Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/FVTCxk1rfvsa2uxsq2OE05OZ6H8.roa
File: FVTCxk1rfvsa2uxsq2OE05OZ6H8.roa (raw, json)
Hash identifier: CLMaOrjlA8Iv/Lyv4VfwVyyOydrD1RmwaMJ4/lNu1GM=
Subject key identifier: 15:54:C2:C6:4D:6B:7E:FB:1A:DA:EC:6C:AB:63:84:D3:93:99:E8:7F
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 0181F84E9B2E82A2DC00EFE8945410B01BBF
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/FVTCxk1rfvsa2uxsq2OE05OZ6H8.roa
Signing time: Wed 13 Jul 2022 16:05:09 +0000
ROA not before: Wed 13 Jul 2022 16:05:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34304
IP address blocks: 86.107.58.0/23 maxlen: 23
86.107.57.0/24 maxlen: 24
188.211.164.0/23 maxlen: 23
86.107.63.0/24 maxlen: 24
86.107.60.0/23 maxlen: 23
193.138.192.0/23 maxlen: 23
193.138.192.0/22 maxlen: 22
193.138.194.0/24 maxlen: 24
89.47.0.0/24 maxlen: 24
89.47.14.0/24 maxlen: 24
89.47.12.0/24 maxlen: 24
89.35.224.0/24 maxlen: 24
89.35.229.0/24 maxlen: 24
89.35.232.0/24 maxlen: 24
89.35.236.0/24 maxlen: 24
89.35.234.0/23 maxlen: 23
89.35.238.0/24 maxlen: 24
89.35.238.0/23 maxlen: 23
2a05:8880::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f8:4e:9b:2e:82:a2:dc:00:ef:e8:94:54:10:b0:1b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Jul 13 16:05:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1554c2c64d6b7efb1adaec6cab6384d39399e87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:bc:75:e4:f3:68:7a:c7:32:04:47:f8:05:
1c:2b:db:f1:84:4c:7f:14:e6:b3:44:13:19:28:18:
79:78:41:04:ec:e2:54:dc:10:05:23:8e:c9:ef:aa:
63:31:a7:e8:a6:b4:5f:3f:18:45:2e:40:d8:e6:dc:
cb:92:af:1d:e0:9f:2e:0b:67:49:84:79:1a:1f:db:
18:1f:43:72:93:ca:91:b1:85:f2:6b:f0:36:29:bb:
56:44:2d:3a:d9:6e:e8:63:82:83:d3:5f:12:64:e0:
bd:7e:67:c2:f4:7a:1a:5e:28:c3:c0:dd:07:14:02:
ab:9a:d9:03:d1:5c:54:79:a2:f2:26:9d:e4:76:ed:
3f:21:84:63:2b:26:f3:db:e5:74:37:e5:f6:db:46:
ea:2d:fc:ff:76:65:ac:9d:4e:44:7b:e2:e3:56:64:
d4:02:b5:98:fc:4c:ad:31:2b:b5:ef:4a:bb:8a:1f:
87:83:ed:7d:25:b1:8b:77:96:d1:08:86:eb:9b:1a:
e6:1f:fb:4c:5d:d0:53:3a:4e:46:a1:d6:80:8d:51:
86:0b:4a:b3:a9:86:48:94:ac:3a:e6:6e:3e:73:19:
35:b1:d2:be:fb:3f:eb:5a:f3:32:85:56:6e:95:0c:
3d:c2:19:f0:a4:45:d1:c0:74:34:1d:4a:ba:85:b7:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:54:C2:C6:4D:6B:7E:FB:1A:DA:EC:6C:AB:63:84:D3:93:99:E8:7F
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/FVTCxk1rfvsa2uxsq2OE05OZ6H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.57.0-86.107.61.255
86.107.63.0/24
89.35.224.0/24
89.35.229.0/24
89.35.232.0/24
89.35.234.0-89.35.236.255
89.35.238.0/23
89.47.0.0/24
89.47.12.0/24
89.47.14.0/24
188.211.164.0/23
193.138.192.0/22
IPv6:
2a05:8880::/30
Signature Algorithm: sha256WithRSAEncryption
12:02:ea:f3:3e:b7:89:25:a3:e0:03:ed:08:e0:fb:06:f1:f9:
d9:b5:af:e5:13:54:b7:f9:84:1f:ee:df:c6:db:b4:54:fb:f6:
c2:d0:9e:87:79:61:27:7b:f5:f2:c1:57:62:7e:ec:55:b6:e6:
7f:22:02:c7:25:65:59:68:ce:d1:99:ed:3e:02:5e:60:45:dd:
76:e3:87:40:02:a6:a8:54:60:79:9f:20:d4:1b:38:e9:b1:56:
a5:58:f2:05:62:ac:ba:10:b1:82:fe:d7:57:3a:2f:59:fb:7f:
41:ad:62:f1:ec:71:0a:71:86:15:4d:0c:9b:df:fa:64:da:4e:
d9:21:3a:af:32:f7:ac:50:57:0c:21:24:6d:02:85:4a:d7:6d:
cd:dc:db:49:71:e2:73:93:b0:2b:d0:a5:9e:0e:85:07:ba:f2:
26:23:04:e1:c8:73:a4:ae:fc:f9:f4:d6:58:2c:50:63:04:13:
f7:6c:4d:59:45:61:2c:44:c2:f9:9d:95:ee:1c:88:49:94:b2:
3f:47:19:30:39:2d:2e:c5:0f:cd:fd:12:db:34:29:17:67:64:
00:a3:72:67:e7:f9:f3:40:0d:a7:26:cc:8a:8f:af:e5:9a:8f:
16:0c:ac:b1:58:7b:35:90:3f:84:64:d3:6f:c0:2e:8c:fa:10:
f6:21:52:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:33 2024 by rpki-client on console-ams.rpki-client.org