Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/EMiqKBBZFpPzmsmaxanxCfMLvbY.roa
File: EMiqKBBZFpPzmsmaxanxCfMLvbY.roa (raw, json)
Hash identifier: MES5FrqDqrj1MPD6amrPBqDJq8wh5CAvXtZxHeWbgek=
Subject key identifier: 10:C8:AA:28:10:59:16:93:F3:9A:C9:9A:C5:A9:F1:09:F3:0B:BD:B6
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27BCAA7035CA6A2CAE4D05AC50D4E8
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/EMiqKBBZFpPzmsmaxanxCfMLvbY.roa
Signing time: Fri 28 Oct 2022 10:33:51 +0000
ROA not before: Fri 28 Oct 2022 10:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 89.117.68.0/24 maxlen: 24
89.117.72.0/21 maxlen: 24
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.130.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.112.0/24 maxlen: 24
89.116.113.0/24 maxlen: 24
89.116.115.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.70.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.116.99.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.223.0/24 maxlen: 24
89.116.220.0/24 maxlen: 24
89.116.233.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.171.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
89.116.208.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:bc:aa:70:35:ca:6a:2c:ae:4d:05:ac:50:d4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10c8aa2810591693f39ac99ac5a9f109f30bbdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:f8:c7:ce:5e:c8:64:6a:39:68:5c:38:49:
ed:d7:bb:07:7d:97:24:55:5a:75:76:e9:04:b4:da:
c4:cd:00:e1:92:ee:e4:a6:10:18:de:71:39:b1:e9:
d3:7d:13:11:0f:7d:f3:b8:e3:75:41:5e:dc:43:66:
15:f1:cc:50:f8:4d:46:56:3b:fc:ef:d3:e7:c3:17:
36:a2:a4:a7:fe:a6:32:a2:3e:60:36:db:7a:86:3b:
78:43:2c:54:28:9d:b6:8b:47:97:98:6a:2a:fe:e4:
45:be:86:78:3a:09:39:87:70:9c:bf:e7:fa:1e:3e:
14:41:a5:4f:62:e9:32:ec:b2:42:fe:27:bf:47:3e:
2b:72:83:45:78:d1:68:24:95:0f:d4:86:0e:54:6a:
90:9e:58:33:7f:95:e2:16:62:f5:66:5a:b6:15:49:
d0:b0:3f:d1:bb:29:92:1b:f3:8d:ba:b9:32:d4:a8:
55:58:1f:8e:95:0e:9e:c4:43:16:d3:06:3b:eb:32:
4d:01:43:20:b8:01:27:97:fc:b4:77:d2:7b:6e:f1:
17:21:7d:c2:6f:6d:bc:bd:f6:50:60:50:8f:0a:cc:
01:93:f2:b8:90:bb:1b:2f:23:61:f3:79:78:3b:ff:
3a:2d:5d:d0:94:e2:cb:ec:8c:d5:2d:a4:24:ac:53:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C8:AA:28:10:59:16:93:F3:9A:C9:9A:C5:A9:F1:09:F3:0B:BD:B6
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/EMiqKBBZFpPzmsmaxanxCfMLvbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.202.0/23
89.116.70.0/24
89.116.99.0/24
89.116.112.0/23
89.116.115.0/24
89.116.135.0/24
89.116.156.0/24
89.116.161.0/24
89.116.171.0/24
89.116.175.0/24
89.116.177.0/24
89.116.193.0/24
89.116.203.0/24
89.116.208.0/24
89.116.210.0/23
89.116.218.0/24
89.116.220.0/24
89.116.223.0/24
89.116.233.0/24
89.116.252.0/24
89.117.28.0-89.117.33.255
89.117.68.0/24
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.109.0/24
89.117.129.0-89.117.130.255
89.117.132.0/22
89.117.142.0/23
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
11:94:c3:67:dd:51:2a:fa:b2:06:66:51:19:5f:60:32:76:f2:
ca:51:54:48:38:be:67:65:f9:5b:15:0b:b6:6e:fe:ad:9e:3d:
8e:1f:bc:b9:d9:e3:89:ba:a4:8f:7b:63:21:9e:f2:8e:02:fc:
ff:87:a6:e5:8b:06:9c:b2:e0:af:cb:c4:7a:b2:2c:9c:74:25:
24:10:5e:d9:d9:06:e7:cb:74:1d:d9:89:37:06:03:32:e6:f5:
63:cd:73:2a:ef:d3:ba:0b:72:01:88:91:3b:aa:49:eb:3a:0e:
ed:b0:7e:95:a0:c6:4c:ce:3b:46:9f:69:e2:d1:f9:aa:60:92:
24:b5:45:8c:b6:a7:7d:80:0b:92:b0:c6:d3:f5:90:b6:c3:64:
57:8b:40:8e:09:1f:be:74:96:2b:5a:f9:5b:38:c4:36:13:1c:
e5:6f:eb:d8:2d:ff:24:43:12:c0:97:f3:77:c3:aa:fe:35:80:
f4:e8:9f:88:45:e8:7d:63:f6:f2:51:da:e8:b7:a8:24:8a:8d:
13:36:13:53:0f:28:84:1c:9e:14:f2:cc:26:a7:08:74:0e:f8:
60:1f:21:50:67:97:1c:50:2e:ec:15:fc:be:ab:4d:29:07:f6:
27:55:e8:b5:85:ed:9e:43:10:c9:52:e8:97:f3:6f:0d:03:e6:
c9:bd:cf:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org