Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/ZWCz35-5oj6C8Xb5tp_z_he2CJY.roa
File: ZWCz35-5oj6C8Xb5tp_z_he2CJY.roa (raw, json)
Hash identifier: Msb2meG16HRpSir38vDMkQj0eNBLeRjFcEPy8QBPNO4=
Subject key identifier: 65:60:B3:DF:9F:B9:A2:3E:82:F1:76:F9:B6:9F:F3:FE:17:B6:08:96
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27D3B5CB31A1A9A7B7148A5526AEB9
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/ZWCz35-5oj6C8Xb5tp_z_he2CJY.roa
Signing time: Fri 28 Oct 2022 10:33:57 +0000
ROA not before: Fri 28 Oct 2022 10:33:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 89.116.239.0/24 maxlen: 24
89.116.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:d3:b5:cb:31:a1:a9:a7:b7:14:8a:55:26:ae:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6560b3df9fb9a23e82f176f9b69ff3fe17b60896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:67:d0:bd:78:74:fc:4b:81:35:d0:54:f8:23:
9f:7e:43:bb:24:7a:21:05:37:dc:93:52:6e:89:d1:
14:1a:ef:20:e1:44:38:10:d8:34:75:6a:27:98:6e:
c8:e8:82:91:cf:e7:f0:9a:34:88:78:aa:56:5b:82:
68:43:98:27:75:a8:79:2c:9d:c7:b9:3b:f3:a2:56:
a1:b3:e1:e7:b3:23:43:1a:48:d7:14:67:67:f1:c9:
01:3d:cb:e7:52:95:46:24:db:f5:3d:71:91:c3:fd:
1f:f8:20:dd:95:7f:01:97:a5:aa:5d:8f:58:7e:7a:
7e:46:8e:8a:95:d3:d2:81:58:e6:98:81:67:3a:f9:
ba:50:0e:9a:39:00:bb:ff:7d:c8:61:4f:7e:c3:e2:
06:ec:26:33:b2:85:ad:43:9e:b3:89:e6:80:c3:bd:
cc:b1:43:74:34:07:34:3e:99:e1:99:4d:1a:8c:79:
5a:9a:82:c0:d0:e8:fb:44:a0:38:c5:3e:d2:ed:f6:
7e:5c:6c:c9:ba:1e:68:e3:60:95:05:1d:ca:a7:ca:
d3:eb:7d:3b:c2:59:0b:71:8f:9c:ad:79:05:92:36:
34:c7:3e:f3:1f:59:3c:14:b9:70:f1:2d:5b:17:a6:
5c:1e:c5:c4:c4:84:8b:7f:a7:6c:f8:11:c7:be:c5:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:60:B3:DF:9F:B9:A2:3E:82:F1:76:F9:B6:9F:F3:FE:17:B6:08:96
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/ZWCz35-5oj6C8Xb5tp_z_he2CJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.177.0/24
89.116.239.0/24
Signature Algorithm: sha256WithRSAEncryption
33:50:c3:99:d2:07:64:f6:18:2e:6c:36:f6:3a:b7:76:a0:e2:
80:2c:ae:66:ed:aa:8d:b1:5e:fd:a5:c7:ed:f7:bc:e9:ef:c5:
69:fb:ad:d0:e5:88:95:f8:12:e9:cb:df:55:b4:ec:98:15:7c:
e1:29:89:d1:0d:07:08:ad:02:71:d8:d5:a4:07:21:e4:06:e5:
8d:28:2f:ce:0d:b1:94:e8:97:ac:55:92:10:b1:d7:86:f3:60:
89:75:e7:e1:af:9f:c5:13:bf:51:ed:e1:14:61:d6:db:cb:0b:
21:d9:6c:d9:a2:a1:60:ca:48:26:0a:df:3a:0c:74:71:f0:5f:
51:15:17:d4:6a:37:05:e9:99:b8:89:a3:33:c1:8e:28:7e:ed:
b9:96:92:7f:cd:0b:ec:b6:89:8f:77:42:4c:cb:aa:51:56:f2:
08:13:e8:08:4b:7f:8c:92:5e:b4:45:05:e8:7d:fc:79:a2:41:
03:b7:1b:a7:77:d7:0b:69:33:a6:c9:87:b0:3d:43:4c:01:8c:
83:b0:d3:9b:9b:5c:45:7f:a1:72:25:c9:e9:e3:5c:09:d7:98:
b0:fe:23:dd:7c:83:da:72:34:b5:e0:b6:e4:cd:09:0a:41:35:
f0:60:35:a7:53:1f:67:08:02:b7:76:34:be:df:e6:cb:7c:b8:
89:00:df:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org