Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/LNAHHdYJb__1SdeGVX0dS3jruWM.roa
File: LNAHHdYJb__1SdeGVX0dS3jruWM.roa (raw, json)
Hash identifier: CM+NAMjVvxQ7U2qj3oaxz6xmEf+m4oCmHooeNBE5Y/I=
Subject key identifier: 2C:D0:07:1D:D6:09:6F:FF:F5:49:D7:86:55:7D:1D:4B:78:EB:B9:63
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27C6521A7FD3D4AB31A704845F41B6
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/LNAHHdYJb__1SdeGVX0dS3jruWM.roa
Signing time: Fri 28 Oct 2022 10:33:53 +0000
ROA not before: Fri 28 Oct 2022 10:33:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 89.116.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:c6:52:1a:7f:d3:d4:ab:31:a7:04:84:5f:41:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cd0071dd6096ffff549d786557d1d4b78ebb963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:a0:9c:c2:07:0a:ec:7f:81:c6:fa:97:97:
5e:7d:a7:ad:5b:31:15:da:1c:64:59:d6:28:34:b1:
52:a8:44:44:2a:e4:63:59:5f:08:21:5e:a3:ea:70:
ef:fd:8f:58:15:b8:5b:8a:15:ac:18:6b:4a:36:16:
e9:21:04:02:c0:75:04:3f:f8:d0:2e:3f:c2:11:80:
fe:5b:f5:af:ff:aa:f1:93:a2:98:f0:1b:ad:fe:3a:
90:02:61:9a:fd:32:42:a5:3f:38:5c:e6:d3:da:c5:
72:95:5c:d5:28:17:47:fd:82:34:35:2a:f0:76:f6:
2e:28:2e:53:0f:df:42:f2:1f:84:d7:e8:24:c6:8f:
6f:d3:d4:ab:38:8d:3b:44:e7:86:c8:68:98:0d:4f:
69:69:35:84:46:fd:80:8d:ec:aa:0a:3d:ab:59:91:
04:29:30:7e:bb:c6:10:d4:dd:2f:9b:4e:50:a1:75:
e4:ea:c4:35:8c:47:46:1a:96:08:dd:ee:13:85:38:
75:5c:ff:b9:2a:c9:b1:53:9b:80:58:c3:f7:4f:91:
7e:d2:b8:b9:2d:93:94:b4:a2:a6:f2:70:1f:a4:2b:
f2:5b:70:df:0c:c8:31:8c:79:d0:8a:52:02:ba:a5:
68:cb:dd:bd:79:37:07:a7:f0:1a:53:b5:b4:e8:5e:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D0:07:1D:D6:09:6F:FF:F5:49:D7:86:55:7D:1D:4B:78:EB:B9:63
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/LNAHHdYJb__1SdeGVX0dS3jruWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.48.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:d8:66:c5:62:55:3e:c3:66:51:57:56:00:1e:15:01:60:8a:
8b:bc:bf:11:9e:8c:83:c5:8e:b2:f1:d8:9d:d7:ef:cf:3a:f7:
2c:1f:38:55:6a:1a:9c:d1:6e:fd:d4:ac:a6:10:3f:34:a3:2e:
90:a2:dd:7c:0b:fc:eb:ac:58:5f:77:f0:a4:05:f2:b3:6e:44:
49:5c:78:4a:25:e0:bb:74:0c:61:9d:1f:c1:29:1f:fd:de:77:
d4:0b:81:8d:29:00:05:49:ac:81:f7:c8:76:e8:1d:89:0a:44:
c6:1f:d1:c7:94:2a:68:b2:0c:31:88:8c:0a:69:0d:65:42:5c:
90:36:01:7d:f5:8a:ec:8b:31:80:fe:b2:76:07:8e:72:bf:f8:
69:83:10:59:9f:a7:d6:20:06:61:1a:b6:b2:90:d3:63:35:4e:
e5:a5:5b:8a:51:a1:8b:ff:74:54:bc:12:05:4e:4b:07:2a:6c:
99:d9:11:c7:94:99:e6:6a:7a:3d:f8:16:dd:f4:32:74:b6:ce:
f3:bc:ec:1f:9d:65:bb:6c:96:76:5a:ee:29:a2:34:94:6f:ad:
62:84:61:db:e3:fb:10:ab:bd:a8:0f:e2:c1:8c:37:20:73:9b:
91:68:7e:21:06:d7:7a:6a:52:f5:8f:bd:d8:69:f0:e2:14:3e:
67:5e:16:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:28 2025 by rpki-client