Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/u6Dr7F7_PHAXBpyNKclDa4TFQuo.roa
File: u6Dr7F7_PHAXBpyNKclDa4TFQuo.roa (raw, json)
Hash identifier: +ammV9lgCwErV1BbDLw6toTmED16S2opcBW/AvTQ3wc=
Subject key identifier: BB:A0:EB:EC:5E:FF:3C:70:17:06:9C:8D:29:C9:43:6B:84:C5:42:EA
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09C717F3
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/u6Dr7F7_PHAXBpyNKclDa4TFQuo.roa
Signing time: Sun 27 Feb 2022 22:15:49 +0000
ROA not before: Sun 27 Feb 2022 22:15:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.116.115.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
89.117.87.0/24 maxlen: 24
84.46.170.0/24 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164042739 (0x9c717f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 27 22:15:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bba0ebec5eff3c7017069c8d29c9436b84c542ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:69:37:95:27:39:28:7a:0a:3c:31:65:2a:81:
60:a6:a5:93:16:32:05:dc:f6:87:fa:ed:bc:3f:21:
90:f9:87:88:56:5c:f5:a4:70:ff:c7:d9:ba:1a:61:
ce:57:23:21:d4:ad:13:ed:66:4b:0d:6f:71:75:bf:
53:4c:d3:e8:57:07:ec:f5:3c:da:50:6f:32:32:e0:
12:f8:dd:a8:7e:bf:d3:1a:4a:86:3e:42:cc:80:11:
ea:20:07:30:b2:56:bb:89:c2:f2:d8:18:b6:cf:1b:
24:a4:0b:7f:98:81:4b:8f:42:9d:a2:de:5f:6f:e9:
ef:55:32:8b:b1:3c:55:bc:33:2b:1d:cb:e4:a1:42:
73:9e:67:0f:28:49:92:af:82:90:0c:70:a0:fc:bd:
2a:65:d3:f2:4d:c2:79:bd:c0:1e:ba:69:e1:6f:fa:
60:27:90:12:bb:de:dd:de:6d:89:a7:77:a8:de:7f:
e6:7e:12:58:91:d6:10:09:b1:07:ee:ad:81:56:d2:
e4:29:1b:48:7e:30:32:2e:e8:ec:fb:a3:ed:03:57:
be:b8:92:66:75:be:73:45:57:ce:2c:5e:8a:58:9b:
bf:cd:34:24:3e:c9:4a:5b:5e:b3:4a:ab:5f:5d:49:
cb:1a:09:59:d3:1a:08:17:9b:32:54:e7:e5:c7:ad:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A0:EB:EC:5E:FF:3C:70:17:06:9C:8D:29:C9:43:6B:84:C5:42:EA
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/u6Dr7F7_PHAXBpyNKclDa4TFQuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/23
86.38.7.0/24
86.38.37.0/24
86.38.177.0/24
86.38.200.0/24
86.38.235.0/24
86.38.238.0/24
89.116.56.0/24
89.116.102.0/24
89.116.115.0/24
89.117.87.0/24
89.117.109.0/24
89.117.139.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:04:56:13:43:d8:23:ef:7d:b9:2f:dc:96:bb:94:66:7a:10:
a8:23:39:d1:b3:b6:96:bd:37:12:07:35:52:a4:09:c2:2b:93:
fa:2c:75:40:c3:19:e4:bc:10:53:09:5d:8a:2b:5d:51:23:93:
13:20:ce:d8:41:84:a3:56:cc:0b:e6:02:39:d3:38:ba:c4:5c:
fb:ea:6d:60:9e:75:e9:76:31:2c:d5:de:04:5e:de:09:85:f3:
64:a5:b1:e7:da:69:41:af:f2:2e:b9:d4:e0:b8:18:fc:3e:9e:
75:45:0d:9c:a0:d1:79:fb:28:42:d3:55:95:fc:84:70:b0:fe:
c9:5f:62:cf:ef:e5:6b:7b:61:aa:8e:2c:94:62:3a:2c:2b:97:
f6:c1:8a:e9:d3:48:86:39:4c:2d:49:85:bd:a6:00:67:74:e0:
d1:57:32:9f:60:ac:1b:d8:e0:30:54:2d:12:96:7f:f1:0c:bd:
b4:c5:d9:a8:67:95:c5:15:fb:02:b5:c2:ba:fc:0d:72:02:46:
de:6c:f7:e7:20:55:f0:5e:75:e3:a8:18:e2:2b:ac:09:66:47:
79:56:e8:e0:3b:50:02:ea:76:b6:eb:89:ef:cb:2f:ee:e0:11:
69:2c:97:b1:c1:3e:5e:eb:c8:6c:7f:f2:64:1e:f9:69:7b:0c:
02:32:ba:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:11 2023 by rpki-client on console.sobornost.net