Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/nOjFGFsuaPZWZ3NjJ7iV_jkP7L0.roa
File: nOjFGFsuaPZWZ3NjJ7iV_jkP7L0.roa (raw, json)
Hash identifier: C9ErTU0s2RggbWkxigZiLBKOxo6jSn0dhaZOW5PCbrw=
Subject key identifier: 9C:E8:C5:18:5B:2E:68:F6:56:67:73:63:27:B8:95:FE:39:0F:EC:BD
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27E2238BC52B7B726358ED3711406E
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/nOjFGFsuaPZWZ3NjJ7iV_jkP7L0.roa
Signing time: Fri 28 Oct 2022 10:34:00 +0000
ROA not before: Fri 28 Oct 2022 10:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 86.38.246.0/23 maxlen: 24
89.116.224.0/21 maxlen: 24
89.117.80.0/22 maxlen: 24
89.116.32.0/21 maxlen: 24
86.38.204.0/23 maxlen: 24
89.116.180.0/22 maxlen: 24
89.116.200.0/24 maxlen: 24
84.46.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:e2:23:8b:c5:2b:7b:72:63:58:ed:37:11:40:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ce8c5185b2e68f65667736327b895fe390fecbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:9e:a9:f9:70:b9:3b:f7:8f:84:ac:0e:0e:
97:83:d5:77:42:54:e9:d5:d4:06:db:e5:2a:f1:37:
43:f8:61:bb:56:76:4a:78:79:68:60:04:5e:6a:4a:
95:58:f5:7d:b9:c2:ab:e2:84:1b:72:64:7a:f0:e5:
09:78:e4:5d:ab:dd:a8:e0:2e:96:be:31:9d:85:94:
0a:96:17:fa:9d:da:cd:cc:27:e2:93:7a:f8:99:01:
d8:79:fe:2e:f3:e1:8e:6d:b6:a4:91:c0:dd:19:72:
7c:aa:f1:9b:f1:ae:65:dc:d9:e6:78:d9:11:b4:54:
56:a5:86:5c:96:c8:4c:01:7d:52:20:bb:73:a2:27:
98:16:3f:71:09:2c:11:87:9e:39:5f:d8:b0:ff:a5:
45:b8:91:dc:8a:e8:b8:73:92:1c:42:61:3c:ab:22:
9b:65:8f:b5:12:b7:59:76:e7:cc:be:ea:d9:8c:6e:
b0:54:c0:59:54:e7:cd:c7:b5:fb:f0:b6:62:23:b5:
05:37:c0:39:18:0f:aa:02:79:83:c4:02:13:c2:c4:
04:38:f6:3f:4b:fb:62:71:e3:32:d6:00:80:06:cd:
c7:cd:8e:8c:44:c9:37:33:47:44:7f:0e:1d:36:e6:
ce:fd:d0:1d:48:cd:b2:3c:a1:7c:05:61:10:e2:97:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E8:C5:18:5B:2E:68:F6:56:67:73:63:27:B8:95:FE:39:0F:EC:BD
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/nOjFGFsuaPZWZ3NjJ7iV_jkP7L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.204.0/23
86.38.246.0/23
89.116.32.0/21
89.116.180.0/22
89.116.200.0/24
89.116.224.0/21
89.117.80.0/22
Signature Algorithm: sha256WithRSAEncryption
85:91:9c:87:ec:22:e2:4b:0f:43:1e:21:59:18:46:b1:a8:cc:
16:b3:c7:33:f7:ed:20:c5:95:e2:cb:02:e2:44:b7:7b:cd:ab:
b9:4e:61:81:a1:31:46:d2:4a:20:87:28:6d:20:4d:dd:7c:88:
52:ab:4e:bf:74:53:83:ae:47:53:12:17:5c:67:b7:73:79:15:
8d:fd:84:ed:a8:bd:7d:ad:46:0f:de:f7:66:17:d5:2e:1e:8f:
28:a1:22:52:2d:b3:84:6a:2e:b1:05:44:75:10:4b:b0:e1:2e:
84:22:18:d0:25:43:6d:a7:ce:af:1b:85:72:7e:a1:1b:c3:cb:
43:76:10:c4:29:d5:d8:cb:8d:bc:fe:f6:dd:2c:fd:69:0a:c7:
d8:18:3f:6d:44:b6:6b:fc:d0:58:4f:69:49:77:38:e4:36:e3:
ae:73:51:5c:28:6a:fc:02:9d:b2:14:15:c0:d8:12:35:53:fb:
e6:42:5f:5b:e6:53:84:93:eb:db:76:c6:70:35:d4:0e:e9:02:
74:c1:c4:d9:54:6a:5b:d4:b3:47:a3:52:ae:9a:2d:a1:d8:82:
df:40:56:b9:6c:a1:d6:28:52:db:8f:3c:18:94:7c:e1:fb:e1:
4b:75:32:05:a2:06:2c:49:d7:bb:46:92:b0:4a:05:b9:58:53:
85:cb:42:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org