Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/44_qmQnX5cleR6FZ8WVFgEiu0tc.roa
File: 44_qmQnX5cleR6FZ8WVFgEiu0tc.roa (raw, json)
Hash identifier: 8yiwERr39H+3t1JlAwWQB5deJBBr47C3s7Au6eaU+lY=
Subject key identifier: E3:8F:EA:99:09:D7:E5:C9:5E:47:A1:59:F1:65:45:80:48:AE:D2:D7
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27CE53D4C5A3C3A71105C626AF8858
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/44_qmQnX5cleR6FZ8WVFgEiu0tc.roa
Signing time: Fri 28 Oct 2022 10:33:55 +0000
ROA not before: Fri 28 Oct 2022 10:33:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51847
IP address blocks: 89.116.89.0/24 maxlen: 24
89.116.88.0/23 maxlen: 24
89.116.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:ce:53:d4:c5:a3:c3:a7:11:05:c6:26:af:88:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e38fea9909d7e5c95e47a159f165458048aed2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:85:83:98:e6:43:62:79:91:27:89:5a:a7:2f:
0f:ff:26:41:1e:03:b8:25:23:3a:fd:30:f4:cb:24:
89:51:93:90:f8:11:91:42:54:63:ea:53:2d:14:8e:
3a:68:ef:5f:3e:9a:f7:0a:7f:c6:44:24:c3:db:67:
d7:d2:4f:b2:41:d3:87:2e:22:31:a8:d4:ae:e6:b4:
15:bb:cf:1f:38:4d:c8:24:17:b9:9e:de:b9:55:8e:
02:1f:e0:ed:89:39:14:d2:b8:3e:c8:ca:b8:2a:17:
0f:42:b3:bf:e6:df:58:82:3e:1b:8e:54:4f:3f:89:
09:27:cb:be:76:43:c5:e4:4b:30:fd:b3:94:d1:ab:
14:cd:af:23:64:ed:e3:ba:c6:86:38:26:c0:a8:6e:
2c:c8:d4:7a:c0:e9:1c:d4:5b:07:43:6f:e1:e0:96:
6f:d4:3d:6f:ec:67:9c:b6:a6:1a:94:cd:2b:52:be:
9c:f5:ac:47:e9:cb:5b:e7:89:95:a5:56:9e:4b:c2:
fd:b5:03:8c:f4:32:eb:7a:ba:4b:b1:cf:98:a8:a2:
4a:06:58:52:6d:0e:19:78:ba:90:f2:95:7d:56:7d:
59:20:00:b7:8b:96:cc:d1:43:1f:4a:a9:f1:74:ab:
cf:ce:13:26:d6:e9:d4:e1:8a:9c:fb:2e:ec:03:2a:
de:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8F:EA:99:09:D7:E5:C9:5E:47:A1:59:F1:65:45:80:48:AE:D2:D7
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/44_qmQnX5cleR6FZ8WVFgEiu0tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.88.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:8f:31:ba:e9:f6:6e:57:df:60:08:68:0d:d6:c7:00:5a:f5:
27:ae:91:43:3a:2b:81:a1:b4:3c:de:60:0e:6a:18:f1:b7:a6:
91:3e:54:b8:6b:66:eb:cc:e5:de:cc:72:3a:64:c3:14:5b:81:
e6:93:b1:5f:96:b1:9a:67:97:b3:b7:9b:5b:8e:f7:a9:b6:a5:
a0:26:cf:bb:07:bc:0d:7d:97:bd:d6:63:64:3c:55:0f:b6:d4:
75:4a:6b:b0:21:09:aa:1c:78:af:85:d6:c6:fa:fb:6b:18:69:
66:50:36:4d:0b:30:87:0d:d4:e2:b2:1e:ea:3d:b3:d2:27:37:
ea:4b:d6:9d:3d:16:6f:95:4b:6a:23:b0:a2:d7:e3:af:da:aa:
0a:bb:88:ac:44:e8:36:06:7a:d7:ed:d1:e3:82:f6:45:3c:68:
c1:4f:ef:16:c8:4d:29:bd:f8:25:1c:69:45:09:eb:80:6b:06:
fb:a0:1f:6a:ab:a3:90:10:c1:a9:6f:7c:74:e7:d4:32:5f:72:
e9:45:7c:04:c0:ce:3a:68:c9:5b:b1:fe:c4:d4:15:b2:ad:bb:
b4:91:f0:ca:e2:30:d8:73:8e:0f:07:33:4c:1f:df:3a:22:68:
7f:a1:92:2b:16:07:dd:55:a9:08:9d:1d:1c:f9:68:c1:a5:31:
19:c6:bf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:18 2024 by rpki-client on console-fra.rpki-client.org