Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/EI8Fq4I_8d6VYAVyj13dZ4UK46I.roa
File: EI8Fq4I_8d6VYAVyj13dZ4UK46I.roa (raw, json)
Hash identifier: KxFXo4CdaaiFKhCqI2l7w0cMmMpM0VjiRKJcrr0myns=
Subject key identifier: 10:8F:05:AB:82:3F:F1:DE:95:60:05:72:8F:5D:DD:67:85:0A:E3:A2
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27BF0F98DF59DA725AEBEA98FB1380
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/EI8Fq4I_8d6VYAVyj13dZ4UK46I.roa
Signing time: Fri 28 Oct 2022 10:33:52 +0000
ROA not before: Fri 28 Oct 2022 10:33:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
86.38.178.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
86.38.186.0/23 maxlen: 24
89.117.16.0/21 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.80.0/21 maxlen: 24
86.38.4.0/23 maxlen: 24
86.38.220.0/23 maxlen: 24
84.46.236.0/22 maxlen: 24
84.46.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:bf:0f:98:df:59:da:72:5a:eb:ea:98:fb:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=108f05ab823ff1de956005728f5ddd67850ae3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1e:68:25:25:4c:28:4b:58:cd:1c:f1:bb:a3:
f0:ee:6d:ac:e9:d2:c4:31:51:b8:81:47:27:f7:a9:
14:b5:3f:ff:09:d0:17:f0:0f:eb:b2:35:48:1f:11:
8e:f0:1d:c8:a5:71:56:4f:1b:4b:07:82:bb:91:67:
a6:66:ec:1f:d0:b8:13:09:ea:6a:65:6d:e5:2b:66:
a7:9b:6a:72:4e:c0:99:7a:58:4d:d8:18:01:db:85:
48:ff:e4:01:45:ff:5a:04:87:cd:a1:4c:76:4a:9c:
fc:57:2e:bb:d6:1e:81:ef:8a:b4:6d:40:e2:b5:06:
eb:d8:b6:d1:c1:51:e8:3a:1c:b3:77:29:3c:45:3a:
c1:8a:8e:20:35:ff:31:4e:e5:67:0d:0a:e5:2c:c6:
51:77:6b:2c:d0:c0:e5:72:3b:7e:2f:ba:0f:91:f7:
68:57:ed:82:a9:46:ec:f6:d0:d3:a5:4a:49:32:90:
89:7a:ef:72:9b:9b:b4:d2:8b:b8:f3:a3:54:d1:5e:
76:c1:ca:ab:cd:77:12:ed:6e:85:48:7d:fd:1a:fd:
ff:cf:20:b5:48:31:46:de:92:7d:20:99:32:75:28:
62:d4:99:2a:a0:56:16:2b:8e:24:21:0a:dc:91:02:
bc:de:d2:6b:81:76:32:73:90:21:bc:c1:3b:62:8a:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8F:05:AB:82:3F:F1:DE:95:60:05:72:8F:5D:DD:67:85:0A:E3:A2
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/EI8Fq4I_8d6VYAVyj13dZ4UK46I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0-84.46.239.255
86.38.4.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.220.0/23
89.116.80.0/21
89.116.242.0/23
89.116.246.0/23
89.117.16.0/21
Signature Algorithm: sha256WithRSAEncryption
77:f4:d5:84:66:cd:29:d3:e2:0e:80:a6:63:3e:8a:63:1a:fa:
08:47:14:09:01:17:33:24:6a:7d:18:50:a6:1e:5c:ca:39:05:
e3:d4:e9:5d:f2:21:98:ea:e8:f7:9a:e7:59:da:8d:cb:c3:11:
0c:3b:ca:fa:1d:29:46:ec:76:81:fb:d5:44:f6:84:03:a7:7a:
5a:5d:0b:3e:26:0a:e3:b9:87:8e:0a:15:94:0e:fd:50:38:28:
c0:79:73:30:52:b8:f8:b5:9e:e8:ab:4c:2f:0f:c4:74:e0:11:
38:79:3f:c5:da:d3:87:45:3c:3e:43:78:0b:ce:51:6d:49:6d:
84:16:99:71:52:22:5d:90:7f:09:22:7d:2e:47:14:d1:08:ba:
24:02:f8:a3:a0:dc:5f:47:c2:16:ba:58:b0:b8:bf:f0:5a:48:
3e:9f:57:ce:6f:ab:a4:dc:3d:37:5f:cc:ce:d2:f0:48:f1:1a:
23:c5:39:ef:ba:f3:f3:39:cc:5f:23:23:b2:14:52:2c:21:c6:
78:c5:a6:7c:29:99:77:42:b8:96:6b:d5:1c:b1:45:c9:d8:a7:
51:0f:94:43:b2:2e:e8:2d:28:a0:d2:7f:d9:9c:d5:a3:45:1d:
94:48:76:08:a3:46:1d:c5:f8:e7:d7:f3:ea:08:21:d0:78:43:
69:e2:4c:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:18 2024 by rpki-client on console-fra.rpki-client.org