Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vO9JLlhMVWT-NkmHvpRRiTvn9o8.roa
File: vO9JLlhMVWT-NkmHvpRRiTvn9o8.roa (raw, json)
Hash identifier: +stdIwRybdKwrh/9oK4/fjxhEjMbioic0q8nK/0V1qo=
Subject key identifier: BC:EF:49:2E:58:4C:55:64:FE:36:49:87:BE:94:51:89:3B:E7:F6:8F
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01841AB0992245873EEAECB5D46E56E00E9B
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vO9JLlhMVWT-NkmHvpRRiTvn9o8.roa
Signing time: Thu 27 Oct 2022 18:24:51 +0000
ROA not before: Thu 27 Oct 2022 18:24:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.37.0/24 maxlen: 24
86.38.248.0/21 maxlen: 24
86.38.156.0/24 maxlen: 24
89.116.248.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.116.64.0/22 maxlen: 24
89.117.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1a:b0:99:22:45:87:3e:ea:ec:b5:d4:6e:56:e0:0e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 27 18:24:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcef492e584c5564fe364987be9451893be7f68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d0:a5:f7:f7:6d:29:18:e0:d3:84:66:2b:f5:
15:f8:07:85:8f:27:79:bf:0f:14:f1:33:de:32:3b:
0d:dc:4f:a8:91:2d:02:36:b4:ac:cb:74:f7:95:d0:
16:b2:38:ea:32:03:fd:b1:82:af:1c:71:dd:7b:a2:
14:4f:30:a7:8b:77:4c:bc:79:be:97:31:d8:c3:65:
21:ca:c1:27:90:5c:f8:ac:4a:83:42:b1:6a:59:bc:
4c:27:b5:f7:2e:67:3c:f4:fb:18:cd:66:b1:1f:d4:
1b:1a:18:9d:71:46:ed:b6:1c:fc:46:7a:b7:30:b4:
1d:3b:6a:88:b1:b8:7c:ec:c0:e5:ad:03:1a:c4:fc:
d7:7c:6e:1a:4f:e1:58:8b:a3:ad:3e:a2:4f:4d:68:
57:b4:34:1c:bc:44:95:ef:55:bb:c1:57:7b:61:14:
23:08:53:1e:9b:70:a6:1d:14:2e:bf:a5:34:f4:7b:
28:22:e3:2f:b5:72:d5:bd:65:fa:cb:68:5d:4d:4b:
c5:7c:b5:50:54:ef:b8:53:cc:d4:4f:ac:4a:ab:42:
73:6f:34:a5:bb:42:d4:a7:6c:ce:60:2e:db:9c:36:
c6:33:d6:31:f9:4f:7c:3f:b6:ab:a1:01:5f:e2:a5:
30:f4:97:37:06:f4:ca:76:00:ad:b9:27:9d:04:a4:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EF:49:2E:58:4C:55:64:FE:36:49:87:BE:94:51:89:3B:E7:F6:8F
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vO9JLlhMVWT-NkmHvpRRiTvn9o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.240.0/20
86.38.37.0/24
86.38.156.0/24
86.38.177.0/24
86.38.248.0/21
89.116.64.0/22
89.116.248.0/24
89.117.172.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:ce:f9:de:04:18:91:d3:f2:73:7b:a2:48:42:ef:60:4d:32:
64:92:04:0f:87:08:3c:e8:33:19:0c:ff:b7:a1:37:66:8a:5f:
8f:cb:30:c5:33:05:b6:37:75:66:21:9a:de:da:d2:aa:78:90:
f4:62:3e:ca:54:ab:45:ba:c5:85:20:40:3f:9d:03:7b:c0:38:
87:ee:44:da:88:a8:00:11:26:fa:8f:3b:72:72:97:ed:f3:63:
a2:57:ff:45:5c:70:61:0f:a1:45:53:0c:aa:81:9c:c4:54:77:
08:74:c2:a0:1d:bd:64:93:3e:2c:ef:c7:e4:c2:12:d9:7a:97:
0c:a8:ff:0e:d7:99:cc:c2:ec:c7:3b:10:86:d0:7a:1c:7d:58:
5f:3f:41:70:0c:8d:fd:c5:3a:f9:30:5b:25:6b:64:3c:7b:ff:
2d:3e:78:1f:ff:19:70:4a:4d:38:10:db:60:94:0a:98:bf:83:
67:24:c6:b2:60:1d:ec:03:56:c8:32:9d:2b:fe:f8:46:48:be:
a1:61:cd:a1:64:9f:28:cf:d3:68:b8:3d:ec:7b:45:0c:6b:79:
1d:f1:74:b0:0f:14:35:af:6d:71:d6:7b:bf:eb:0b:d7:ff:10:
38:7d:c9:47:8a:57:fe:ae:5d:9c:c7:7a:aa:2a:f8:dc:b9:94:
98:67:69:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org