Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/Zw2RUE4h2fr5ASHaPrBoBesVgnQ.roa
File: Zw2RUE4h2fr5ASHaPrBoBesVgnQ.roa (raw, json)
Hash identifier: APvHtaq8pfKAZk6vWGBFlgcWE0+dd6rd1KCgGR2sV7M=
Subject key identifier: 67:0D:91:50:4E:21:D9:FA:F9:01:21:DA:3E:B0:68:05:EB:15:82:74
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 0184332D310CCC85363F409994A47B8C9045
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/Zw2RUE4h2fr5ASHaPrBoBesVgnQ.roa
Signing time: Tue 01 Nov 2022 12:31:50 +0000
ROA not before: Tue 01 Nov 2022 12:31:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 84.46.170.0/24 maxlen: 24
89.117.101.0/24 maxlen: 24
86.38.177.0/24 maxlen: 24
89.116.158.0/24 maxlen: 24
89.116.163.0/24 maxlen: 24
89.117.27.0/24 maxlen: 24
89.117.35.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
86.38.214.0/24 maxlen: 24
89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:2d:31:0c:cc:85:36:3f:40:99:94:a4:7b:8c:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Nov 1 12:31:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=670d91504e21d9faf90121da3eb06805eb158274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:d6:d8:a9:fb:15:a8:fd:d6:9c:d9:2b:79:
7f:6a:0a:2c:61:4a:7a:ae:bb:6d:6b:ed:58:d8:a5:
fe:0e:28:06:17:b1:32:07:b3:84:1d:91:6c:ab:47:
73:79:0f:af:a9:61:af:a4:31:39:8a:48:06:44:86:
55:16:e9:e8:53:a8:2e:2c:10:67:12:af:0e:8c:83:
0d:ff:b7:45:0f:50:db:81:4a:73:b5:1a:50:11:15:
82:bb:89:6a:2d:2f:a3:88:a5:aa:2d:4c:aa:7f:3e:
98:8a:b0:bb:73:aa:50:57:12:de:db:66:64:7d:fd:
47:c9:3a:db:45:c2:a5:a4:63:47:5e:80:8e:6e:78:
38:e3:e3:4e:1c:71:4f:f7:3d:be:6d:01:73:bd:e1:
a7:97:e1:0c:7c:05:39:c7:49:f9:b3:08:1c:11:6c:
71:31:51:26:9d:fd:bf:3e:27:79:2d:42:8f:b8:54:
28:79:eb:37:52:49:a6:89:d0:34:f7:00:71:36:ad:
4c:59:25:6c:64:01:bf:7d:28:66:d8:8c:d5:ca:b3:
3e:a9:7b:c0:32:64:65:36:ce:b8:bc:28:d7:03:e8:
2c:a8:e8:f9:cf:da:9f:76:c9:2f:bf:b3:8d:1b:35:
ac:3f:81:58:31:e6:0f:19:f7:21:cf:a1:9a:99:9d:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0D:91:50:4E:21:D9:FA:F9:01:21:DA:3E:B0:68:05:EB:15:82:74
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/Zw2RUE4h2fr5ASHaPrBoBesVgnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.170.0/24
86.38.177.0/24
86.38.214.0/24
89.116.102.0/24
89.116.158.0/24
89.116.163.0/24
89.116.190.0/24
89.117.27.0/24
89.117.35.0/24
89.117.101.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ab:99:0b:e7:11:90:48:49:77:66:d3:2f:e3:f4:01:4e:96:
85:1a:53:93:b3:bf:5e:10:f6:4f:62:1b:a4:23:f8:3a:ff:54:
e9:e0:8f:f6:71:c9:58:45:de:0d:07:bb:b6:d5:af:29:e1:05:
88:dc:70:33:c7:ef:82:54:4a:6a:e3:87:43:8d:42:89:fc:ff:
17:25:c0:ec:f4:d5:93:ea:b8:67:be:68:4a:6d:e5:4c:20:a0:
df:56:91:2a:a0:03:c4:8a:1e:94:3b:f0:1c:66:88:f1:5e:79:
23:d4:29:ed:0b:6a:bd:ac:4e:bd:eb:28:cd:24:a3:44:65:e6:
dc:8e:b3:67:f3:5f:d0:22:b3:5e:b3:e4:94:ad:07:79:d9:8d:
e3:c4:1d:cc:52:38:cb:2e:f2:fb:49:d2:75:d6:e5:2b:eb:6f:
ec:6c:7a:e8:1d:e7:a3:5f:52:33:5c:7d:50:3c:c0:ec:5a:29:
57:6c:7a:e5:3c:11:67:be:a4:7c:f6:0e:ef:0e:4d:97:e7:33:
c4:18:47:88:13:06:6f:2e:ca:9b:29:e6:10:d5:c5:0b:fe:3e:
d9:ee:24:60:d0:df:5c:5f:db:fd:0c:94:fd:d5:1d:3d:17:28:
e6:53:24:03:d0:d4:40:c6:ab:c0:f2:a8:d5:48:fc:46:88:5a:
c1:10:e5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:32 2025 by rpki-client