Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/S-d7jhNcAi3RwI0qUEpAr_I-xno.roa
File: S-d7jhNcAi3RwI0qUEpAr_I-xno.roa (raw, json)
Hash identifier: l3omxZlhQOLp5F4DZtk8UlNFElhD7gVXfdSLXihUhlo=
Subject key identifier: 4B:E7:7B:8E:13:5C:02:2D:D1:C0:8D:2A:50:4A:40:AF:F2:3E:C6:7A
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01843C9C5A604BD98654FBC30DAF38A06DD4
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/S-d7jhNcAi3RwI0qUEpAr_I-xno.roa
Signing time: Thu 03 Nov 2022 08:29:50 +0000
ROA not before: Thu 03 Nov 2022 08:29:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 86.38.246.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.117.94.0/23 maxlen: 24
89.116.150.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:9c:5a:60:4b:d9:86:54:fb:c3:0d:af:38:a0:6d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Nov 3 08:29:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4be77b8e135c022dd1c08d2a504a40aff23ec67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:5e:71:7e:85:9a:13:6f:a1:07:f8:76:74:
3a:9e:4c:de:d1:b1:ce:98:8b:18:c5:8d:44:42:60:
c1:64:35:d0:eb:d0:d6:b5:c5:6f:78:25:b2:e3:3c:
b3:34:a5:1d:a4:66:b9:a0:3d:1c:6f:77:92:d2:f4:
af:16:20:bd:eb:57:a0:0f:53:5f:72:c4:b7:ef:f7:
3d:a5:08:f1:dd:c6:47:5c:81:1b:56:fe:4f:dd:1b:
d4:9e:a4:6a:64:af:18:44:d8:23:44:41:b0:36:06:
a4:c9:0b:09:62:08:77:23:8b:bc:ba:27:d3:d0:1c:
e9:55:d0:4e:57:97:f8:e0:54:6d:f7:c9:1e:30:dd:
c2:54:fd:39:dc:79:d8:27:75:76:43:5c:ba:dd:b5:
ca:22:52:71:a3:c6:12:59:75:06:5d:87:9a:92:61:
3d:35:d7:c4:57:d2:56:78:6e:41:d7:88:cb:f8:f3:
84:3e:d1:e1:fb:bf:26:97:e3:cc:1e:c9:dd:4d:fa:
14:fc:1d:9d:f0:90:f9:ce:37:8f:3e:f2:2c:96:83:
59:f7:db:19:1f:af:93:56:f9:d4:f8:8b:c5:de:03:
30:81:d0:1a:23:04:83:a1:01:32:78:38:8b:c8:f5:
63:77:69:a2:5a:f4:d3:fe:fb:95:b5:85:2b:0d:89:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E7:7B:8E:13:5C:02:2D:D1:C0:8D:2A:50:4A:40:AF:F2:3E:C6:7A
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/S-d7jhNcAi3RwI0qUEpAr_I-xno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.108.0/24
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.210.0/23
89.116.252.0/24
89.117.32.0/23
89.117.94.0/23
89.117.116.0/23
89.117.190.0/24
89.117.222.0/24
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
af:b7:27:3c:e0:50:15:bd:94:6d:71:ca:56:2d:bf:b4:81:9e:
0d:93:a7:ca:40:ab:54:3e:cb:0f:16:67:0c:8e:22:90:f9:dc:
8c:bf:3c:56:9a:d9:7d:e0:c6:95:41:7a:7d:73:be:54:aa:72:
f7:82:b0:71:9c:0c:6a:8d:ca:e5:bc:f0:1a:59:66:88:31:56:
fc:2a:33:34:2b:4f:2b:24:43:16:6c:b3:a1:9a:5b:6a:dd:13:
fb:c2:13:40:d1:86:5e:4d:b7:43:da:8f:41:e5:45:10:7e:25:
ac:d3:9f:3b:12:f9:23:9d:e8:ba:3a:c1:d2:38:0c:cb:19:1d:
9f:67:85:bd:8a:fb:fe:33:23:80:28:00:06:6a:21:b4:4b:e3:
80:b2:5f:18:ef:4b:2d:91:44:0d:fb:0d:62:9e:66:2e:22:66:
91:33:e9:a9:6f:1d:6e:b6:5b:bc:d0:2c:5a:ba:4f:93:66:a6:
42:f9:77:42:c2:b2:a1:4b:ed:8c:77:d0:ed:71:43:07:1b:70:
c3:e4:a8:e8:33:dc:70:ba:24:16:c5:54:9d:c4:c7:ac:09:d2:
f3:9f:14:13:2e:28:96:9d:b2:69:02:4f:a6:a4:e5:8a:a1:48:
bb:48:30:9b:cf:36:af:18:e8:50:a9:d1:a5:e0:ba:89:71:f6:
b1:19:09:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org