Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/uHa2Jr_uuw2fKWYeTNvmFcQlBX8.roa
File: uHa2Jr_uuw2fKWYeTNvmFcQlBX8.roa (raw, json)
Hash identifier: RpKhS72+MqTLw+nhC4eb6fm0IvfYiVC6cGV71c6cIno=
Subject key identifier: B8:76:B6:26:BF:EE:BB:0D:9F:29:66:1E:4C:DB:E6:15:C4:25:05:7F
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27D9FDE2EF49952EAEC9607211E830
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/uHa2Jr_uuw2fKWYeTNvmFcQlBX8.roa
Signing time: Fri 28 Oct 2022 10:33:58 +0000
ROA not before: Fri 28 Oct 2022 10:33:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 89.116.132.0/24 maxlen: 24
89.116.253.0/24 maxlen: 24
89.116.255.0/24 maxlen: 24
89.117.222.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
89.116.179.0/24 maxlen: 24
86.38.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:d9:fd:e2:ef:49:95:2e:ae:c9:60:72:11:e8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b876b626bfeebb0d9f29661e4cdbe615c425057f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:d2:51:26:56:80:9c:71:8f:0b:8c:bc:be:
ec:93:0a:4c:1e:00:c3:dc:31:b9:37:73:41:47:ee:
67:2b:89:fc:38:3d:22:84:bb:a9:13:46:f3:0a:4d:
2d:ee:69:34:72:7f:de:b8:4f:2d:fb:7b:6c:1e:36:
3d:69:88:50:48:7e:12:30:47:8c:5d:9b:e1:bc:34:
b3:92:7a:cf:b8:76:d9:ae:b3:5c:66:de:2f:0a:3b:
b2:83:51:7d:e7:c1:a9:45:62:ee:c3:ac:1d:99:da:
69:21:4f:51:ac:9e:cb:2e:34:cc:b5:1e:1a:d9:5c:
4f:4a:af:54:d8:ad:86:f7:10:6e:36:6a:a2:76:5f:
86:17:cd:a6:e9:69:43:87:66:4a:35:de:18:82:8e:
04:af:f6:1e:e4:a3:ae:56:96:be:ae:c0:e4:d0:91:
9f:95:c7:92:2e:a3:71:7f:e6:2e:4c:ef:64:e6:48:
6f:26:03:f0:3a:49:24:a7:16:f4:19:4a:0c:c9:20:
da:28:ff:74:6e:40:d4:03:d7:39:19:d1:b5:18:ee:
dd:0a:a7:77:cf:51:26:79:77:04:55:45:bf:59:33:
73:91:9f:38:81:e6:9d:0e:62:81:89:40:c4:6b:8b:
8c:be:3b:25:7f:74:1d:a7:6a:ca:fc:91:5b:f3:16:
4c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:76:B6:26:BF:EE:BB:0D:9F:29:66:1E:4C:DB:E6:15:C4:25:05:7F
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/uHa2Jr_uuw2fKWYeTNvmFcQlBX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.238.0/24
89.116.132.0/24
89.116.166.0/24
89.116.179.0/24
89.116.253.0/24
89.116.255.0/24
89.117.222.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a5:fe:c5:09:6a:5c:f1:fe:be:ca:b0:57:29:5e:25:98:62:
30:70:f9:ca:d8:13:0c:6d:24:52:9c:01:7a:0f:0b:ba:c1:23:
12:b6:0a:92:d0:03:32:7c:63:a9:15:4d:97:17:37:b0:33:d8:
0e:de:41:20:31:5e:f0:b4:7c:d6:35:cb:ed:52:16:19:29:df:
9c:9d:29:88:67:d9:21:ea:29:9d:45:19:63:5d:32:80:41:65:
df:21:55:f4:35:ff:3e:4b:25:2a:0a:5d:8a:64:02:24:7f:85:
4d:7a:e6:97:fb:b5:92:d4:37:64:86:10:91:db:03:8c:a6:f9:
d2:44:b1:ed:89:a1:1d:4f:3b:b7:7a:39:6e:0a:4b:bc:1f:1d:
af:14:38:77:b6:43:55:1d:81:db:8e:85:6b:fa:cc:93:85:8a:
21:75:6f:25:ab:35:06:9e:12:b7:65:b9:20:b9:10:fc:9f:21:
d2:48:f1:93:0d:ae:2e:23:2b:b8:92:08:91:ac:32:37:7e:39:
6d:23:68:2c:ca:cd:cc:0e:52:96:95:f7:e5:89:ca:48:d6:d0:
ef:55:24:30:f9:27:e2:56:66:0f:2e:cd:7d:1b:9b:44:c8:f3:
73:c2:4d:86:82:11:94:26:e8:cb:98:72:63:cc:7a:1d:56:05:
cd:e6:7b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:55 2025 by rpki-client