Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/h-XGAAPP4fy1lh2HHkDNfXhMlJk.roa
File: h-XGAAPP4fy1lh2HHkDNfXhMlJk.roa (raw, json)
Hash identifier: ZoHjeoQAJsr6FjnpowxF5JPjkYJYonFeSdZERKnidy8=
Subject key identifier: 87:E5:C6:00:03:CF:E1:FC:B5:96:1D:87:1E:40:CD:7D:78:4C:94:99
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27DFF29918EFD3CC7725D0F4A179C4
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/h-XGAAPP4fy1lh2HHkDNfXhMlJk.roa
Signing time: Fri 28 Oct 2022 10:34:00 +0000
ROA not before: Fri 28 Oct 2022 10:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:df:f2:99:18:ef:d3:cc:77:25:d0:f4:a1:79:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87e5c60003cfe1fcb5961d871e40cd7d784c9499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:ea:2a:6f:c1:19:f8:2a:db:92:b1:a6:98:
97:40:05:ad:a7:ad:b6:75:c2:f0:01:4b:5d:61:2d:
52:bc:15:d3:3b:e2:9c:1a:d3:af:9c:4e:2f:da:01:
a8:39:48:9c:68:b5:86:5a:8d:d7:53:ee:fc:40:99:
c3:29:4b:13:5c:6a:3b:06:58:8f:f7:68:fe:ce:20:
8f:3a:cf:f0:03:f5:75:cf:96:62:8d:36:a4:7d:4e:
da:8c:56:d3:66:a4:c4:95:72:2b:df:75:9d:35:db:
e9:01:e2:ac:62:b1:24:3b:be:f0:e3:cb:6f:fc:e5:
e3:42:41:aa:69:34:4d:1e:7e:a5:af:e6:c1:c5:ee:
85:0b:6d:f7:68:b1:53:ae:fa:15:43:55:63:39:92:
96:76:0e:af:dc:45:be:3b:9d:14:81:10:f9:60:01:
8a:25:ed:64:30:2f:dc:cd:e8:e8:3f:0f:b8:4a:30:
4b:ca:87:cc:68:90:b9:28:29:70:c4:86:42:f1:e3:
c1:62:76:b6:5d:86:f0:29:86:25:dd:12:9c:92:fd:
79:49:5c:68:43:38:41:8b:bb:54:1c:e0:9c:bd:1e:
05:ea:43:67:26:c8:22:f7:47:39:9f:b3:2c:08:c1:
62:94:d3:8b:79:46:24:39:47:0f:90:4f:7f:2f:66:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E5:C6:00:03:CF:E1:FC:B5:96:1D:87:1E:40:CD:7D:78:4C:94:99
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/h-XGAAPP4fy1lh2HHkDNfXhMlJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.240.0/20
86.38.248.0/21
Signature Algorithm: sha256WithRSAEncryption
24:e5:01:9b:bc:35:c1:13:4d:5a:a0:2e:d6:d7:0b:f7:d8:47:
ef:83:55:35:8b:d5:43:e9:86:38:ca:75:b2:df:37:46:b0:6c:
1c:e3:24:a1:7d:4f:2e:5b:15:9e:2b:3f:d0:22:e7:1d:4f:3b:
2d:eb:2d:f4:35:ba:49:26:d4:f5:c8:c0:0a:ee:eb:1f:94:8a:
aa:6d:4e:1b:32:12:4c:8e:5d:4a:3e:a8:0c:bf:8d:06:4b:c3:
5f:6a:1a:b6:e4:bb:7e:26:a0:af:33:87:34:68:1d:51:30:2e:
fa:82:88:9f:b6:f3:70:ff:07:38:94:9c:0c:fc:94:2f:40:4f:
64:f0:6f:c1:b2:3a:ec:8a:f3:04:00:cf:8e:a7:67:62:ec:91:
15:3a:bb:fb:36:30:25:e6:c6:fa:cc:35:2c:2d:35:8b:8c:86:
98:1f:da:a7:9e:da:c2:06:e6:7c:8d:69:67:33:0d:be:cd:c2:
9c:90:2d:95:fb:c2:cf:a0:c7:8f:d6:fe:71:c6:2a:48:fc:37:
e1:c2:d0:e5:04:0e:ad:2a:2b:2c:24:2d:a9:1f:6f:34:21:1a:
5a:ef:8c:d6:c5:3f:db:c0:47:f3:7c:df:ad:bd:f8:94:cb:aa:
2b:1a:f9:a4:3a:12:6c:5b:18:0c:39:4c:8c:ca:f3:d8:35:03:
b8:72:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org