Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/zIHkc-0g_Y8CDvU8WKGiXU9FwE4.roa
File: zIHkc-0g_Y8CDvU8WKGiXU9FwE4.roa (raw, json)
Hash identifier: wJ6siljFrobwNtpeuZk6kz/pgbRVBkjNgU446TgkXQ4=
Subject key identifier: CC:81:E4:73:ED:20:FD:8F:02:0E:F5:3C:58:A1:A2:5D:4F:45:C0:4E
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27BFB32274080BA3767B4D17DD98BB
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/zIHkc-0g_Y8CDvU8WKGiXU9FwE4.roa
Signing time: Fri 28 Oct 2022 10:33:52 +0000
ROA not before: Fri 28 Oct 2022 10:33:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 86.38.32.0/24 maxlen: 24
86.38.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:bf:b3:22:74:08:0b:a3:76:7b:4d:17:dd:98:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc81e473ed20fd8f020ef53c58a1a25d4f45c04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:7a:35:39:41:ba:55:0b:2b:4e:84:c0:f2:
50:c5:e8:e6:1c:23:67:2f:29:e8:97:7f:d2:d5:ba:
50:06:00:fd:2a:b7:9b:60:38:04:2e:31:46:60:9f:
c9:f0:3c:68:7b:4c:f1:66:78:54:6b:0c:c8:e7:95:
27:67:aa:54:7e:77:8c:95:fa:40:05:4c:6c:70:d2:
9e:b4:fe:e1:8c:c7:a0:1b:02:89:ef:cf:fd:15:7c:
53:e6:71:fc:3d:5e:3a:3e:e3:ac:e9:fe:24:cd:fa:
47:ad:2e:e3:22:0d:87:ea:3c:f7:eb:31:27:a3:0c:
d9:42:50:cb:ad:52:f8:b5:c5:7b:9a:9c:cf:50:b9:
5e:46:0e:6e:c3:e7:93:b9:ec:fb:0e:e4:f2:7a:87:
5c:84:c6:b6:2b:de:84:e1:a9:e9:0e:7b:11:b6:b7:
f6:69:4c:8a:34:e7:fa:75:69:8a:fc:10:57:87:90:
a8:4b:52:bd:11:6b:95:f7:71:96:8f:6e:09:2b:df:
4d:e9:f2:60:f5:03:bc:b9:3f:ca:66:19:79:49:06:
60:db:a6:8b:d3:95:f1:3b:b1:56:10:26:3d:1a:1b:
03:f3:ad:32:f1:33:79:02:80:a5:a3:aa:3a:01:ca:
f2:a2:1e:6e:fe:a0:c2:5f:96:e6:3d:4a:f9:04:dd:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:81:E4:73:ED:20:FD:8F:02:0E:F5:3C:58:A1:A2:5D:4F:45:C0:4E
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/zIHkc-0g_Y8CDvU8WKGiXU9FwE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.32.0/24
86.38.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:16:f0:55:9a:8e:cd:fc:b2:ee:77:0d:2f:11:6d:a5:80:d7:
9c:e6:d1:2e:26:db:1c:37:f1:ad:ac:3b:8d:11:14:55:66:e4:
2e:82:a6:43:3f:ca:47:5e:63:60:db:84:23:02:f6:5e:ae:cb:
03:01:a6:6d:37:ab:af:6d:eb:0a:10:89:c0:df:4b:75:1f:d7:
8e:3f:c2:0f:ad:93:bf:d1:35:57:40:d8:66:5a:d3:f7:45:be:
7e:e1:a1:eb:d8:6a:e0:65:a2:40:b9:d8:bf:7a:47:d4:f5:65:
99:f8:32:10:26:01:3c:46:cf:34:c7:ae:50:b4:56:52:4c:3f:
a8:1c:f6:f0:5f:20:26:69:e8:75:bc:fb:07:a8:a7:dd:0b:4f:
8e:e4:a2:bb:d5:0a:c7:e2:32:5f:85:ef:96:3a:7d:3f:c0:01:
de:25:c8:27:a5:fb:d0:e3:37:5d:83:b8:9c:8d:de:5d:1d:de:
e0:fb:ee:8f:34:8a:82:eb:bd:7f:ce:e9:72:df:76:2e:fa:9d:
86:fc:b4:bd:54:5a:cd:33:ed:1e:41:79:fb:f4:26:ba:b6:e0:
bd:05:90:c3:f4:4a:1b:b3:36:6d:f4:93:23:00:f7:93:a8:85:
38:ad:8f:bc:3a:59:e9:e5:27:a6:6e:27:19:39:07:fd:1b:79:
e2:45:32:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org