Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vEtbcvEbvTD_i_dXsP5QPyyvtzk.roa
File: vEtbcvEbvTD_i_dXsP5QPyyvtzk.roa (raw, json)
Hash identifier: 6ijqCkKhNZztCrf9wPJ2m9eBkIX5y7jyclifcI34hms=
Subject key identifier: BC:4B:5B:72:F1:1B:BD:30:FF:8B:F7:57:B0:FE:50:3F:2C:AF:B7:39
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B427FCA
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vEtbcvEbvTD_i_dXsP5QPyyvtzk.roa
Signing time: Wed 08 Jun 2022 12:07:03 +0000
ROA not before: Wed 08 Jun 2022 12:07:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.248.0/21 maxlen: 24
89.116.140.0/24 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188907466 (0xb427fca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 8 12:07:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc4b5b72f11bbd30ff8bf757b0fe503f2cafb739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:31:a5:e0:75:bf:2a:57:85:72:c5:12:55:
29:53:35:c5:0e:5b:05:12:89:c6:e0:32:07:4e:e7:
8f:bb:7f:2c:d8:1f:d2:da:48:a8:27:96:d5:24:3f:
dd:c1:96:80:04:b3:6a:3f:d5:46:b2:87:3e:38:d0:
34:b1:de:52:96:f6:24:c6:aa:5e:41:f3:9b:0e:47:
58:f3:37:27:16:da:eb:39:20:24:fb:5a:ff:82:58:
56:57:47:0e:1e:d7:42:f6:d2:aa:08:af:43:dc:eb:
29:10:9b:c2:df:71:b6:b7:dd:35:fd:8a:47:3d:bb:
84:09:81:94:74:ee:4d:78:d6:cd:b7:92:06:09:ab:
1e:01:e6:01:28:54:f5:4a:0b:ad:d7:8b:b5:fa:25:
dd:b9:75:5c:37:3f:91:ca:b4:54:c8:95:65:05:53:
f1:ea:48:9d:c3:31:75:75:48:ca:25:3b:c5:2c:0a:
d8:50:c5:24:f6:85:12:a7:9b:7d:84:0b:59:05:0e:
1a:16:8c:5c:70:db:af:8c:18:e8:42:f0:fc:63:04:
61:be:d9:c2:b7:96:44:54:e3:64:d1:72:d5:fd:c0:
76:32:44:7b:80:f5:a2:e6:b1:d9:7a:2d:ef:be:d2:
c9:1a:1f:b8:d6:2d:a6:b6:06:c3:27:7a:eb:77:36:
d9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4B:5B:72:F1:1B:BD:30:FF:8B:F7:57:B0:FE:50:3F:2C:AF:B7:39
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vEtbcvEbvTD_i_dXsP5QPyyvtzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.200.0/24
84.46.240.0/20
86.38.235.0/24
86.38.238.0/24
86.38.248.0/21
89.116.140.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9f:ef:b7:38:dd:91:56:c8:56:a3:6f:9d:7f:c2:72:1c:17:
17:a4:bb:c1:ef:0c:91:ed:0c:e5:aa:b9:1f:93:fe:59:ee:a6:
ef:a4:6f:a8:eb:c8:87:52:0c:11:a9:50:e9:57:c4:12:fc:5c:
9b:25:d1:75:f6:b8:8e:dd:83:b7:35:55:e6:7d:19:82:f5:2f:
8b:98:83:73:a8:f7:30:e7:1b:c1:ac:9e:f8:fa:24:a6:b4:c9:
5c:1f:52:85:50:8a:41:93:92:5a:ec:3a:0d:bb:ec:42:07:a6:
77:a7:39:f5:a0:2b:6d:f3:75:67:e4:35:6f:c9:b7:a8:bc:b2:
37:c0:73:71:7b:e0:5e:2c:f6:89:df:2a:16:3a:09:33:6d:f1:
d2:8d:db:60:66:65:03:d3:5b:99:9a:e9:23:dd:6c:72:16:9a:
b3:46:d9:53:59:73:58:68:27:3d:16:b7:17:7d:cd:50:c4:e0:
b9:5a:c2:e8:63:92:66:5f:43:4b:2c:36:82:f5:ae:c8:69:35:
85:43:2b:52:57:33:a1:3c:4d:8a:48:42:c9:c8:3d:83:b3:8a:
37:73:a9:1c:ca:5b:5b:cf:70:36:ae:44:76:a6:93:d3:a3:d9:
eb:cc:70:31:29:fb:43:f5:46:8d:bc:3b:e0:45:34:0d:8f:22:
05:ce:d4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org