Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VFPFjVTokCG2WDMAcJTMk6AklTU.roa
File: VFPFjVTokCG2WDMAcJTMk6AklTU.roa (raw, json)
Hash identifier: VBGsF7PMNY6d65uRSW7tNDjn77tVrTtHNudmU1A5IZE=
Subject key identifier: 54:53:C5:8D:54:E8:90:21:B6:58:33:00:70:94:CC:93:A0:24:95:35
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182CA36A9EC741B11B2016A439F83DAF56D
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VFPFjVTokCG2WDMAcJTMk6AklTU.roa
Signing time: Tue 23 Aug 2022 10:19:16 +0000
ROA not before: Tue 23 Aug 2022 10:19:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 89.117.72.0/21 maxlen: 24
89.116.123.0/24 maxlen: 24
89.117.88.0/22 maxlen: 24
89.116.140.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.117.120.0/22 maxlen: 24
89.117.12.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
86.38.216.0/22 maxlen: 24
89.116.91.0/24 maxlen: 24
89.116.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ca:36:a9:ec:74:1b:11:b2:01:6a:43:9f:83:da:f5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 23 10:19:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5453c58d54e89021b65833007094cc93a0249535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6f:e9:90:83:82:c0:9d:30:3f:5f:da:2c:51:
3d:44:be:ec:83:c2:1c:f1:b5:1b:6b:3b:41:05:64:
e9:0e:3a:c2:19:0b:5a:3e:28:26:8d:37:7a:50:21:
42:6e:ed:4a:0e:f3:d9:f7:a8:31:02:60:f1:9a:1c:
51:10:01:1e:5f:ee:d8:40:7a:51:86:8d:d0:55:65:
f6:66:32:7a:a6:a4:0b:7f:7d:a1:46:32:84:e6:8c:
bb:57:94:e6:3b:5f:cf:5a:a8:ec:ea:0e:af:d0:b4:
49:2a:df:30:78:0c:49:ba:c7:ba:1f:00:d0:2c:8c:
94:21:f6:5e:9b:41:3c:83:48:ff:5a:01:52:87:12:
43:78:2a:a4:67:14:c5:60:e4:36:af:f8:05:83:9e:
1a:6d:54:5d:df:27:24:cd:98:d0:16:49:bf:c4:41:
31:c9:d9:82:18:ca:ad:30:5e:7a:53:69:b3:42:d4:
6f:be:15:1f:5e:3c:04:3e:b4:2b:f6:12:7e:19:de:
74:72:d9:62:83:f2:7f:88:d4:41:a6:f6:99:ed:78:
12:dd:5e:5f:d5:87:52:26:eb:28:ef:70:57:78:86:
04:45:8d:32:0f:3c:76:e8:0e:84:59:17:57:9e:ba:
d5:ab:18:9b:66:e6:21:b2:7d:b0:33:25:2a:ff:58:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:53:C5:8D:54:E8:90:21:B6:58:33:00:70:94:CC:93:A0:24:95:35
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VFPFjVTokCG2WDMAcJTMk6AklTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.216.0/22
89.116.76.0/24
89.116.91.0/24
89.116.123.0/24
89.116.140.0/24
89.116.212.0/22
89.116.250.0/24
89.117.12.0/23
89.117.72.0/21
89.117.88.0/22
89.117.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:45:83:df:30:d5:fb:63:98:43:7f:f7:d0:eb:d9:cf:a3:f2:
54:7d:9e:0f:86:33:bc:66:83:cc:f2:ac:14:15:22:6e:ec:ce:
a9:0e:d9:49:0e:47:1c:94:c1:b3:b8:1e:f0:aa:22:26:a9:f8:
50:44:6e:f3:b8:0e:c5:cb:a1:38:4f:64:73:c5:ed:68:f9:1e:
8a:10:ab:00:5f:7b:e1:b5:e0:96:ca:ab:51:7d:de:85:92:05:
b3:3b:cc:17:d5:c6:dd:58:66:f7:97:94:0a:77:f6:a9:9a:87:
77:53:4e:eb:ed:3a:79:f9:38:77:6a:93:c0:4f:37:64:c9:aa:
fd:36:e2:1d:6f:72:ea:8e:7a:2c:a9:5e:dc:08:3e:b0:c6:2c:
fd:e0:fb:3b:77:8d:35:39:e8:d7:e2:db:c5:1f:3a:22:2c:b7:
d1:91:12:2e:55:21:08:e5:8b:cb:10:ac:91:6c:dc:57:13:01:
c3:ca:97:9a:4a:e1:e2:9b:96:29:1d:ea:e3:b7:8f:f8:47:9a:
2e:4c:00:ae:a8:ab:27:1d:45:77:cf:e7:d0:31:23:3c:3d:39:
83:cd:3b:27:20:59:4e:e8:9f:81:6e:2c:3a:29:2e:96:d6:e2:
1f:e1:53:9b:11:5f:b6:93:90:02:db:0b:62:0a:4a:63:9e:e7:
bf:6b:1f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:10 2023 by rpki-client on console.sobornost.net