Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/vLik04EUSsk51-oqSKEiAC7ezzk.roa
File: vLik04EUSsk51-oqSKEiAC7ezzk.roa (raw, json)
Hash identifier: hF7J/e214uLwJc++TwaoFh/mE9o+xzan27Ehb0+b35E=
Subject key identifier: BC:B8:A4:D3:81:14:4A:C9:39:D7:EA:2A:48:A1:22:00:2E:DE:CF:39
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27D8CEB7C0EAE0FC0DF803926EFD1C
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/vLik04EUSsk51-oqSKEiAC7ezzk.roa
Signing time: Fri 28 Oct 2022 10:33:58 +0000
ROA not before: Fri 28 Oct 2022 10:33:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 89.116.123.0/24 maxlen: 24
89.116.76.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
89.116.96.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:d8:ce:b7:c0:ea:e0:fc:0d:f8:03:92:6e:fd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcb8a4d381144ac939d7ea2a48a122002edecf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:0c:37:cc:8a:e0:2b:0a:24:a2:a3:4c:29:
43:01:8a:bc:80:4d:53:12:f6:60:44:34:2b:66:78:
f1:b0:90:e7:a7:7c:d4:5f:ec:77:49:10:77:31:85:
b9:22:6f:82:1e:fd:f8:88:8c:65:25:0d:ce:be:fc:
11:ed:71:8d:43:3c:bf:22:87:5a:85:04:ac:dc:63:
fc:58:0b:a2:e0:27:8d:fd:f5:54:91:9c:88:36:32:
c0:c8:cc:4f:51:26:1a:01:9e:a4:1d:0f:58:01:35:
cb:23:64:85:e5:c8:53:b7:b5:3d:3f:ac:3b:2e:83:
d8:77:97:f3:12:a6:11:ad:e0:10:86:1a:93:66:38:
49:4d:d7:53:a1:d1:20:2c:ec:ea:39:16:86:69:d2:
8b:ca:d5:25:6b:43:f4:25:b1:8c:f9:a4:6f:04:8b:
77:d8:4e:1e:8e:1d:01:8f:19:41:c4:91:47:ef:0a:
56:07:be:78:bc:d6:bf:b8:a7:6a:5e:7d:1e:17:7a:
27:fd:dc:86:58:73:89:bb:08:68:81:9c:ba:f8:34:
34:57:86:97:26:45:5c:b6:7d:30:1c:73:9d:b6:c4:
b1:c2:b3:5e:cf:16:13:f8:c5:bc:91:05:2e:e0:83:
94:f3:dd:e8:65:91:c1:fc:a0:a1:f2:52:f3:9e:6c:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B8:A4:D3:81:14:4A:C9:39:D7:EA:2A:48:A1:22:00:2E:DE:CF:39
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/vLik04EUSsk51-oqSKEiAC7ezzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.235.0/24
89.116.76.0/24
89.116.96.0/24
89.116.123.0/24
89.116.202.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:65:7e:ed:89:50:72:52:38:2a:67:cf:29:b7:aa:8b:19:47:
3e:c9:77:5e:7d:99:ff:c5:d9:03:38:44:be:bb:60:03:c9:79:
2a:33:a0:7e:1d:c1:fa:a6:78:00:5f:d2:30:24:89:16:c7:13:
8c:6e:7b:30:f0:4b:df:d7:64:56:35:26:c4:c1:f9:d3:22:f3:
80:fc:dc:08:cb:3a:d4:16:c8:56:77:0f:55:99:b1:02:e6:fb:
c9:33:62:d0:1a:70:4b:92:28:f0:f8:15:e1:5f:63:33:4f:68:
ba:71:67:31:1d:28:66:ce:41:cf:d5:0e:37:49:6b:8f:d2:4f:
a7:9c:96:10:cb:18:4b:e9:54:ef:7e:11:1b:df:de:da:e0:68:
a7:19:5d:90:08:63:84:d8:cc:89:6d:1f:c4:f4:74:ea:15:01:
06:c7:52:40:3e:ea:97:44:5d:ed:54:d1:bd:4e:ff:46:30:39:
c1:c0:a4:88:f1:f8:ef:78:28:31:43:d4:2c:ab:a5:4d:6d:f7:
c4:3c:ea:45:17:9d:95:f3:4e:b0:d8:53:7a:db:bd:16:51:bb:
88:b1:19:1a:dc:61:51:40:fd:4b:95:4a:4c:3a:77:ea:43:3e:
dc:89:d3:7d:fc:43:b7:9e:96:f5:c3:cc:81:13:31:a7:7f:e5:
c8:e9:dc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org