Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vegU68-fD-X6qaYxnaWt2P7xQCs.roa
File: vegU68-fD-X6qaYxnaWt2P7xQCs.roa (raw, json)
Hash identifier: BPg43aFgKLCR0vO/ymPGhrxV7ciEdP93fPpstL1Ly7Q=
Subject key identifier: BD:E8:14:EB:CF:9F:0F:E5:FA:A9:A6:31:9D:A5:AD:D8:FE:F1:40:2B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0BB5C8AA
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vegU68-fD-X6qaYxnaWt2P7xQCs.roa
Signing time: Sat 02 Jul 2022 21:02:25 +0000
ROA not before: Sat 02 Jul 2022 21:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 86.38.241.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.245.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196462762 (0xbb5c8aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 2 21:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bde814ebcf9f0fe5faa9a6319da5add8fef1402b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:9e:25:04:49:44:d8:2b:81:77:1d:27:00:
d3:f9:80:8c:59:89:6b:c1:02:bc:7f:ad:27:33:46:
48:0d:18:a3:4b:e8:e8:dc:be:92:c4:e0:79:2c:86:
2e:03:fd:1c:e6:aa:e3:4c:46:a6:43:93:8b:77:c7:
6d:51:c0:65:85:b3:1d:f7:d4:17:f2:bc:f1:f9:e5:
2c:50:2a:1c:a9:7a:50:25:e4:fa:4f:82:db:9b:14:
c1:d0:aa:92:d6:44:a7:1e:2a:26:a6:12:af:e6:19:
5c:eb:7a:24:67:67:bc:8b:ee:9d:f2:3c:80:22:7e:
2b:25:12:8b:ef:6e:c2:75:d0:99:50:a7:0a:7f:4e:
6b:a1:eb:0c:6a:29:ab:c8:e8:a1:ff:0c:54:3c:94:
c6:f6:dc:66:cd:05:b2:f0:80:25:76:77:ca:6d:37:
64:e7:ff:08:ba:a8:3b:52:2c:e5:f5:89:53:bf:0f:
e1:b0:8c:ea:ec:ac:bb:ad:61:c7:c9:e7:aa:13:c2:
d4:d2:ea:d3:4f:0b:26:69:77:f8:93:b6:a5:0c:39:
f2:3d:95:86:6c:ef:8f:9e:4d:86:43:80:22:a8:74:
74:54:48:e8:a5:c4:e1:01:e9:cf:d3:26:a1:a0:a0:
60:33:aa:eb:f5:51:81:f9:0d:bc:4e:5e:bd:85:3f:
91:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E8:14:EB:CF:9F:0F:E5:FA:A9:A6:31:9D:A5:AD:D8:FE:F1:40:2B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/vegU68-fD-X6qaYxnaWt2P7xQCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.200.0/24
86.38.241.0/24
89.116.150.0/24
89.116.203.0/24
89.117.130.0/24
89.117.245.0/24
Signature Algorithm: sha256WithRSAEncryption
09:23:54:d5:25:24:f9:4e:4e:70:79:fc:41:a4:2f:71:af:28:
45:14:34:bb:48:26:1f:e5:ab:f1:7c:d7:9d:53:0f:7e:ac:a4:
43:fe:e7:c6:59:b2:21:90:59:27:6a:b0:30:da:4a:c7:d9:26:
59:9c:11:03:64:54:4f:a7:bd:af:c7:2c:c7:0e:79:d5:bd:c9:
8e:b3:ab:72:d4:8a:96:22:f2:ba:de:d8:e9:0d:0b:ac:3d:e8:
82:df:b2:f7:3e:e3:e3:25:c1:93:8b:92:67:96:bc:5f:44:ff:
79:5b:ea:e0:1a:fd:63:82:f3:dd:ed:d7:8c:91:ba:b4:4f:4a:
8c:d6:95:0a:3a:f2:ea:10:b7:6b:f5:b9:ea:c2:94:46:9d:1f:
c9:d2:7b:ae:49:9b:2f:02:d1:6f:f3:13:6f:52:0a:08:fd:e0:
be:ee:45:17:6d:d3:b1:cd:68:ee:28:ee:30:ff:45:2f:6b:90:
10:ef:5b:69:08:70:73:ec:94:21:62:27:47:bb:c9:9d:9e:ed:
90:df:d1:f1:86:e3:1c:6b:ab:4a:db:57:de:61:48:02:4a:3c:
ad:fa:4e:70:52:b8:1c:ad:2e:42:38:3b:19:49:e9:bb:a8:81:
8c:b6:00:83:f6:c1:6a:f7:b6:0e:1a:25:9b:2d:14:b8:9b:28:
da:98:74:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org