Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/Ot7S6_tGME-yowZldmTTBiP3ZIk.roa
File: Ot7S6_tGME-yowZldmTTBiP3ZIk.roa (raw, json)
Hash identifier: 9qRv7W0s9FQtBBA8OxntsYwTD0fgyMxGi/WfFvX3u+w=
Subject key identifier: 3A:DE:D2:EB:FB:46:30:4F:B2:A3:06:65:76:64:D3:06:23:F7:64:89
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27CCB44E2BA451812F0ABD0A733A50
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/Ot7S6_tGME-yowZldmTTBiP3ZIk.roa
Signing time: Fri 28 Oct 2022 10:33:55 +0000
ROA not before: Fri 28 Oct 2022 10:33:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 89.116.236.0/24 maxlen: 24
89.116.198.0/24 maxlen: 24
86.38.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:cc:b4:4e:2b:a4:51:81:2f:0a:bd:0a:73:3a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3aded2ebfb46304fb2a306657664d30623f76489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:f6:38:fe:ed:9c:15:4c:51:85:bb:32:96:
db:12:6f:f1:26:74:f0:31:84:aa:98:57:ff:a5:78:
8d:a1:a8:25:32:cd:90:fd:0c:aa:5e:0d:a9:45:a0:
9f:56:d7:00:61:6e:1e:16:f3:d8:b3:c2:51:04:b0:
d5:26:2d:da:79:84:3d:db:9c:cb:0a:76:c2:5b:98:
0c:2f:1f:43:f3:07:8e:84:fb:7e:2f:0f:f6:49:e7:
71:08:23:5a:5c:64:7a:67:88:eb:a5:4a:ec:6d:e7:
ea:c5:fd:05:3d:26:4b:5c:6b:99:82:73:68:b1:fd:
d7:4f:3f:5f:fa:7e:90:37:9f:76:29:58:48:fa:18:
9b:97:cc:a1:7d:ff:2e:d8:1f:df:08:62:2b:ee:91:
9f:0e:23:41:b0:53:6b:27:29:03:16:07:e0:a7:d9:
69:d4:73:52:69:19:fa:97:9c:55:c4:b1:df:c2:93:
ab:26:80:33:6a:e2:d8:1e:21:fb:80:7a:bf:c2:72:
a7:aa:7e:60:cb:9a:09:28:49:14:1c:a6:55:46:40:
6b:3a:48:6e:0d:0d:8b:47:5c:73:85:02:17:bb:68:
ad:75:92:6f:a8:af:3e:77:fa:09:0d:c2:2d:c5:8f:
a3:09:73:82:47:2e:be:de:d0:7d:c9:72:aa:5a:8b:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DE:D2:EB:FB:46:30:4F:B2:A3:06:65:76:64:D3:06:23:F7:64:89
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/Ot7S6_tGME-yowZldmTTBiP3ZIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.24.0/24
89.116.198.0/24
89.116.236.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:6b:e7:ad:35:5f:b8:b6:e7:1e:83:2a:7b:84:d0:e6:cf:77:
cb:b2:12:0b:8e:5a:e4:64:92:af:4b:f6:89:d9:e7:ba:a0:bc:
1c:b4:f4:33:19:29:f6:b2:ab:ec:7c:80:ea:20:4a:e9:e5:8e:
e1:be:0e:4c:67:50:e4:6a:f7:9c:10:81:a5:39:8d:1f:9b:5e:
52:83:08:b1:71:5a:86:25:f0:ab:39:e3:97:3a:e9:bd:92:b1:
52:bf:f2:12:fe:44:a0:01:6a:7d:8f:46:3c:47:9d:15:1d:2d:
52:22:20:08:7c:bd:ea:14:2b:2b:09:4c:50:33:3b:8d:bd:fc:
49:3e:6b:81:60:ca:2e:db:86:6b:e4:8e:3c:c0:af:31:7e:f6:
1c:58:56:2a:82:a6:c1:e2:0a:11:65:29:d5:28:48:a4:5a:12:
2c:bf:dc:39:a8:49:6d:21:6e:2a:c4:90:28:04:e5:b1:d4:4f:
e3:89:5d:98:61:53:54:a3:f1:c3:09:2e:1b:d6:06:e4:a2:07:
33:e4:e6:a2:01:f6:07:7f:0c:2d:80:df:47:5a:ab:03:77:3c:
4d:0c:e6:95:97:59:f0:46:1c:2c:7e:f8:ef:d6:63:93:b8:76:
6a:57:45:c4:54:2d:70:fb:a9:c3:e5:26:6a:84:ad:10:14:91:
d0:ff:f8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org