Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/lUrAfTBy1DukDPdivfs6PdFd8MM.roa
File: lUrAfTBy1DukDPdivfs6PdFd8MM.roa (raw, json)
Hash identifier: 7WpcEqg7M0+1mIaRutsVOAFTi7iAzrsZtxFh+78oN6Q=
Subject key identifier: 95:4A:C0:7D:30:72:D4:3B:A4:0C:F7:62:BD:FB:3A:3D:D1:5D:F0:C3
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01835ADAC86176047695DF809EA6C8A7D47E
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/lUrAfTBy1DukDPdivfs6PdFd8MM.roa
Signing time: Tue 20 Sep 2022 12:23:51 +0000
ROA not before: Tue 20 Sep 2022 12:23:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 89.117.190.0/24 maxlen: 24
86.38.151.0/24 maxlen: 24
86.38.156.0/24 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.116.180.0/22 maxlen: 24
89.117.250.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
84.46.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:da:c8:61:76:04:76:95:df:80:9e:a6:c8:a7:d4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 20 12:23:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=954ac07d3072d43ba40cf762bdfb3a3dd15df0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:05:62:99:1e:ae:d3:81:6c:b5:e0:db:c5:
15:db:47:5a:9c:f9:0c:5c:46:8e:f3:2b:68:cd:a9:
dc:45:9c:09:1d:79:e9:f6:84:7b:07:cd:8f:4b:0a:
2c:ce:83:90:3c:a9:9d:de:70:18:dc:9d:7f:da:a3:
86:c8:37:33:f0:c7:a9:e3:21:6a:d5:0f:03:a4:85:
5e:8a:ac:60:35:70:e7:a6:87:c7:7f:c2:24:ba:ad:
01:68:3f:14:fa:94:dc:6b:60:ce:79:61:1f:09:0f:
ff:5f:4a:d0:90:16:1c:ff:81:e6:59:81:e4:95:7d:
41:39:20:f2:e9:6f:27:53:5e:74:a4:d9:75:63:ca:
da:cf:cd:a7:ef:3b:2a:dc:f1:61:b7:a8:f3:cd:74:
cc:88:60:46:c2:8e:00:6e:73:3b:e2:ec:18:78:4b:
9c:15:4d:0f:ad:32:0b:3e:80:72:35:35:b6:28:c2:
40:ec:8c:f2:38:f6:4f:c1:13:a6:a4:ee:45:a4:a9:
60:f5:e5:8e:24:fb:ba:30:0b:b6:24:92:23:65:d7:
29:d6:b1:4b:d8:5e:18:6c:d1:7a:6a:58:fe:7f:68:
05:f7:80:b4:53:26:70:b9:33:62:07:28:a2:53:20:
12:c9:86:13:47:75:47:93:9b:c9:5f:ac:41:d7:81:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:C0:7D:30:72:D4:3B:A4:0C:F7:62:BD:FB:3A:3D:D1:5D:F0:C3
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/lUrAfTBy1DukDPdivfs6PdFd8MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
86.38.151.0/24
86.38.156.0/24
86.38.235.0/24
89.116.180.0/22
89.117.139.0/24
89.117.190.0/24
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:24:3c:d7:87:58:d4:c8:04:af:9c:cf:40:bf:a1:4a:63:c7:
5d:5c:5a:7a:c6:11:d3:c1:ef:c1:68:49:8e:91:d9:63:67:25:
83:22:03:34:c1:2c:16:73:c1:98:eb:3f:c8:79:eb:5e:d8:0a:
80:0a:4d:7b:20:a2:4e:00:b2:25:46:c7:c9:2d:20:3a:56:77:
76:7f:eb:f7:42:61:45:ad:05:3b:c7:af:cb:75:4e:99:ff:cd:
ef:9a:3e:86:b1:5c:0a:d3:c9:00:67:ca:9a:0a:22:10:36:68:
f4:ab:52:67:09:f1:41:ee:9f:b5:a2:b1:12:88:54:1f:a7:af:
51:94:37:25:ae:dd:8a:0a:9a:10:4a:06:06:e9:a1:c4:5e:63:
8a:49:f8:f8:18:8b:8f:43:5d:5f:c4:a3:79:ef:a7:54:00:a4:
02:20:72:ae:5e:89:87:a9:df:7c:51:62:b8:0d:eb:0d:81:68:
9a:20:f4:92:94:aa:7d:e6:18:d9:30:9e:fd:c0:07:64:e5:48:
b9:2c:a1:3b:47:3d:10:8d:b0:a5:6a:52:65:b0:f9:32:62:5c:
2e:13:8c:d5:d4:94:ab:6f:90:3e:48:df:1d:65:20:6d:79:7b:
90:98:12:f6:ea:72:7b:8c:ac:2c:49:9e:e5:75:fb:d2:3e:2f:
ca:b3:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:11 2023 by rpki-client on console.sobornost.net