Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/UWZcGZlBhj3-Y8fyYUuhi31FDS8.roa
File: UWZcGZlBhj3-Y8fyYUuhi31FDS8.roa (raw, json)
Hash identifier: qls2l4hRDjNeAdzgVKW+nPgQIrwP1oGevZ3nV+aI/4s=
Subject key identifier: 51:66:5C:19:99:41:86:3D:FE:63:C7:F2:61:4B:A1:8B:7D:45:0D:2F
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27CC42CFE71F9FEC7397C3C92183BE
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/UWZcGZlBhj3-Y8fyYUuhi31FDS8.roa
Signing time: Fri 28 Oct 2022 10:33:55 +0000
ROA not before: Fri 28 Oct 2022 10:33:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46450
IP address blocks: 89.116.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:cc:42:cf:e7:1f:9f:ec:73:97:c3:c9:21:83:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51665c199941863dfe63c7f2614ba18b7d450d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:1b:7f:7f:20:09:33:9b:0f:09:58:78:1f:
71:dc:45:35:9a:76:2d:2f:27:07:07:70:fe:98:15:
24:5c:2a:c8:87:a4:e4:15:8c:d0:37:ad:49:55:ed:
3b:8b:2a:fb:54:9d:3c:f9:d6:3f:6e:ea:77:6e:ec:
a6:09:84:bb:83:d7:d2:55:dc:26:03:18:06:74:6a:
82:91:4e:1f:25:99:4b:c7:e2:31:30:2c:bf:c0:c5:
e9:33:62:ad:7e:53:33:ae:90:06:e2:ac:ae:5e:6f:
91:20:b9:60:be:ca:79:ed:f6:2e:b4:1b:0b:c7:2e:
d5:7d:dc:44:ad:5d:f2:4b:81:47:e0:d7:79:d9:3a:
70:a3:90:9f:70:f2:f1:81:cb:d6:60:3d:ce:7c:95:
fd:e5:b4:22:86:77:b7:fb:81:67:a5:f9:7e:b8:40:
f2:8f:6b:d5:b2:8a:4e:ff:c4:83:96:6b:f2:90:b5:
45:03:43:91:b9:e6:97:e4:2d:ba:b0:99:0e:51:11:
9c:d0:74:c1:2a:68:8c:3d:8a:b1:37:21:42:e4:2f:
f8:87:ab:f2:fa:b0:18:8f:31:4f:e6:33:a9:cc:c6:
5b:fe:30:52:b1:10:53:7d:53:c3:bc:f2:fd:ec:f2:
94:a9:bd:7f:40:70:d0:bc:cd:70:aa:98:4b:6e:dc:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:66:5C:19:99:41:86:3D:FE:63:C7:F2:61:4B:A1:8B:7D:45:0D:2F
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/UWZcGZlBhj3-Y8fyYUuhi31FDS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.80.0/21
Signature Algorithm: sha256WithRSAEncryption
02:34:87:57:86:39:8c:df:15:76:e4:a1:c3:b4:34:d1:9f:d4:
48:df:3e:5d:42:58:d4:cd:56:30:87:6b:b0:42:10:f1:2e:d4:
f2:7a:71:5a:dd:a2:79:a5:2d:6f:3a:06:cf:35:8a:cf:b0:f1:
34:8b:67:8a:72:5c:10:58:32:0f:05:1a:86:af:50:c3:57:50:
02:ff:f5:26:73:12:97:1d:9c:0c:67:f0:a4:5a:81:6a:4d:47:
f7:a1:88:96:d5:64:cf:7f:1f:2d:d1:38:6d:b7:0c:cf:0c:c8:
f2:1d:58:0c:cd:49:44:3d:1f:db:ab:d0:7e:3f:ad:46:34:21:
bc:23:49:ca:aa:40:82:a5:12:c1:37:a3:90:a4:98:e1:10:10:
bc:24:e9:bb:9b:ea:d4:23:02:4f:59:48:c2:27:d8:b2:42:19:
b8:e7:e5:71:d4:f2:f1:64:5a:86:a9:81:d4:a2:53:6d:f8:66:
be:61:5f:79:96:25:7a:d8:85:69:fa:d4:b7:05:44:c6:c6:fa:
93:61:39:dd:42:a7:7a:59:8c:de:22:77:a6:50:13:3b:36:b9:
de:c6:22:83:db:0a:23:3d:63:84:e5:78:46:ea:b8:bc:e8:6c:
b6:38:7d:20:9e:8a:fd:b4:e0:4d:c2:07:bc:2e:c4:0b:ae:69:
7a:89:b3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org