Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/CWl2OK6Nj76aANNIqQSfPiuD3kY.roa
File: CWl2OK6Nj76aANNIqQSfPiuD3kY.roa (raw, json)
Hash identifier: zd2irtN6HZLDN1C9jXKkVPhPimu5yHUUfj88ICHBgRQ=
Subject key identifier: 09:69:76:38:AE:8D:8F:BE:9A:00:D3:48:A9:04:9F:3E:2B:83:DE:46
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27C8D0B6E58CC98ECA5C4D40071E2B
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/CWl2OK6Nj76aANNIqQSfPiuD3kY.roa
Signing time: Fri 28 Oct 2022 10:33:54 +0000
ROA not before: Fri 28 Oct 2022 10:33:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 89.116.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:c8:d0:b6:e5:8c:c9:8e:ca:5c:4d:40:07:1e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09697638ae8d8fbe9a00d348a9049f3e2b83de46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:fb:39:b1:9c:5b:c7:7a:50:84:27:0f:db:
0b:b2:57:13:9f:6f:93:02:14:b1:8d:bb:9e:a1:6f:
6a:03:71:bd:0c:a0:4b:d0:63:c4:2e:54:a5:e1:33:
e0:81:60:52:2b:0e:37:97:66:51:c0:4c:58:27:c2:
1d:c9:76:a4:1c:c8:53:dc:df:31:11:cd:d4:f6:91:
43:ce:26:38:a7:13:de:a0:28:89:95:52:ec:98:a6:
28:8a:b8:4c:cb:84:c1:17:49:93:c4:fb:9b:93:2d:
57:cd:af:14:6b:c0:c9:04:af:b6:8f:25:63:21:08:
44:f5:45:f9:b2:55:87:a3:5b:68:c1:a6:34:4a:00:
bb:a3:9b:40:aa:cf:53:06:bb:e8:b6:f6:fd:60:f5:
9a:89:a5:0e:b8:3a:22:e5:ac:a2:b0:b1:fe:ac:11:
ea:f9:5d:8b:52:02:33:5d:c2:a5:4e:0c:2e:69:71:
eb:f7:44:c3:c8:c0:5d:21:74:2f:ae:a2:0e:7f:8a:
7e:2a:66:98:ec:8d:b0:82:a7:67:ed:03:68:87:83:
3e:fb:27:db:33:ab:7d:9a:50:d5:e2:8e:12:b9:bd:
54:1d:8c:b5:a7:b6:e0:cf:15:91:61:b0:11:38:cb:
d1:a4:80:32:b1:bc:8e:f7:35:9b:f6:9a:07:a3:3b:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:69:76:38:AE:8D:8F:BE:9A:00:D3:48:A9:04:9F:3E:2B:83:DE:46
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/CWl2OK6Nj76aANNIqQSfPiuD3kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.161.0/24
Signature Algorithm: sha256WithRSAEncryption
19:2e:b6:98:a1:d1:70:c5:d0:24:dd:ff:ca:40:f8:74:fb:8d:
62:c9:28:44:1b:a5:1b:ba:25:4a:f3:58:f3:bd:c8:06:a1:de:
64:53:8d:b0:0f:d2:38:c0:7b:1b:73:e4:57:22:a7:8a:41:9b:
02:44:20:1e:85:f3:50:a9:df:85:78:d1:90:a8:70:bc:cc:fd:
68:cd:30:f3:60:21:2c:31:08:64:d5:e2:c4:1c:e4:48:fb:d2:
3d:a6:77:8e:45:89:d3:2f:da:04:a0:61:63:fd:d9:6c:25:22:
d2:e9:9b:cd:90:eb:ee:ed:e3:f1:ce:7d:d1:54:78:ad:3c:e2:
de:d2:02:25:29:de:b0:34:6b:94:89:ed:c6:0f:be:0b:80:fe:
1d:ff:aa:9b:76:d9:8a:a7:59:4f:da:56:6c:19:a8:45:6c:10:
ae:43:4c:72:01:e6:0f:91:86:29:a4:fd:5a:f3:5d:a4:61:0f:
b7:f8:97:6b:45:f5:95:57:ee:54:69:2e:43:b3:9d:54:ab:cb:
b0:db:1b:08:95:9f:72:06:3c:95:59:17:8e:3e:7e:00:92:c2:
a3:11:90:27:da:71:bc:87:8f:3e:51:41:72:d5:e0:77:32:b1:
4c:e2:41:9e:a0:00:ce:81:2d:35:87:d2:d4:c7:85:b0:32:27:
72:1b:db:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:18 2024 by rpki-client on console-fra.rpki-client.org