Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/CDgzwgVZpXLbrVAS9iJnVQXaJAE.roa
File: CDgzwgVZpXLbrVAS9iJnVQXaJAE.roa (raw, json)
Hash identifier: 3In2jrIRxXJn/J10Y9vZ04zTxeTzkG3OoXXIMC5qS80=
Subject key identifier: 08:38:33:C2:05:59:A5:72:DB:AD:50:12:F6:22:67:55:05:DA:24:01
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01843C9C594C285EC5FFB0C736639A9D51BD
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/CDgzwgVZpXLbrVAS9iJnVQXaJAE.roa
Signing time: Thu 03 Nov 2022 08:29:50 +0000
ROA not before: Thu 03 Nov 2022 08:29:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
89.117.245.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:9c:59:4c:28:5e:c5:ff:b0:c7:36:63:9a:9d:51:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Nov 3 08:29:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=083833c20559a572dbad5012f622675505da2401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:7e:03:43:5d:64:a8:65:e2:e3:de:52:83:
ce:46:61:e4:13:98:56:f7:a8:8b:66:17:d9:7e:b7:
d2:b0:37:98:17:1d:4f:92:c8:a1:b5:54:99:63:0d:
5a:91:e4:de:ef:ab:4a:73:81:d2:17:27:f9:21:58:
01:99:b3:6f:b5:d8:6c:5b:61:8d:2f:b0:4c:2b:ef:
2f:71:85:6c:0b:58:42:c0:d3:f9:e2:45:ef:75:37:
06:70:16:02:55:d5:67:38:b9:f0:d1:5a:30:52:d8:
cb:da:09:fa:4c:48:d6:0b:99:0c:53:7f:bc:41:50:
08:ef:e8:cb:24:03:4f:ee:84:de:15:25:fe:11:f6:
60:8c:cc:f2:6e:73:6d:47:6a:c2:a2:c7:db:12:11:
9e:7c:3c:04:e2:65:03:24:f0:63:c6:0c:42:de:1a:
19:e4:80:ea:8f:9c:1e:06:2b:b8:06:4a:67:6b:72:
71:d5:3d:21:5c:2c:6e:43:c9:dc:6c:06:2d:64:8b:
15:38:c9:67:ce:68:61:63:1d:60:fb:a6:c5:0e:16:
92:3b:85:34:19:b4:72:f4:23:6e:ef:fb:ce:da:e8:
8b:4c:d2:93:19:33:b9:7e:2b:57:24:35:c9:56:41:
23:65:2c:4d:36:53:9a:9c:e6:a6:56:f6:c0:32:44:
90:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:38:33:C2:05:59:A5:72:DB:AD:50:12:F6:22:67:55:05:DA:24:01
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/CDgzwgVZpXLbrVAS9iJnVQXaJAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.108.0/24
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.210.0/23
89.116.218.0/24
89.117.28.0-89.117.33.255
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.109.0/24
89.117.116.0/23
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.190.0/24
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
46:01:13:d4:01:a6:62:0c:c8:00:88:ea:3e:06:4a:e1:f0:4b:
2e:89:2f:1c:79:f0:64:45:9e:9c:06:fd:48:87:a3:3b:19:ef:
8a:18:ce:8e:ca:9b:8c:e8:3a:9a:d5:43:d7:46:f2:2b:03:9f:
dd:0f:fa:75:69:88:ae:0f:ef:25:12:f9:f0:6b:d1:d6:85:7b:
99:23:eb:b3:6a:d3:62:cc:a1:9f:c0:3f:d7:5e:3d:4a:44:b4:
71:d0:c4:20:21:e2:6d:ac:9d:3a:87:43:45:df:b7:96:28:c5:
ab:99:16:59:7e:ae:b0:96:c7:1a:52:87:e2:b8:0d:57:e5:65:
d3:a4:28:0c:78:50:94:f5:62:c8:49:83:71:23:df:95:36:b9:
56:31:b7:99:42:41:af:60:a8:17:ea:ea:aa:7e:01:9c:2c:e0:
c6:f2:dd:ad:b4:8b:b0:5d:13:bd:00:23:66:20:51:a2:bb:bf:
75:73:29:02:ba:fb:10:59:75:63:67:2d:5a:09:e7:5b:8a:98:
8d:61:fb:86:90:dd:00:54:51:66:95:b0:91:46:d9:3d:1f:1e:
96:c4:09:bd:7f:b6:67:fd:3f:ac:7f:57:b0:6b:b3:b8:c3:5e:
d5:c0:96:a6:48:9e:b3:4a:83:1c:6f:89:4f:2f:d8:ea:6d:dd:
d0:9e:8c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org