Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/F59chhT1gYaQ_5PF05ALukxpfCQ.roa
File: F59chhT1gYaQ_5PF05ALukxpfCQ.roa (raw, json)
Hash identifier: 0dzTE6g3vxQ53UDqEt6DvssNGjB2LePlXdcbfu+8E/o=
Subject key identifier: 17:9F:5C:86:14:F5:81:86:90:FF:93:C5:D3:90:0B:BA:4C:69:7C:24
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 018425CB4DD2AE3132F08A023A81CCF7A387
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/F59chhT1gYaQ_5PF05ALukxpfCQ.roa
Signing time: Sat 29 Oct 2022 22:09:51 +0000
ROA not before: Sat 29 Oct 2022 22:09:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 89.117.96.0/22 maxlen: 24
89.117.104.0/22 maxlen: 24
89.116.44.0/22 maxlen: 24
89.116.48.0/22 maxlen: 24
89.116.63.0/24 maxlen: 24
89.116.61.0/24 maxlen: 24
89.117.126.0/24 maxlen: 24
89.116.60.0/22 maxlen: 24
89.116.60.0/24 maxlen: 24
89.116.62.0/24 maxlen: 24
89.117.152.0/22 maxlen: 24
89.116.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:25:cb:4d:d2:ae:31:32:f0:8a:02:3a:81:cc:f7:a3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 29 22:09:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=179f5c8614f5818690ff93c5d3900bba4c697c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:28:86:41:3b:67:2d:99:d2:39:66:c6:96:
52:08:77:2c:71:39:c1:c1:17:ad:17:9c:83:b9:30:
ac:37:7e:67:24:8e:bc:6d:68:00:89:53:a7:17:f1:
20:6c:da:9f:00:26:a1:20:44:d1:50:a5:6b:ac:a8:
2d:b2:42:3e:cc:0c:93:8f:01:10:6b:ec:a7:77:80:
7d:0d:ca:91:6b:ce:43:ff:2e:80:53:a9:99:97:dc:
26:3f:3d:2e:89:3c:f2:6c:25:d4:49:36:5d:4a:43:
3c:c8:4c:e8:54:b1:57:d5:0f:db:51:fc:bd:7a:6e:
12:26:ba:a2:82:38:ea:73:a8:8b:96:e2:cf:7a:38:
7e:23:ac:c5:e2:dc:66:37:71:79:00:a8:7a:0a:68:
41:da:7d:b9:45:f1:5d:00:4a:03:4e:78:a0:59:f2:
ac:a2:e9:bc:34:9a:6b:50:84:3b:03:83:cb:bc:77:
f4:f9:67:eb:ad:4a:9d:23:89:63:65:5a:0c:40:e4:
29:9d:d7:54:3a:f8:0b:09:22:a0:c5:78:cf:2e:04:
82:a0:84:14:d3:48:6d:2d:11:79:03:9c:bf:96:da:
7b:b6:b5:b6:b5:20:3d:74:a0:56:3a:25:82:f2:ba:
2a:37:65:b8:e8:d8:68:46:0d:19:76:25:21:8d:98:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9F:5C:86:14:F5:81:86:90:FF:93:C5:D3:90:0B:BA:4C:69:7C:24
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/F59chhT1gYaQ_5PF05ALukxpfCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.44.0-89.116.51.255
89.116.60.0/22
89.116.212.0/22
89.117.96.0/22
89.117.104.0/22
89.117.126.0/24
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:49:55:8a:99:8f:36:7f:bf:5f:e1:e6:dd:fe:d4:e1:d0:51:
b1:d4:3b:9d:88:a2:f2:a9:77:49:57:68:f7:ee:ac:87:4f:c1:
1e:40:cd:4b:a2:cf:fb:2d:7b:b3:fe:b2:07:e2:e8:7c:48:ef:
c3:61:62:b7:8f:05:9e:7e:72:13:f8:ee:dc:5b:30:c2:2d:d8:
4a:dd:9c:fd:6c:af:9a:cb:4e:98:22:ab:93:de:3a:1c:f4:9a:
a4:97:91:5f:3f:79:4b:32:5a:f5:f7:07:42:c5:0e:fd:54:98:
c0:41:41:a9:d4:ec:bd:4d:80:d6:39:5b:e5:16:00:22:09:f8:
e2:f9:be:ff:9b:00:88:48:fb:a2:5f:17:00:1e:5f:90:89:dc:
c4:80:e8:81:a5:97:49:40:2a:34:f6:ce:4d:ee:04:a2:81:7c:
24:17:82:ed:f4:b4:65:5d:0a:f3:ae:71:b4:25:4f:c4:7d:70:
fd:92:8b:47:1c:a8:90:16:ac:53:3c:03:30:fc:b3:4b:81:c6:
3c:62:04:f5:46:d6:1d:e7:17:07:16:37:77:66:ac:1d:f0:6d:
2b:27:96:fe:d6:ad:e5:19:c3:69:ad:0c:d4:33:57:a3:23:35:
93:84:04:c9:fe:cf:f7:65:2e:b4:03:74:44:10:79:27:f3:d1:
70:0f:f0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:45 2025 by rpki-client