Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/4plQN3hulIsLXjOZnCmtJBlyAkk.roa
File: 4plQN3hulIsLXjOZnCmtJBlyAkk.roa (raw, json)
Hash identifier: 3s05UFqkVBRRU52oHgsINDdxixHGCzVlEK8PCfF5Ccg=
Subject key identifier: E2:99:50:37:78:6E:94:8B:0B:5E:33:99:9C:29:AD:24:19:72:02:49
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27D7DB65CDB192522B1811AED66828
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/4plQN3hulIsLXjOZnCmtJBlyAkk.roa
Signing time: Fri 28 Oct 2022 10:33:58 +0000
ROA not before: Fri 28 Oct 2022 10:33:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.117.32.0/23 maxlen: 24
89.116.218.0/24 maxlen: 24
89.117.190.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.117.129.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:d7:db:65:cd:b1:92:52:2b:18:11:ae:d6:68:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2995037786e948b0b5e33999c29ad2419720249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d5:e2:f6:b8:d8:bc:c7:6c:2a:23:b1:ea:b2:
49:f1:92:5d:b4:d8:79:4d:9a:da:39:c6:aa:55:46:
bd:a8:2b:9d:2b:54:39:d8:3b:2a:25:da:ab:ce:02:
c3:20:86:c3:ca:97:22:ed:7d:82:21:ca:da:f2:5a:
e5:bd:02:f9:88:57:d2:15:a8:93:7b:8f:92:35:36:
b7:3b:54:99:77:75:af:08:38:3c:4e:bb:eb:f6:39:
6d:37:88:09:f2:a5:23:4d:c4:c0:5f:63:d4:39:22:
a6:0f:9e:f2:7e:8b:36:38:59:95:65:32:5d:09:cc:
f7:58:b5:a5:59:4c:7b:5a:91:68:b1:09:c1:37:7c:
18:16:af:46:e2:70:30:fe:c2:22:57:1f:66:dd:55:
45:74:ae:3d:19:5e:eb:ac:4c:9c:e4:b5:e1:d7:2f:
92:49:0d:7d:d6:87:92:b0:d8:ab:c7:cb:f9:bd:01:
73:16:df:70:08:51:ec:9b:20:6a:2a:dc:6f:95:32:
07:cd:87:a8:58:d5:74:28:7d:7e:d5:e2:4d:1a:82:
de:f5:5c:13:e3:8f:af:2a:38:f0:69:d7:00:73:62:
17:fc:5d:a6:83:36:14:0c:ef:4b:ee:d1:39:51:35:
92:02:2f:c6:19:8a:5b:cd:fb:71:cb:dc:2c:fd:98:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:99:50:37:78:6E:94:8B:0B:5E:33:99:9C:29:AD:24:19:72:02:49
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/4plQN3hulIsLXjOZnCmtJBlyAkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.163.0/24
89.116.166.0/24
89.116.175.0/24
89.116.177.0/24
89.116.218.0/24
89.116.252.0/24
89.117.32.0/23
89.117.109.0/24
89.117.129.0/24
89.117.190.0/24
89.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ef:f9:02:ff:e8:e0:3b:51:8a:56:e9:d6:3c:0c:c3:47:01:
d9:9c:a2:05:d0:c1:f7:5d:bc:b1:81:e9:5d:a2:0c:b9:f7:6e:
f9:70:4a:f1:4f:3a:47:6f:a7:08:50:c4:f8:ca:85:d6:f4:17:
29:86:3d:e7:f5:35:f5:36:b4:35:27:5f:14:6c:75:11:7d:b8:
01:d6:3d:57:7e:0f:55:4d:27:5f:6b:e5:99:6f:e3:85:bb:20:
7f:09:37:77:ef:38:fc:8d:8b:a2:2b:93:79:88:44:86:76:23:
9e:98:2b:59:d0:75:15:ee:65:a7:dd:03:26:41:a9:24:72:0f:
b6:6e:90:1c:0c:63:32:b3:99:71:83:ec:bc:0e:5e:e7:42:26:
26:d2:c9:68:b6:ae:1c:80:65:24:9c:96:cc:a6:08:02:c3:32:
4e:f9:e8:03:76:91:6e:ec:61:50:90:21:b3:f1:f5:ee:df:f6:
50:0d:0d:c4:44:87:55:37:63:c9:2b:aa:d2:b4:a3:e1:2f:65:
4a:f3:9e:7b:bd:85:3f:b0:44:09:98:19:6a:a8:db:f8:d9:2c:
6c:b3:6d:26:00:e0:5a:8e:1e:8a:53:7c:05:c3:79:8c:7f:04:
1c:a4:15:e2:18:d4:e5:43:98:00:78:60:38:25:b9:ca:c9:ac:
dd:20:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:18 2024 by rpki-client on console-fra.rpki-client.org