Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/OlTFip0x9PT9dpNeuOJVVAetBZo.roa
File: OlTFip0x9PT9dpNeuOJVVAetBZo.roa (raw, json)
Hash identifier: ytSyK67wfoAJW2jz2w1Hj+321lFOmqckLkeVww7B0No=
Subject key identifier: 3A:54:C5:8A:9D:31:F4:F4:FD:76:93:5E:B8:E2:55:54:07:AD:05:9A
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27DEC01ABD00A72B4CBCC3C176CC9A
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/OlTFip0x9PT9dpNeuOJVVAetBZo.roa
Signing time: Fri 28 Oct 2022 10:34:00 +0000
ROA not before: Fri 28 Oct 2022 10:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 89.116.255.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:de:c0:1a:bd:00:a7:2b:4c:bc:c3:c1:76:cc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a54c58a9d31f4f4fd76935eb8e2555407ad059a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:23:62:69:cb:59:40:69:ad:aa:e0:25:0f:
ed:ed:0b:3b:48:92:5f:9e:2d:7c:95:e1:60:0a:32:
6f:54:a7:a6:ab:cb:c7:ba:09:c1:c1:6e:cf:36:9b:
7e:f3:c4:c8:25:70:44:d7:68:0c:f8:ca:57:4f:64:
5f:ee:f7:ce:c1:11:5c:80:76:1f:21:86:18:5f:cf:
09:ab:74:31:03:fb:c3:af:04:b7:bc:4f:45:bb:47:
46:89:07:3c:0a:7f:8e:b3:bd:01:f0:a4:d0:8d:17:
56:3e:6d:41:1f:78:33:c5:e7:f1:ee:4e:3e:fb:94:
54:7d:28:8a:4b:61:a3:08:4f:38:2c:72:26:c5:87:
61:05:13:27:61:e6:bf:44:42:74:ac:82:c2:0d:08:
ab:9b:65:b0:25:13:ea:42:34:a4:2f:03:d5:7d:43:
c2:0e:2a:e5:b5:f4:9b:3c:42:a2:5a:5d:f6:fe:ef:
18:a6:4d:e2:9e:b0:37:a6:1b:37:d4:3f:d7:8b:c2:
94:d5:15:6b:9c:d2:b8:f5:0d:9c:1b:04:d0:15:82:
2d:93:3e:9e:9a:2d:58:73:b6:f3:9e:26:1a:0e:64:
94:eb:8f:f2:28:07:05:ba:1e:2b:57:8f:7c:12:9e:
44:0a:e1:85:77:ed:77:15:f6:9b:b4:b3:d5:ee:48:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:54:C5:8A:9D:31:F4:F4:FD:76:93:5E:B8:E2:55:54:07:AD:05:9A
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/OlTFip0x9PT9dpNeuOJVVAetBZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.238.0/24
89.116.179.0/24
89.116.255.0/24
89.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a3:f9:5b:61:18:a0:a6:ea:49:1e:a5:b7:e0:35:90:2f:3e:
96:f9:37:72:9b:c4:c3:b6:9b:18:5e:10:ce:c6:7d:c3:48:fb:
69:56:16:d3:4d:09:91:fd:af:5b:46:42:34:e8:cb:b0:eb:4f:
db:4b:34:ee:58:0d:b4:57:92:a4:51:2b:fc:c1:6f:19:4c:57:
d9:ee:1d:e0:62:a2:ec:81:26:fe:6a:01:90:03:d9:b4:ee:47:
4d:f9:39:98:2e:05:46:7e:e1:16:60:b1:b4:38:c3:e9:27:e4:
b7:74:5a:a5:7d:41:33:e5:58:b1:0b:71:f5:df:2b:71:fd:a7:
0b:66:43:af:93:3c:ec:fe:9a:81:82:f0:a2:fd:a7:24:27:8a:
97:96:b1:3a:f8:5f:d5:15:f1:80:85:3d:8c:a9:34:ea:fe:98:
cb:fb:99:4e:b6:ff:c7:5e:1c:c2:d0:97:ec:ef:5f:84:ee:d2:
3d:b3:32:2c:44:58:2f:3c:f6:79:31:09:ef:ea:eb:c0:a5:e7:
07:68:37:4e:d7:17:71:7b:33:1f:d8:82:d2:75:cd:a6:ea:2a:
17:83:8a:a0:56:2f:ea:37:7b:f9:c1:b2:2a:16:0e:3f:56:c4:
59:26:db:d5:1f:31:9e:97:fe:61:78:70:a1:2e:87:02:3c:13:
3e:13:68:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org