Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/PQ6HeGS_Zj0R_weNWqPbj2y3bK8.roa
File: PQ6HeGS_Zj0R_weNWqPbj2y3bK8.roa (raw, json)
Hash identifier: Ev/pLlke46h2OTAe00rkWtOElVnaFzlFQwNsQgkDzcE=
Subject key identifier: 3D:0E:87:78:64:BF:66:3D:11:FF:07:8D:5A:A3:DB:8F:6C:B7:6C:AF
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27D046B0E697624C7FF16D8E733AC9
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/PQ6HeGS_Zj0R_weNWqPbj2y3bK8.roa
Signing time: Fri 28 Oct 2022 10:33:56 +0000
ROA not before: Fri 28 Oct 2022 10:33:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 86.38.242.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.117.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:d0:46:b0:e6:97:62:4c:7f:f1:6d:8e:73:3a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d0e877864bf663d11ff078d5aa3db8f6cb76caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:b2:be:e1:88:5b:ec:b0:50:cb:87:89:83:
9b:04:78:07:7d:f4:10:9b:0f:42:47:d7:b3:76:0d:
68:b9:51:c7:52:34:3b:d4:cb:d3:ef:e4:f9:c3:c8:
33:3d:46:b7:d7:21:d3:3a:70:d1:33:f0:56:4d:47:
19:d2:31:f2:22:79:d7:b0:b3:d1:e0:3b:93:3f:a0:
93:e4:c7:9e:ee:e9:38:22:87:69:d4:07:b1:72:d5:
8c:4f:8c:2e:16:c4:09:d3:91:00:69:53:1a:a7:8e:
87:9e:82:c5:a8:6d:39:b8:0d:2a:ec:de:03:a8:d5:
90:c5:0b:df:03:19:e1:71:28:54:73:96:c6:a8:7c:
9f:ab:45:17:21:69:ce:97:65:a6:a9:3b:84:cf:7f:
eb:85:4d:b7:ab:4d:df:d2:39:88:e8:ab:dc:d2:06:
b5:d5:21:15:dd:05:c9:d8:72:95:ae:1f:2b:95:b7:
42:9b:3b:65:64:6d:00:f3:55:3a:af:da:71:0e:7d:
a0:89:2f:75:db:b0:8f:11:2d:ff:bb:b2:a0:b6:e0:
f2:1e:25:6d:8e:02:7e:7d:3a:08:aa:84:bd:05:e7:
36:fb:54:da:cd:ee:bc:15:53:a1:b8:70:76:0d:38:
19:d0:88:04:dc:ca:07:7e:ec:1d:cc:08:7b:09:c1:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0E:87:78:64:BF:66:3D:11:FF:07:8D:5A:A3:DB:8F:6C:B7:6C:AF
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/PQ6HeGS_Zj0R_weNWqPbj2y3bK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.242.0/23
89.116.68.0/23
89.117.142.0/23
Signature Algorithm: sha256WithRSAEncryption
71:8b:42:50:8a:41:55:28:23:b5:d8:b3:ec:26:b1:fb:2f:30:
0c:2e:63:e0:34:7b:5c:53:df:0c:6c:71:ec:e5:cf:0a:28:96:
54:fc:91:74:a5:86:7a:4c:f9:60:99:e0:68:bb:87:61:66:dc:
68:1c:99:88:e1:f3:aa:1e:f7:3a:23:d9:f2:03:2b:55:4c:1f:
1e:d0:aa:30:7f:eb:0c:0c:24:92:7a:05:0a:54:2c:9f:51:38:
74:8b:99:10:a2:a7:73:0a:18:d3:03:11:4a:9d:dc:bd:3b:bf:
87:aa:1a:f2:2e:e1:3b:8f:67:10:fa:bd:07:0c:5e:67:fe:41:
9e:d0:75:60:40:cc:33:66:82:82:f9:0e:49:29:19:da:7c:da:
d5:e3:a2:aa:f4:b8:2a:8c:ab:42:83:2d:93:27:76:49:99:a4:
c3:1a:a4:9f:42:ef:ef:2a:92:e1:b0:85:56:ac:de:73:e9:21:
57:ea:ac:a9:6a:c8:34:ab:7f:f7:42:9f:b5:e1:57:47:65:28:
d8:84:3f:86:ad:4d:7a:ca:ec:5a:16:48:ed:f6:bb:d6:93:fa:
ac:8e:92:52:35:2a:99:46:da:1b:09:6f:98:eb:cf:74:fc:ac:
39:b1:f5:dc:84:07:56:0e:e1:bc:00:0c:b2:5d:51:0a:77:44:
98:ae:64:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:44 2025 by rpki-client