Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/dnF3XNYa11bDvtk1DIsJX-WOUJQ.roa
File: dnF3XNYa11bDvtk1DIsJX-WOUJQ.roa (raw, json)
Hash identifier: QOBWDqTceSzer3o24uICWmiK4jIE1IXbnMGK8SPtiEM=
Subject key identifier: 76:71:77:5C:D6:1A:D7:56:C3:BE:D9:35:0C:8B:09:5F:E5:8E:50:94
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27BC3CD9BFD293011A32A51663DA4A
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/dnF3XNYa11bDvtk1DIsJX-WOUJQ.roa
Signing time: Fri 28 Oct 2022 10:33:51 +0000
ROA not before: Fri 28 Oct 2022 10:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 86.38.246.0/23 maxlen: 24
86.38.242.0/23 maxlen: 24
89.116.135.0/24 maxlen: 24
89.117.109.0/24 maxlen: 24
89.116.156.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
86.38.189.0/24 maxlen: 24
89.117.228.0/23 maxlen: 24
86.38.200.0/24 maxlen: 24
86.38.4.0/23 maxlen: 24
89.117.48.0/20 maxlen: 24
86.38.220.0/23 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.242.0/23 maxlen: 24
89.116.246.0/23 maxlen: 24
86.38.180.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.11.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:bc:3c:d9:bf:d2:93:01:1a:32:a5:16:63:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7671775cd61ad756c3bed9350c8b095fe58e5094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:83:43:05:e2:9b:db:9b:27:ca:9d:36:dc:
77:3f:e1:4c:26:dc:11:a2:9a:1a:6a:ec:8f:d6:22:
d1:78:ba:b2:6d:0e:e4:3c:22:fc:0b:7f:57:af:6f:
72:0a:da:c5:b3:ef:9f:77:63:1b:2b:6d:07:ba:3c:
74:c7:e9:84:1c:8c:81:50:29:5f:81:ae:f1:3a:39:
f7:95:ee:f9:0f:90:6d:65:c4:8b:3b:ff:4d:32:12:
71:24:8c:99:ce:71:be:b8:67:80:6e:64:ec:ed:3d:
a3:d8:e5:34:35:37:18:f4:4a:7e:2b:5f:93:8b:b2:
3f:98:d6:77:bf:13:d4:df:e4:ef:4e:c2:ee:06:f0:
5c:7f:a2:25:e4:d5:e8:dc:37:ee:4c:8a:57:13:2d:
81:73:92:f5:56:3c:5a:35:d6:cf:3b:58:90:04:96:
d4:0a:55:7e:55:15:48:ca:5c:5c:04:35:64:9a:f2:
3b:fc:f9:af:71:c6:7a:82:06:11:64:70:72:a4:51:
fa:c6:8e:bc:5a:55:c8:88:34:bd:ab:8d:52:29:50:
54:ac:3d:f4:ac:8c:39:f0:1b:c4:4e:f6:0c:4f:f4:
01:16:4c:54:fb:47:b7:79:bf:64:e0:14:b5:16:8b:
78:f9:2f:17:da:07:4d:6f:40:7a:49:4c:01:56:b2:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:71:77:5C:D6:1A:D7:56:C3:BE:D9:35:0C:8B:09:5F:E5:8E:50:94
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/dnF3XNYa11bDvtk1DIsJX-WOUJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.4.0/23
86.38.180.0/22
86.38.189.0/24
86.38.200.0/24
86.38.220.0/23
86.38.242.0/23
86.38.246.0/23
89.116.56.0/24
89.116.135.0/24
89.116.156.0/24
89.116.175.0/24
89.116.177.0/24
89.116.189.0/24
89.116.218.0/24
89.116.242.0/23
89.116.246.0/23
89.117.11.0/24
89.117.48.0/20
89.117.109.0/24
89.117.228.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:c1:4a:93:b5:97:16:82:76:65:50:97:e0:5b:a1:30:43:43:
80:6a:88:3c:3a:53:88:ad:a5:37:bc:67:9c:83:52:7c:f5:ff:
f6:7f:f8:8f:df:f3:c7:f4:4b:bd:12:fe:bd:dd:ba:74:18:95:
f3:d4:47:dc:41:81:1e:e5:53:5f:2c:f7:82:d2:9d:a4:c8:f6:
23:4b:09:c8:4b:4e:ab:fb:7b:5c:11:93:9f:1f:a5:bb:dd:b0:
48:f3:f0:39:2b:29:2d:71:06:42:32:74:8c:18:04:24:a4:70:
9b:eb:24:c1:2b:f7:a8:db:dd:5c:b5:0c:61:7d:9a:ee:09:e4:
33:4b:49:04:60:a3:e1:ff:70:84:62:d8:d0:d8:24:62:d6:88:
04:41:4c:54:3e:eb:2a:08:67:c1:8f:b9:58:16:cf:fe:6c:f9:
8a:de:a5:d8:3f:a7:60:0e:a0:04:1c:4a:08:79:28:0f:93:cf:
1e:76:29:2b:05:69:3a:51:0b:fa:fd:0a:93:70:2e:df:d4:3b:
fb:5e:26:07:77:76:23:10:95:ea:e6:dc:ee:20:6d:0b:e4:ec:
e3:31:55:d7:98:87:8f:54:6a:4c:e2:e6:be:00:53:89:cc:e1:
74:dd:b7:92:ae:fd:ed:a4:82:76:86:bc:27:a4:a2:82:53:7b:
c4:03:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org