Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/st63pW_qsiSiGmBpE8RdhQbvUjY.roa
File: st63pW_qsiSiGmBpE8RdhQbvUjY.roa (raw, json)
Hash identifier: uHUYMdDGzMp65cvmt1m7LA4ir6dIQ5gyNgCvdABr8M0=
Subject key identifier: B2:DE:B7:A5:6F:EA:B2:24:A2:1A:60:69:13:C4:5D:85:06:EF:52:36
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 018314ED5CEC0896396500D47FB071A7DDDB
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/st63pW_qsiSiGmBpE8RdhQbvUjY.roa
Signing time: Tue 06 Sep 2022 22:30:43 +0000
ROA not before: Tue 06 Sep 2022 22:30:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.116.115.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
89.116.125.0/24 maxlen: 24
89.117.94.0/23 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:14:ed:5c:ec:08:96:39:65:00:d4:7f:b0:71:a7:dd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 6 22:30:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2deb7a56feab224a21a606913c45d8506ef5236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:eb:c7:cd:8a:5a:5f:b9:3f:a1:87:42:02:
33:ad:cb:13:b9:32:e2:29:4b:f7:2a:af:48:6c:b3:
56:00:c4:a1:34:12:57:98:a8:19:b6:03:38:9c:73:
b5:79:44:5f:a1:6e:b0:87:7a:bf:fc:ac:a6:48:98:
ed:96:bb:3a:6b:cd:6b:59:e8:4a:9e:a3:64:a9:c6:
41:a1:8c:ac:0b:c8:71:9e:35:40:f4:55:13:b4:d1:
98:3b:53:54:3d:2f:bc:4e:3a:da:f5:b3:c9:29:9f:
96:65:68:99:ad:68:d3:f0:9d:4e:0f:75:e2:c9:7d:
9e:22:ed:a8:55:e0:5c:69:4f:d7:9e:a5:67:67:11:
c3:96:6c:41:12:77:8b:b7:b9:96:c1:5d:0f:00:28:
cc:ff:7a:60:85:21:88:b4:d9:fe:8c:c5:be:47:7f:
65:bc:b3:1a:cb:2d:09:6e:f7:dd:89:e0:c4:11:e5:
58:64:a1:cb:4a:91:5c:7f:6e:dc:66:1b:26:c5:51:
83:2a:cd:5a:9a:fe:c8:76:58:82:e6:09:d3:81:d9:
5b:fe:9c:4a:81:0d:d2:a7:8f:d2:b5:ee:48:3b:b7:
a8:2f:be:cf:bb:6e:93:bb:00:d8:e2:c7:e7:b7:fc:
8f:30:64:a8:c9:87:91:ed:5a:0e:10:ae:4f:3f:c6:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DE:B7:A5:6F:EA:B2:24:A2:1A:60:69:13:C4:5D:85:06:EF:52:36
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/st63pW_qsiSiGmBpE8RdhQbvUjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.171.0/24
86.38.7.0/24
86.38.37.0/24
86.38.177.0/24
86.38.200.0/24
86.38.235.0/24
89.116.56.0/24
89.116.100.0/24
89.116.115.0/24
89.116.125.0/24
89.117.27.0/24
89.117.94.0/23
89.117.109.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a0:9f:d3:84:ef:8e:2a:ff:ea:07:9a:57:f2:98:9d:3d:47:
21:54:22:fd:aa:d7:5b:3f:d8:7e:b2:00:b4:33:51:05:25:bb:
fc:cb:95:c0:89:6f:3a:17:40:d6:89:fb:fe:0b:1a:6a:d4:16:
66:46:86:1b:98:b5:51:11:7d:f5:44:a9:12:86:d3:d1:32:cf:
6b:72:17:7c:7a:77:1a:b5:cf:3c:2c:ee:85:c2:3f:8c:5d:23:
02:44:7a:97:2d:45:9f:3d:94:fe:6d:79:73:82:79:fd:1b:75:
92:3b:df:63:ae:84:d7:98:59:c6:3b:e5:3d:5a:79:55:54:0c:
ee:d4:ed:12:d5:34:d6:0f:b2:c8:5b:7b:da:f5:ad:ff:dc:53:
fd:f3:f9:76:fd:19:19:02:93:c5:37:b8:26:8e:84:47:87:3c:
d4:9a:40:86:d0:9b:b9:56:6f:93:2d:eb:67:15:66:c2:3c:36:
fb:c8:0a:06:b4:6a:75:3d:a9:8a:cb:e4:b8:0a:7e:9a:b6:2e:
c5:fa:a8:ea:93:4c:cf:45:db:dc:a8:a7:9a:bf:48:a2:7e:d3:
5e:53:d0:33:89:b9:93:00:83:fe:59:ea:88:1b:95:cc:89:4b:
3f:d6:60:bc:3f:e0:87:34:13:f4:bd:39:3b:d1:98:ea:6c:1a:
c7:ed:ae:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org