Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/oGCI1WrQZcYHF-vfhLDp-27PBKc.roa
File: oGCI1WrQZcYHF-vfhLDp-27PBKc.roa (raw, json)
Hash identifier: 10OGhJBM0HfFI9vYeNR78at+QtG+UjZCr1CY0mMqu5U=
Subject key identifier: A0:60:88:D5:6A:D0:65:C6:07:17:EB:DF:84:B0:E9:FB:6E:CF:04:A7
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27DCB9842F7BF2A430C63A3B60D6C1
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/oGCI1WrQZcYHF-vfhLDp-27PBKc.roa
Signing time: Fri 28 Oct 2022 10:33:59 +0000
ROA not before: Fri 28 Oct 2022 10:33:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210441
IP address blocks: 89.117.72.0/21 maxlen: 21
89.117.84.0/23 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.94.0/23 maxlen: 24
89.117.109.0/24 maxlen: 24
89.117.116.0/23 maxlen: 24
89.117.28.0/22 maxlen: 24
89.117.32.0/23 maxlen: 24
89.117.190.0/24 maxlen: 24
86.38.178.0/23 maxlen: 24
89.117.215.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
86.38.186.0/23 maxlen: 24
86.38.184.0/23 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.129.0/24 maxlen: 24
89.117.142.0/23 maxlen: 24
84.46.234.0/23 maxlen: 24
89.116.108.0/24 maxlen: 24
86.38.246.0/23 maxlen: 24
89.116.132.0/24 maxlen: 24
89.116.135.0/24 maxlen: 24
89.116.150.0/24 maxlen: 24
86.38.202.0/23 maxlen: 24
89.117.245.0/24 maxlen: 24
89.117.250.0/24 maxlen: 24
89.116.218.0/24 maxlen: 24
89.116.252.0/24 maxlen: 24
89.117.8.0/23 maxlen: 24
89.116.163.0/24 maxlen: 24
89.116.161.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.172.0/23 maxlen: 24
89.116.177.0/24 maxlen: 24
89.116.175.0/24 maxlen: 24
89.116.193.0/24 maxlen: 24
89.116.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:dc:b9:84:2f:7b:f2:a4:30:c6:3a:3b:60:d6:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a06088d56ad065c60717ebdf84b0e9fb6ecf04a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c1:c7:d0:26:e8:b3:fe:4f:b1:4c:ea:dd:4e:
e5:5c:ff:22:13:27:2e:8f:e0:04:e5:1f:f8:b6:1e:
70:16:21:00:b9:07:15:c2:12:20:a6:75:9c:8e:9a:
6d:c2:29:db:1b:1e:b8:23:76:95:81:1a:b1:eb:e1:
de:90:a9:48:22:65:fa:93:03:d3:be:df:2b:75:f8:
79:c6:01:c4:cc:89:97:a1:08:eb:52:6f:49:bf:f3:
dd:e8:51:6c:16:8e:d4:27:a1:76:af:ca:67:cd:ea:
89:ec:f2:c8:53:f8:75:9d:11:fb:28:a2:fd:99:cf:
36:77:16:3f:f8:72:c3:32:13:b7:55:3a:66:26:e1:
6f:74:5d:49:ab:a7:f5:08:9c:ea:fa:9f:37:b5:4d:
97:82:e5:45:2d:3a:95:8c:d7:79:ac:4e:21:c3:ee:
92:e2:35:4e:fb:f1:53:b8:dd:c0:b2:28:45:96:c0:
a5:51:ca:b2:2c:d9:72:da:f0:c6:88:6b:66:9c:af:
8d:e7:ec:ec:36:0c:51:c2:c3:ae:fa:63:d6:3c:8a:
32:bf:67:95:69:e5:bf:14:6b:4b:43:06:28:be:23:
9d:71:8a:f9:2f:fc:cc:e3:29:e3:b3:cf:66:7a:93:
07:43:0e:fd:c5:80:ee:a2:b4:09:21:1e:68:7e:4b:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:60:88:D5:6A:D0:65:C6:07:17:EB:DF:84:B0:E9:FB:6E:CF:04:A7
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/oGCI1WrQZcYHF-vfhLDp-27PBKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.234.0/23
86.38.178.0/23
86.38.184.0/22
86.38.202.0/23
86.38.246.0/23
89.116.108.0/24
89.116.132.0/24
89.116.135.0/24
89.116.150.0/24
89.116.161.0/24
89.116.163.0/24
89.116.166.0/24
89.116.172.0/23
89.116.175.0/24
89.116.177.0/24
89.116.193.0/24
89.116.210.0/23
89.116.218.0/24
89.116.252.0/24
89.117.8.0/23
89.117.28.0-89.117.33.255
89.117.72.0/21
89.117.84.0/23
89.117.88.0/22
89.117.94.0/23
89.117.109.0/24
89.117.116.0/23
89.117.129.0/24
89.117.132.0/22
89.117.142.0/23
89.117.190.0/24
89.117.215.0/24
89.117.222.0/24
89.117.245.0/24
89.117.250.0/24
Signature Algorithm: sha256WithRSAEncryption
46:37:f7:1a:3d:cf:59:85:43:df:3b:f8:f0:1e:2f:2f:24:b8:
3b:61:78:0c:dd:e1:65:d8:a9:b3:18:f3:ba:cf:60:72:c8:9f:
17:21:47:01:dd:1f:80:02:46:1d:9f:70:2b:7a:5a:7e:0d:88:
87:3b:cc:93:e4:de:4f:67:56:6d:29:41:d6:63:63:61:bb:12:
78:ff:b3:c3:93:45:e6:41:19:36:7b:4d:17:c5:5f:a8:ef:2f:
07:c0:21:a3:d2:ae:02:89:8c:65:fc:18:8a:12:9c:3e:5c:22:
ee:1a:1b:37:d5:ce:f0:6f:b7:9e:7b:1d:ad:06:95:e7:78:f8:
50:bf:e1:64:bd:68:4b:ca:dd:95:c8:48:dc:89:8b:ac:3a:bd:
31:ff:47:2b:13:4a:24:d4:13:84:1e:a2:dc:f1:5d:23:9a:df:
7b:62:14:f5:a6:98:db:d4:b5:f5:77:78:e6:c3:18:a5:5a:7f:
e7:71:66:19:66:a0:41:08:fd:cd:3b:58:87:c5:eb:91:49:d1:
63:8a:2d:ce:24:00:ae:e6:bc:14:ea:94:7e:0b:82:ec:c1:5a:
55:1d:28:8d:64:8d:96:52:f8:3a:68:d5:9f:07:47:f5:32:a2:
3b:d5:03:4b:68:d5:68:7f:ce:3b:4c:e9:d1:09:61:f1:37:fb:
8b:8d:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org