Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/P9W6E4ACJeT07TWk1cwyzqFFCz4.roa
File: P9W6E4ACJeT07TWk1cwyzqFFCz4.roa (raw, json)
Hash identifier: rD7r02EPqeHD8gmhY/5yXryEBihQgkHY+LFxEEQbeMI=
Subject key identifier: 3F:D5:BA:13:80:02:25:E4:F4:ED:35:A4:D5:CC:32:CE:A1:45:0B:3E
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 0184332D31A0A26C79FB42FFBCA7BC9B49FF
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/P9W6E4ACJeT07TWk1cwyzqFFCz4.roa
Signing time: Tue 01 Nov 2022 12:31:50 +0000
ROA not before: Tue 01 Nov 2022 12:31:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 89.116.132.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.117.215.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:2d:31:a0:a2:6c:79:fb:42:ff:bc:a7:bc:9b:49:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Nov 1 12:31:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fd5ba13800225e4f4ed35a4d5cc32cea1450b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4b:43:72:e8:59:6f:90:0b:b0:28:8d:95:11:
e5:c7:ab:b7:c0:12:80:0e:5b:f2:be:12:df:fc:93:
e7:d1:8d:d4:93:62:03:fb:ea:a2:dc:ef:0a:1f:7d:
2d:dd:fd:77:5e:02:10:dd:5e:ed:11:b3:45:0a:75:
84:49:88:9f:84:fd:c5:b0:08:be:71:f0:20:1e:3f:
eb:9b:d9:fd:ec:bd:14:fa:ef:86:77:8c:f3:e6:a5:
9e:80:cd:03:51:75:05:d0:4a:ee:65:af:99:78:51:
91:29:55:bf:d2:42:a8:18:4a:ff:ef:37:5c:81:1f:
ef:36:59:3d:16:14:8f:1f:bf:6a:9f:be:d1:5d:a0:
db:4b:06:22:a9:f8:07:75:42:5d:5b:95:ad:ba:41:
85:09:70:59:3f:15:18:f4:3f:e1:fb:13:03:ec:95:
1c:00:87:86:b0:5b:32:0f:0f:c2:30:5d:55:07:47:
7f:5e:7a:7e:8e:ea:3b:25:f4:15:e5:58:3a:0c:ce:
7f:ce:5e:ea:24:a6:38:be:11:86:47:69:61:aa:15:
a1:6e:21:f5:97:21:99:a7:65:22:b3:8c:73:60:13:
b2:1f:d2:54:64:81:52:5b:77:dc:42:7a:59:d0:52:
39:f9:ec:cd:9c:f7:39:e2:4a:ec:1f:93:80:87:de:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D5:BA:13:80:02:25:E4:F4:ED:35:A4:D5:CC:32:CE:A1:45:0B:3E
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/P9W6E4ACJeT07TWk1cwyzqFFCz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.238.0/24
89.116.132.0/24
89.116.166.0/24
89.116.179.0/24
89.116.253.0/24
89.116.255.0/24
89.117.215.0/24
89.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5a:6e:19:d1:42:83:f4:4b:49:fe:cf:dc:1b:41:a4:ad:62:
d9:b8:ca:45:df:2e:a9:a4:4b:2e:79:b5:ea:db:d4:8c:08:51:
88:f4:e8:73:81:e0:61:94:dc:33:63:2f:6d:db:b4:4d:5d:b1:
0b:33:ee:13:4d:aa:a3:ba:2c:e3:43:a5:40:86:ee:29:59:08:
45:71:06:fd:bf:65:35:93:c1:4d:e9:d5:59:7d:59:19:93:91:
f9:4f:d3:dd:83:c0:dc:42:9b:d7:a9:8c:e9:82:52:ae:98:24:
53:3b:5c:eb:01:24:ac:27:a8:a6:8e:a6:5b:2b:22:9f:77:29:
32:a5:bc:c7:1a:a7:dd:57:f9:50:76:1c:a9:15:38:c5:26:ea:
30:28:b7:8f:da:3b:00:f8:6b:e5:e9:20:bf:e5:a5:51:29:e3:
96:c3:ed:b7:d5:5f:cc:6a:bb:92:a1:fc:04:c1:c0:b4:13:16:
72:60:db:9b:50:48:c1:62:bb:8c:e2:4c:ac:74:fa:63:ab:95:
4a:fa:d2:be:a3:fc:b7:22:6b:2d:23:65:6c:0b:71:3a:47:a1:
0d:4b:02:ea:70:53:fb:c0:db:1e:68:95:b8:2e:0b:d9:d5:38:
94:49:18:c9:1b:92:9e:79:f3:b4:d2:fd:2a:4b:fe:0a:e6:f1:
45:7d:0d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org