Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-FRBL7j9ZdeJei4diNLVbGtY6pY.roa
File: 1-FRBL7j9ZdeJei4diNLVbGtY6pY.roa (raw, json)
Hash identifier: +Ehj7R3wMHmMRhxB5WllOj4l4jgW0l2JtZz5HF2F99w=
Subject key identifier: F8:54:41:2F:B8:FD:65:D7:89:7A:2E:1D:88:D2:D5:6C:6B:58:EA:96
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0965FEE1
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-FRBL7j9ZdeJei4diNLVbGtY6pY.roa
Signing time: Tue 08 Feb 2022 07:30:07 +0000
ROA not before: Tue 08 Feb 2022 07:30:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 86.38.248.0/21 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157679329 (0x965fee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 8 07:30:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f854412fb8fd65d7897a2e1d88d2d56c6b58ea96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:0c:b8:57:79:68:ec:ae:37:39:39:e1:3e:
cc:a6:7d:e5:83:6a:f1:b5:45:7f:9c:13:06:7c:cb:
6d:93:20:1e:b2:e9:c3:8b:ad:37:4e:9c:70:07:f0:
f8:ba:93:c4:5e:a6:22:88:4e:6d:fe:b1:8a:e9:59:
60:b5:25:63:58:c6:eb:22:e5:74:6a:d0:b2:7f:6f:
31:be:a5:30:d2:8a:12:db:3d:0e:6a:50:d8:b4:b5:
1c:de:77:3e:47:ad:09:f1:08:53:eb:7d:02:7e:65:
93:56:ec:d4:07:02:a7:86:f1:84:ee:42:b3:7a:b5:
e6:7d:79:d6:d1:74:00:d4:37:35:d5:d3:45:8a:5c:
21:80:61:53:57:8e:f6:7b:e0:9b:b2:e2:5b:68:b1:
3c:39:8a:0b:f3:71:d9:86:23:cf:d8:47:cc:1a:f6:
d5:b8:9f:ef:bc:47:ed:08:09:d9:37:4c:8d:6c:fb:
a4:6d:cd:f2:8a:95:3a:ea:6a:60:73:72:5e:ae:5c:
1a:28:be:74:ec:d8:99:fa:e1:0a:51:c1:4d:4d:ed:
ca:d8:39:06:ff:25:a2:f3:97:54:60:9c:0c:55:78:
60:0b:53:5c:9f:85:2f:17:dc:d3:1c:f4:de:f5:ab:
14:30:db:d8:29:48:db:08:83:cb:5e:fa:79:70:c0:
a8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:54:41:2F:B8:FD:65:D7:89:7A:2E:1D:88:D2:D5:6C:6B:58:EA:96
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/1-FRBL7j9ZdeJei4diNLVbGtY6pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.200.0/24
86.38.235.0/24
86.38.238.0/24
86.38.248.0/21
Signature Algorithm: sha256WithRSAEncryption
84:dd:ba:3c:ae:bb:2c:7d:50:b2:b0:3c:68:ef:f6:a7:05:6d:
63:16:88:a0:d5:07:65:cc:b6:f8:88:7e:38:87:ec:fd:02:77:
43:42:31:cf:ce:5e:5f:14:c3:71:80:aa:fd:b0:e6:9c:85:c7:
19:e0:29:de:30:22:9f:71:78:6c:62:44:6e:4f:18:ec:53:11:
9e:78:c5:f1:95:3b:01:fc:a5:0d:0a:e7:0f:7d:c5:28:e9:d1:
15:fe:ac:48:c4:ad:df:da:35:e9:06:ec:01:5c:4d:bf:bc:95:
62:6a:b0:a7:4c:80:dc:67:a8:06:5a:bc:4e:18:9e:8e:19:09:
d5:52:e1:8a:32:89:13:a9:22:f4:42:f0:09:e9:c3:ff:76:86:
99:0d:67:ce:4d:e7:8d:13:c3:80:49:68:e5:89:1b:fa:c9:a3:
1e:61:e9:2b:00:b6:ae:f5:67:e4:8d:d3:1e:9b:8b:72:7a:b4:
d5:79:b3:fa:63:66:10:dd:1e:81:94:a9:57:e8:ad:e9:e9:c9:
87:3e:01:87:af:57:11:4d:27:b8:46:0f:2a:9c:59:b0:28:d0:
98:b8:77:d4:d7:f6:85:71:b1:2f:a2:92:76:fd:e6:a3:52:d4:
bb:a3:88:44:5b:3c:0b:f8:01:64:a4:c5:5e:7a:53:c1:37:03:
72:dc:54:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org