Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/rGoxWMlL-k8HvgZO4yATaR3OulU.roa
File: rGoxWMlL-k8HvgZO4yATaR3OulU.roa (raw, json)
Hash identifier: ICFiuNpAdfcse/QOeN5bTEF/rIGowZGT4u6rADK1rJk=
Subject key identifier: AC:6A:31:58:C9:4B:FA:4F:07:BE:06:4E:E3:20:13:69:1D:CE:BA:55
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A5E2A39
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/rGoxWMlL-k8HvgZO4yATaR3OulU.roa
Signing time: Sun 17 Apr 2022 08:33:58 +0000
ROA not before: Sun 17 Apr 2022 08:33:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 89.117.109.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
82.140.182.0/24 maxlen: 24
86.38.4.0/23 maxlen: 24
89.117.48.0/20 maxlen: 24
86.38.175.0/24 maxlen: 24
86.38.180.0/23 maxlen: 24
89.117.120.0/22 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.242.0/23 maxlen: 24
86.38.241.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
86.38.189.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.214.0/24 maxlen: 24
86.38.216.0/22 maxlen: 24
86.38.220.0/23 maxlen: 24
86.38.225.0/24 maxlen: 24
86.38.226.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
89.117.11.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173943353 (0xa5e2a39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 17 08:33:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac6a3158c94bfa4f07be064ee32013691dceba55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ab:48:bd:66:a5:27:f8:83:04:f4:60:49:8b:
4f:30:05:ff:35:01:94:26:48:94:7c:74:57:e3:12:
8f:42:4e:05:fd:a6:3d:12:b7:4d:50:be:62:c0:be:
e9:f7:57:56:e0:08:fc:32:ce:4f:6a:2d:63:a1:97:
ce:7b:a5:b2:dc:04:81:6e:55:ae:1f:83:e9:6c:0e:
2c:14:27:5f:e5:c6:8e:6b:37:45:be:0e:dd:86:d4:
e1:af:f8:65:fa:a7:bc:16:69:6a:e4:59:38:3b:03:
43:a0:a5:32:08:27:6c:7d:14:09:07:57:9b:7a:83:
71:c7:da:50:aa:39:6c:8f:9e:4e:d3:2a:cf:7a:57:
13:b7:15:91:e9:ee:c7:f5:4b:5f:dc:fe:31:15:d1:
4a:53:26:a1:15:a5:9a:c5:64:c7:09:04:18:4d:f7:
3a:6b:0b:d9:b4:9c:72:22:3e:39:42:62:22:43:06:
24:06:27:ce:fd:6b:5a:f0:4f:9b:18:e6:cb:93:02:
ae:64:8a:76:cd:04:61:38:8f:03:98:b8:6d:0f:d5:
7f:78:2a:39:ca:49:77:6e:c1:d7:d1:f6:a4:f0:e4:
89:71:4c:bb:10:8d:10:3c:0a:84:59:17:ee:66:e6:
5e:77:4e:d4:5f:59:fb:ae:70:c7:5a:e1:59:dc:0a:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6A:31:58:C9:4B:FA:4F:07:BE:06:4E:E3:20:13:69:1D:CE:BA:55
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/rGoxWMlL-k8HvgZO4yATaR3OulU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/23
84.46.200.0/24
86.38.4.0/23
86.38.175.0/24
86.38.180.0/23
86.38.189.0-86.38.190.255
86.38.200.0/24
86.38.214.0/24
86.38.216.0-86.38.221.255
86.38.225.0-86.38.226.255
86.38.238.0/24
86.38.241.0-86.38.243.255
89.116.56.0/24
89.116.96.0/24
89.116.135.0/24
89.116.156.0/24
89.116.158.0/24
89.116.175.0/24
89.116.177.0/24
89.116.218.0/24
89.116.242.0/23
89.116.246.0/23
89.117.11.0/24
89.117.48.0/20
89.117.109.0/24
89.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
75:28:b0:2a:81:af:c4:b0:55:4d:f3:2e:86:05:05:14:67:13:
3b:79:5f:06:8d:9e:21:e6:c1:5d:b5:d7:79:05:a6:f8:b0:46:
a0:32:14:ed:38:e8:df:d2:8c:d9:ef:e8:50:0e:9b:dd:cf:0b:
90:89:ce:66:0e:40:47:05:df:2d:a9:ce:7c:1a:54:15:8d:c3:
44:88:ca:2a:38:56:3d:63:d4:a8:08:76:30:a0:43:ae:d3:73:
ee:f0:4a:8e:dd:c0:5a:a8:c9:45:86:99:54:9e:b9:d1:48:54:
b2:51:da:ea:89:b7:ad:ce:fe:d7:9c:ff:2b:10:db:ae:09:3f:
f0:55:15:64:98:e0:dd:bd:ac:d2:10:f0:20:34:ee:b3:c2:88:
f6:48:27:7b:7f:b0:e2:f5:02:c3:9c:eb:74:74:b7:80:b3:8b:
6d:6e:5c:70:cd:56:83:04:9a:98:3a:aa:d9:9f:70:5c:cc:7c:
a3:dd:51:af:05:86:6d:66:43:75:e4:36:16:07:f3:03:57:78:
bb:59:d1:94:a4:d9:1a:91:e1:a2:c7:31:7f:b2:9d:9e:18:55:
d0:93:bb:f1:e2:13:9f:84:17:5e:0a:12:9c:c9:f0:b6:aa:e0:
dc:81:e8:48:7c:a2:71:0f:c4:b5:50:ce:8f:b4:bf:aa:0c:90:
28:db:ce:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:08 2025 by rpki-client