Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/NzNgCuxM-_91co4_QuforKAjqLM.roa
File: NzNgCuxM-_91co4_QuforKAjqLM.roa (raw, json)
Hash identifier: +ttxleF7LtAw0RirPpxAIHlTxPhLQvg+XDUjDo1o/gA=
Subject key identifier: 37:33:60:0A:EC:4C:FB:FF:75:72:8E:3F:42:E7:E8:AC:A0:23:A8:B3
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27BD474A9C57639F293FBD36B0E02C
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/NzNgCuxM-_91co4_QuforKAjqLM.roa
Signing time: Fri 28 Oct 2022 10:33:51 +0000
ROA not before: Fri 28 Oct 2022 10:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.37.0/24 maxlen: 24
86.38.248.0/21 maxlen: 24
86.38.156.0/24 maxlen: 24
89.116.248.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.116.64.0/22 maxlen: 24
89.117.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:bd:47:4a:9c:57:63:9f:29:3f:bd:36:b0:e0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3733600aec4cfbff75728e3f42e7e8aca023a8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:87:b8:af:fc:44:2e:77:b3:9f:ad:e6:f8:
b7:08:d8:1d:c1:4b:07:8b:23:8c:ea:cc:d3:34:ad:
71:87:a2:14:53:d8:bc:96:12:cd:f7:1d:d6:2d:6b:
6b:f4:75:5a:89:d5:85:1f:9e:fa:bf:27:62:74:b1:
94:24:ce:ff:65:45:34:3a:35:fd:96:59:fe:17:a8:
3e:8e:9f:b4:79:f3:a1:48:e0:d6:c7:ff:33:4b:f7:
74:a0:16:87:c6:5c:75:06:74:e8:1b:1b:a6:49:57:
05:f5:f0:a3:a8:9b:b2:52:bb:3f:ba:45:08:67:ea:
84:bf:93:39:11:2a:fb:e0:70:7a:d3:75:a8:f2:c6:
68:47:39:26:80:fc:80:5b:33:f0:d8:f1:65:36:ef:
12:b7:63:e3:83:e7:68:46:00:15:77:5b:59:5c:55:
81:48:8e:b5:77:6e:b2:1a:ff:d8:e9:ff:f6:be:a8:
a8:d8:95:f8:12:86:1a:c1:0e:35:7e:71:3f:19:0c:
82:12:c2:36:32:d0:b0:48:a1:8e:22:0e:a3:f2:67:
69:d9:20:68:04:5d:55:7e:1b:b2:80:81:91:aa:48:
b8:6c:53:c7:fe:87:b7:19:2a:82:9a:4e:08:fd:95:
46:0a:85:cd:8e:d5:ae:ef:3b:07:a6:1c:9b:30:d7:
93:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:33:60:0A:EC:4C:FB:FF:75:72:8E:3F:42:E7:E8:AC:A0:23:A8:B3
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/NzNgCuxM-_91co4_QuforKAjqLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.240.0/20
86.38.37.0/24
86.38.156.0/24
86.38.177.0/24
86.38.248.0/21
89.116.64.0/22
89.116.248.0/24
89.117.172.0/22
Signature Algorithm: sha256WithRSAEncryption
67:b8:12:cd:26:1d:b9:ba:1e:d4:13:58:2b:85:3e:f9:58:8c:
27:81:51:9e:79:5c:0b:e9:01:94:1f:44:8f:11:13:ef:35:47:
2b:8a:1c:f8:b7:72:de:1e:44:93:ce:07:de:a4:6a:bb:53:8f:
3e:a8:56:34:83:b2:78:a2:cd:4f:73:03:ff:b6:f4:ea:54:82:
76:8a:03:41:09:fe:4f:75:37:c2:71:ca:bb:d5:52:35:5d:d9:
64:7b:a6:2c:4e:3b:d5:96:f7:89:17:6c:a4:6f:df:92:22:f9:
ac:d9:df:f8:b2:f1:47:b5:ea:ba:46:50:2b:24:ba:67:da:80:
7a:fb:3c:af:96:0e:d8:03:5d:21:96:06:7c:81:ff:30:2f:51:
9f:79:b1:66:9b:ff:c4:5d:cb:49:3f:6f:1c:49:e8:43:1c:7b:
85:06:8e:dc:00:da:94:18:b2:36:17:d9:50:1a:bb:c5:f6:37:
9b:f2:4a:1f:95:da:84:07:a0:bd:ee:19:c2:34:35:41:b4:15:
db:2a:57:7c:8d:cc:3f:66:7f:58:b6:d6:bf:73:5e:db:00:bd:
5a:79:e1:4c:48:c6:45:c6:37:db:91:5d:6b:91:b5:f7:b2:23:
c7:d1:96:5a:e5:0c:5a:58:a0:5f:b8:d6:de:a0:da:c7:5a:a4:
22:41:2d:45
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYQeJ71HSpxXY58pP702sOAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI4MTAzMzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzMzNjAwYWVjNGNmYmZmNzU3MjhlM2Y0MmU3ZThhY2EwMjNhOGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl+HuK/8RC53s5+t5vi3CNgdwUsH
iyOM6szTNK1xh6IUU9i8lhLN9x3WLWtr9HVaidWFH576vydidLGUJM7/ZUU0OjX9
lln+F6g+jp+0efOhSODWx/8zS/d0oBaHxlx1BnToGxumSVcF9fCjqJuyUrs/ukUI
Z+qEv5M5ESr74HB603Wo8sZoRzkmgPyAWzPw2PFlNu8St2Pjg+doRgAVd1tZXFWB
SI61d26yGv/Y6f/2vqio2JX4EoYawQ41fnE/GQyCEsI2MtCwSKGOIg6j8mdp2SBo
BF1VfhuygIGRqki4bFPH/oe3GSqCmk4I/ZVGCoXNjtWu7zsHphybMNeTMQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFDczYArsTPv/dXKOP0Ln6KygI6izMB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvTnpOZ0N1eE0tXzkxY280X1F1Zm9yS0FqcUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQEVC7wAwQA
ViYlAwQAViacAwQAViaxAwQDVib4AwQCWXRAAwQAWXT4AwQCWXWsMA0GCSqGSIb3
DQEBCwUAA4IBAQBnuBLNJh25uh7UE1grhT75WIwngVGeeVwL6QGUH0SPERPvNUcr
ihz4t3LeHkSTzgfepGq7U48+qFY0g7J4os1PcwP/tvTqVIJ2igNBCf5PdTfCccq7
1VI1Xdlke6YsTjvVlveJF2ykb9+SIvms2d/4svFHteq6RlArJLpn2oB6+zyvlg7Y
A10hlgZ8gf8wL1GfebFmm//EXctJP28cSehDHHuFBo7cANqUGLI2F9lQGrvF9jeb
8kofldqEB6C97hnCNDVBtBXbKld8jcw/Zn9Ytta/c17bAL1aeeFMSMZFxjfbkV1r
kbX3siPH0ZZa5QxaWKBfuNbeoNrHWqQiQS1F
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org