c:e1:d3:fa:3e:d4:52:
c3:a4:53:e1:ae:8b:33:3e:2c:fe:b4:f7:ca:61:cf:c3:ad:12:
f5:bf:bd:6c:95:2a:22:c9:1e:7a:e8:93:42:a7:f5:b4:d7:aa:
48:7b:61:f8:4a:30:d7:e6:78:55:5f:39:12:dd:68:ae:50:9d:
9c:3e:17:a1:d4:a0:26:cb:38:cc:24:3d:2f:cf:48:ec:68:3d:
1e:a0:80:9d:d2:c2:62:b2:b2:59:da:ca:1b:49:05:ed:74:99:
a8:b5:03:52:68:96:3e:e8:9c:3a:cc:32:e7:09:c8:1d:a2:0c:
4d:24:4d:16:fa:ca:0e:00:87:7f:3c:7b:13:dd:44:c3:ed:c1:
ff:3d:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org