Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wncBNMdI4ewdOD-XSDnjfwPZeQs.roa
File: wncBNMdI4ewdOD-XSDnjfwPZeQs.roa (raw, json)
Hash identifier: PypQj6edc1SxSyWnwdNmWOz9sYaK/isoJOnWelb4SJ0=
Subject key identifier: C2:77:01:34:C7:48:E1:EC:1D:38:3F:97:48:39:E3:7F:03:D9:79:0B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183A270D609DB26E9F7D9693B7ED3EDDDE4
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wncBNMdI4ewdOD-XSDnjfwPZeQs.roa
Signing time: Tue 04 Oct 2022 10:00:47 +0000
ROA not before: Tue 04 Oct 2022 10:00:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 89.117.68.0/24 maxlen: 24
89.116.244.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:70:d6:09:db:26:e9:f7:d9:69:3b:7e:d3:ed:dd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 4 10:00:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2770134c748e1ec1d383f974839e37f03d9790b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:49:a2:a0:44:af:01:64:09:c8:27:b2:a4:
30:4c:c0:18:4d:25:22:77:ce:3b:95:7c:b3:49:d9:
b2:04:01:c7:73:71:f9:e2:36:44:55:16:58:9a:85:
8e:be:c1:b4:65:1b:70:e8:42:0d:ea:2f:2f:f1:b4:
e1:c0:42:d0:f4:69:eb:4b:72:ba:33:78:2e:37:57:
43:59:a6:48:5f:08:74:c4:69:bd:0f:eb:df:3f:db:
96:a0:d3:90:a2:e1:3c:3d:87:63:ec:d2:a7:39:0b:
95:6b:88:d6:4c:a0:1a:bb:6e:8b:e4:8a:67:04:10:
7f:4f:38:9e:b1:78:35:4b:e6:9d:0e:f3:4d:77:da:
2e:2a:e5:f5:48:13:6c:ff:56:18:0f:72:22:5c:8d:
21:95:75:63:a7:43:6f:7a:56:bf:b4:11:a1:b0:d7:
54:23:1a:88:70:99:34:f7:3b:a0:d1:ce:af:c3:84:
1f:cd:ba:cb:4a:35:f6:5f:d9:9a:bc:72:48:6b:d2:
c5:29:8a:fe:d4:0d:30:84:8e:59:c7:0b:03:a2:77:
f2:78:35:d9:26:c4:53:08:11:01:95:e8:f9:1f:ec:
ae:38:49:15:ef:98:41:4b:19:72:a2:b7:f2:23:9e:
9c:6b:2e:46:7e:71:da:31:c8:2d:2b:b8:f2:15:74:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:77:01:34:C7:48:E1:EC:1D:38:3F:97:48:39:E3:7F:03:D9:79:0B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wncBNMdI4ewdOD-XSDnjfwPZeQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.175.0/24
86.38.177.0/24
86.38.190.0/24
89.116.70.0/24
89.116.102.0/24
89.116.175.0/24
89.116.244.0/24
89.117.68.0/24
89.117.109.0/24
89.117.218.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f4:67:2c:4a:26:88:36:a0:26:34:33:ec:bd:c3:77:c9:18:
2f:ed:34:12:42:4a:d1:ed:77:7d:31:07:56:b8:83:b4:e6:55:
6e:60:21:23:44:99:ce:5a:8f:a8:31:01:fc:51:78:f9:6f:9b:
0b:cc:73:6e:f5:2f:e0:4c:f0:a7:bd:e2:bb:5f:2c:0e:3e:20:
20:ce:06:5f:b1:8c:2e:f6:f1:db:86:b8:e3:ce:86:50:47:06:
15:5a:68:6d:c2:29:a5:fc:b1:3c:b1:5a:d1:a3:b8:b7:cf:f9:
77:a4:d2:22:d9:3c:9b:47:47:63:9b:d6:a1:ac:2b:d2:79:b1:
95:16:09:e3:e8:34:fc:c3:5b:32:4a:2d:5e:cd:68:f0:52:9e:
76:cb:66:dc:df:60:4f:6d:f6:9c:74:21:6a:af:93:41:bd:0a:
72:ae:f9:4d:5e:9f:b0:cb:cc:37:84:68:b6:66:7e:50:eb:9f:
51:ae:93:43:0b:7b:bc:d7:95:6d:dd:63:36:ff:db:1f:52:28:
e8:d1:7e:47:f5:21:6c:d3:2e:4a:28:3d:84:3d:56:d3:41:88:
00:e7:32:19:ba:f2:cc:bf:73:77:cc:69:9c:4e:80:98:c6:49:
62:2c:5f:a3:68:7f:81:96:82:35:4d:41:82:b4:c6:02:17:79:
21:d7:e0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org