Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/KcibqeLGrQZayRKZaNONm-lwNyk.roa
File: KcibqeLGrQZayRKZaNONm-lwNyk.roa (raw, json)
Hash identifier: Cf1y9UMlRjuD+W9CfJDZzWxNJsWDV8XT0gx666C5AD8=
Subject key identifier: 29:C8:9B:A9:E2:C6:AD:06:5A:C9:12:99:68:D3:8D:9B:E9:70:37:29
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183D063C8697E194D88EF369805083CC7BE
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/KcibqeLGrQZayRKZaNONm-lwNyk.roa
Signing time: Thu 13 Oct 2022 08:09:03 +0000
ROA not before: Thu 13 Oct 2022 08:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 89.117.68.0/24 maxlen: 24
86.38.175.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.218.0/24 maxlen: 24
86.38.190.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:63:c8:69:7e:19:4d:88:ef:36:98:05:08:3c:c7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 13 08:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29c89ba9e2c6ad065ac9129968d38d9be9703729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:d1:36:69:71:e5:03:2b:ed:44:aa:48:75:
ea:af:e8:07:00:2d:16:1e:61:52:99:bf:c9:e4:7c:
09:90:b1:66:ca:b5:a9:51:61:3b:c3:9e:ea:bb:c1:
6e:c7:17:a4:3f:6a:dd:d5:7a:cb:2c:2a:47:9e:36:
94:77:64:bc:3b:aa:a5:e1:0f:a2:ab:2f:1c:88:d9:
3a:ae:6a:cc:87:0e:e9:21:e3:65:7d:d9:2a:ea:40:
50:2f:66:4f:70:c0:d0:2a:a9:fd:1d:3c:af:cd:7e:
11:d6:e3:e3:09:58:65:fe:3a:59:e4:8c:4a:02:c8:
57:db:f5:3f:9e:5d:10:20:1b:5b:83:cb:b4:11:5e:
a3:83:53:4e:ae:2b:d7:b2:1c:2e:a0:74:78:d6:8a:
37:90:ae:1d:12:77:89:a4:44:81:9b:b5:f6:87:20:
27:d0:6b:d0:89:a2:b4:17:4f:7e:ac:44:17:ac:1d:
60:08:ea:36:a9:35:8a:4c:fe:f4:fc:20:d9:5e:ec:
cf:2d:61:a0:1f:c2:e9:6e:15:89:8b:62:39:46:b7:
a5:e2:ab:66:f9:af:53:b5:14:f7:1f:16:e9:8e:36:
28:da:d0:f3:38:5a:cf:fc:fb:c9:39:3e:ea:02:47:
32:91:ff:17:31:d0:48:68:c5:89:64:34:0d:37:aa:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C8:9B:A9:E2:C6:AD:06:5A:C9:12:99:68:D3:8D:9B:E9:70:37:29
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/KcibqeLGrQZayRKZaNONm-lwNyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.175.0/24
86.38.177.0/24
86.38.190.0/24
89.116.70.0/24
89.116.102.0/24
89.116.175.0/24
89.117.68.0/24
89.117.109.0/24
89.117.218.0/24
Signature Algorithm: sha256WithRSAEncryption
80:3c:34:3e:f4:c1:6f:e6:df:97:de:54:c6:92:90:04:e2:1c:
20:d0:a3:83:d3:67:b3:03:f5:94:b8:42:a0:4d:0e:7e:b2:67:
5c:7a:8a:4b:5b:bc:83:4c:69:77:37:a5:d1:d5:52:9f:be:f6:
28:87:c3:5e:20:97:52:d2:d8:05:de:f0:23:5e:52:0d:be:fe:
2f:9f:6a:33:94:2b:0f:ff:b2:ff:d6:06:b4:9e:d7:76:be:e6:
92:77:70:da:a2:c1:c0:1b:56:c3:99:21:ce:b4:a0:a9:9b:d3:
7f:5c:be:40:f2:09:96:16:be:2b:12:0f:a2:5b:12:f7:e5:1e:
ea:26:c7:e6:1b:bd:42:94:ee:f8:6c:f4:34:05:21:ba:38:1b:
7f:d3:bc:73:30:94:6e:25:e8:22:7b:23:6e:16:47:4a:d9:24:
60:b1:b8:9e:44:c4:f0:44:12:50:f2:a6:98:91:88:99:57:92:
bf:85:3b:ce:ae:2c:d2:16:8a:b0:8d:c1:43:cc:cd:4b:9a:36:
e9:20:24:43:57:32:f1:aa:ed:be:25:d8:31:16:93:f4:f6:21:
d2:05:07:ff:03:e7:88:42:7a:b1:25:7a:ee:13:1d:9e:65:7a:
b0:d0:4a:c5:2c:8a:d8:4a:81:f1:2a:c0:66:c8:73:4b:8a:51:
61:51:d8:e4
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYPQY8hpfhlNiO82mAUIPMe+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIxMDEzMDgwOTAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWM4OWJhOWUyYzZhZDA2NWFjOTEyOTk2OGQzOGQ5YmU5NzAzNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKvRNmlx5QMr7USqSHXqr+gHAC0W
HmFSmb/J5HwJkLFmyrWpUWE7w57qu8FuxxekP2rd1XrLLCpHnjaUd2S8O6ql4Q+i
qy8ciNk6rmrMhw7pIeNlfdkq6kBQL2ZPcMDQKqn9HTyvzX4R1uPjCVhl/jpZ5IxK
AshX2/U/nl0QIBtbg8u0EV6jg1NOrivXshwuoHR41oo3kK4dEneJpESBm7X2hyAn
0GvQiaK0F09+rEQXrB1gCOo2qTWKTP70/CDZXuzPLWGgH8LpbhWJi2I5Rrel4qtm
+a9TtRT3HxbpjjYo2tDzOFrP/PvJOT7qAkcykf8XMdBIaMWJZDQNN6o+0wIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFCnIm6nixq0GWskSmWjTjZvpcDcpMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvS2NpYnFlTEdyUVpheVJLWmFOT05tLWx3TnlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAViavAwQA
ViaxAwQAVia+AwQAWXRGAwQAWXRmAwQAWXSvAwQAWXVEAwQAWXVtAwQAWXXaMA0G
CSqGSIb3DQEBCwUAA4IBAQCAPDQ+9MFv5t+X3lTGkpAE4hwg0KOD02ezA/WUuEKg
TQ5+smdceopLW7yDTGl3N6XR1VKfvvYoh8NeIJdS0tgF3vAjXlINvv4vn2ozlCsP
/7L/1ga0ntd2vuaSd3DaosHAG1bDmSHOtKCpm9N/XL5A8gmWFr4rEg+iWxL35R7q
JsfmG71ClO74bPQ0BSG6OBt/07xzMJRuJegieyNuFkdK2SRgsbieRMTwRBJQ8qaY
kYiZV5K/hTvOrizSFoqwjcFDzM1LmjbpICRDVzLxqu2+JdgxFpP09iHSBQf/A+eI
QnqxJXruEx2eZXqw0ErFLIrYSoHxKsBmyHNLilFhUdjk
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:09 2023 by rpki-client on console.sobornost.net