Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/waZOvdqnf3hTZtgbJ4DMyf3GS9w.roa
File: waZOvdqnf3hTZtgbJ4DMyf3GS9w.roa (raw, json)
Hash identifier: 9/mP83ewYXPIcszQpvzwq0FiSWExE0HEdxNEhJuPtq4=
Subject key identifier: C1:A6:4E:BD:DA:A7:7F:78:53:66:D8:1B:27:80:CC:C9:FD:C6:4B:DC
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A052BE9
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/waZOvdqnf3hTZtgbJ4DMyf3GS9w.roa
Signing time: Thu 24 Mar 2022 11:29:30 +0000
ROA not before: Thu 24 Mar 2022 11:29:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 86.38.151.0/24 maxlen: 24
89.116.144.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.118.0/24 maxlen: 24
89.117.124.0/24 maxlen: 24
89.116.168.0/24 maxlen: 24
89.117.136.0/24 maxlen: 24
82.140.182.0/24 maxlen: 24
89.117.38.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168111081 (0xa052be9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Mar 24 11:29:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1a64ebddaa77f785366d81b2780ccc9fdc64bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:db:05:f6:79:fa:23:45:65:84:71:37:b5:
51:ce:16:db:b3:92:55:2f:80:e2:22:a1:5e:37:75:
f2:49:22:dc:66:39:bc:96:19:91:d5:c4:57:09:8a:
0b:6b:8d:86:0e:fe:43:a5:e3:6f:01:70:c2:6a:25:
e5:01:c8:59:7e:f7:e2:c3:2f:1a:fb:97:5b:73:7f:
2f:5a:ea:be:b0:8c:31:81:56:cb:4e:da:bb:15:27:
e4:81:4d:d1:33:f1:16:cb:3b:c3:ab:6b:2b:b3:9b:
ba:2d:4a:9f:31:6d:82:22:78:e3:eb:d8:f3:89:0c:
2c:ad:0d:21:f8:02:5c:a6:21:9f:63:65:90:08:6a:
9b:e6:f2:07:66:42:56:5f:ea:fc:f2:31:11:0e:99:
7e:7f:b6:f2:69:fe:f4:e2:71:d3:dc:d8:05:8e:59:
b8:1f:5a:3f:48:c1:4c:74:30:c6:91:75:37:86:71:
0a:4f:08:26:d1:48:22:29:78:28:4a:bf:9a:c5:cc:
cf:c9:3b:44:4c:9a:c5:ff:09:a3:b1:e6:b0:5e:70:
7c:18:73:d3:b7:11:c9:aa:d3:5c:27:c1:ed:c8:72:
31:94:f5:22:eb:4d:6f:2d:c8:e4:c0:4e:9e:69:e6:
a3:47:6d:75:24:be:89:e9:d2:1d:c3:25:10:0e:72:
be:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A6:4E:BD:DA:A7:7F:78:53:66:D8:1B:27:80:CC:C9:FD:C6:4B:DC
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/waZOvdqnf3hTZtgbJ4DMyf3GS9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/24
84.46.171.0/24
86.38.7.0/24
86.38.151.0/24
89.116.96.0/24
89.116.144.0/24
89.116.168.0/24
89.117.38.0/24
89.117.118.0/24
89.117.124.0/24
89.117.136.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0f:03:c5:49:83:e0:a1:5c:ba:21:73:b0:f3:ae:0c:d7:f8:
6a:47:a1:b9:43:16:99:3b:69:07:df:cf:8a:72:12:d1:af:6c:
f3:fd:17:7b:ed:8d:66:fe:0b:91:5d:cc:fd:64:28:10:04:c9:
38:2b:6f:f4:70:1a:b0:cf:37:55:09:64:12:08:43:0c:15:52:
0f:4a:d3:c1:77:5b:e1:e8:41:85:49:23:17:36:69:28:d5:1e:
99:e2:ed:dc:74:f0:3f:b6:fd:d2:e3:f9:18:bf:3d:ac:2a:16:
1b:45:27:33:89:a1:79:4a:f0:98:85:9a:73:61:96:52:8d:08:
17:39:bc:07:f5:84:72:4b:df:9d:75:c5:ce:20:bf:d4:61:3c:
5f:fa:d4:44:67:6b:5d:32:13:27:1c:ff:78:35:4e:c4:c4:1b:
54:e7:60:a5:21:a6:e8:45:66:4a:e0:59:2c:f3:ea:29:52:14:
da:00:ee:6c:5f:76:df:65:fc:4d:61:b8:5c:3d:8c:ce:f9:b8:
e2:ab:c7:e6:83:17:f4:af:f4:07:96:82:90:0b:86:9b:ce:ae:
14:8c:d6:01:be:03:cb:5e:d1:19:9f:fa:9e:2b:71:b8:44:2d:
d8:f7:98:30:13:53:4c:b0:29:f7:78:43:e0:9a:8a:ed:7c:3e:
0a:e8:87:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org