Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/VakvpoYOolacLPO3XBYXzjug5zU.roa
File: VakvpoYOolacLPO3XBYXzjug5zU.roa (raw, json)
Hash identifier: 1+RTDBpAH4DBbSuII8UgHS/4/GpMwTqhPuMGDeJIoXg=
Subject key identifier: 55:A9:2F:A6:86:0E:A2:56:9C:2C:F3:B7:5C:16:17:CE:3B:A0:E7:35
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27D1B50436B155D41166F50DB64323
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/VakvpoYOolacLPO3XBYXzjug5zU.roa
Signing time: Fri 28 Oct 2022 10:33:56 +0000
ROA not before: Fri 28 Oct 2022 10:33:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 89.116.115.0/24 maxlen: 24
86.38.37.0/24 maxlen: 24
89.117.94.0/23 maxlen: 24
84.46.171.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
86.38.200.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
86.38.7.0/24 maxlen: 24
89.116.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:d1:b5:04:36:b1:55:d4:11:66:f5:0d:b6:43:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55a92fa6860ea2569c2cf3b75c1617ce3ba0e735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:d8:ff:83:f9:4f:fd:b4:f6:00:38:37:66:
4d:d8:ac:fa:50:7d:34:4e:c2:ad:1f:99:92:8a:6f:
1b:c1:c7:a6:81:65:39:2a:df:8e:fa:f0:eb:1c:0b:
b8:06:de:40:b7:60:ae:db:43:69:8f:4b:e9:13:33:
1c:50:e4:72:71:aa:e5:49:c4:09:82:f5:2c:66:24:
28:b5:cc:57:da:49:bf:59:25:9c:7e:1c:31:3d:31:
e8:c4:94:67:b2:86:5c:55:d8:d6:d5:ba:cf:86:b6:
d3:e5:13:85:08:78:df:1b:78:e7:f5:f7:a6:15:37:
e4:4e:9c:82:53:3c:db:5b:bf:e9:cd:b6:86:6c:51:
1c:9d:6e:2d:98:5b:6c:8e:9d:a8:77:ea:12:12:09:
04:55:da:df:bf:f1:ac:c0:db:b4:86:1e:d9:b7:23:
86:33:72:50:e9:2d:b2:1f:ea:2d:c1:95:e4:4c:e1:
fd:a5:a7:fd:40:6d:77:79:bc:13:2e:8c:17:fb:b0:
3a:72:68:23:cf:a9:7b:b0:e9:67:9a:9a:08:ca:ad:
10:79:f5:1a:36:6d:28:ed:47:ae:85:5d:72:20:77:
1c:b0:8b:bb:db:d0:30:de:a3:2b:da:8f:15:2d:df:
c0:3e:dc:03:07:16:e0:da:6b:ee:64:f7:56:50:3f:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:2F:A6:86:0E:A2:56:9C:2C:F3:B7:5C:16:17:CE:3B:A0:E7:35
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/VakvpoYOolacLPO3XBYXzjug5zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.171.0/24
86.38.7.0/24
86.38.37.0/24
86.38.177.0/24
86.38.200.0/24
89.116.56.0/24
89.116.100.0/24
89.116.115.0/24
89.117.27.0/24
89.117.94.0/23
89.117.109.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:38:22:7c:27:b3:0e:12:03:e3:1a:8c:17:b4:3d:5e:f4:5e:
b5:c1:c1:ec:58:45:31:00:d7:92:63:73:11:90:92:c4:7c:0f:
5d:a5:f1:61:42:db:39:83:5b:c3:05:99:1c:8a:b6:9f:1c:b4:
cf:cf:b1:72:95:30:d1:43:3d:3b:ff:25:a3:a8:2b:5c:9f:75:
58:6c:fa:aa:9a:13:f6:2a:d4:42:17:1a:fe:54:41:5c:b1:00:
cd:44:2c:08:27:77:83:19:29:1c:0f:d1:a0:03:a2:41:2f:7c:
a9:36:96:ca:17:85:52:0c:ba:53:31:e7:d7:2a:78:ce:a0:bf:
75:e4:70:aa:13:03:ec:b5:4e:28:1e:2f:89:46:c6:55:8d:c2:
b5:ad:4f:e7:60:c6:23:5d:b5:f9:c7:b1:d1:82:ea:e5:60:c9:
fb:e6:2e:bd:0a:87:fd:e8:61:26:49:9f:37:b9:fe:69:64:80:
ff:e3:5b:b0:ae:45:73:ab:93:d0:65:f8:6f:ea:5b:a9:33:3d:
e3:43:7b:5d:fe:0c:57:ed:4f:24:da:1e:72:56:ba:cf:29:5a:
42:47:92:b9:55:e5:01:c3:c0:44:97:34:db:26:0e:c8:27:75:
7c:ae:71:7f:17:3f:80:56:ae:13:ed:79:36:5c:28:1e:11:42:
53:74:25:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org