Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/aioPiW1Zo7u_ko-hMbRLCK4SAY0.roa
File: aioPiW1Zo7u_ko-hMbRLCK4SAY0.roa (raw, json)
Hash identifier: UfrMkLIG5Fkp3722gahIJmp8ntoOmPxFQ5AgN90sbqU=
Subject key identifier: 6A:2A:0F:89:6D:59:A3:BB:BF:92:8F:A1:31:B4:4B:08:AE:12:01:8D
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 018437893695FB038FF5871A2EB9F77B1BD2
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/aioPiW1Zo7u_ko-hMbRLCK4SAY0.roa
Signing time: Wed 02 Nov 2022 08:50:50 +0000
ROA not before: Wed 02 Nov 2022 08:50:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205431
IP address blocks: 89.116.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:89:36:95:fb:03:8f:f5:87:1a:2e:b9:f7:7b:1b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Nov 2 08:50:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a2a0f896d59a3bbbf928fa131b44b08ae12018d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:1a:6a:f3:ec:9d:e7:61:6f:b7:dc:79:2b:
c5:51:4d:fb:5e:78:ec:ff:d5:05:fe:95:f4:99:20:
4a:af:b2:9b:56:e8:ea:9d:3a:6b:25:a5:f3:45:d8:
ab:15:f9:cd:8d:d8:14:bc:31:47:c9:62:d3:63:fd:
44:9b:40:bc:2c:f2:72:45:f6:d0:f6:e1:f0:20:72:
c2:5a:0d:9e:81:d5:0c:9a:a1:c6:20:f0:ae:a9:a3:
23:81:c9:dd:21:d6:9b:8a:9a:f5:4c:ad:c0:fe:2d:
de:09:5a:78:ea:bb:2e:2e:9f:27:59:a8:a4:7d:c1:
f8:16:1d:3f:36:df:8e:5a:d5:e4:5e:af:0b:9a:92:
5f:95:bf:50:8b:9d:ad:96:cc:82:40:c9:43:45:b3:
14:18:cb:46:9a:dd:4a:b7:a8:98:30:70:94:60:2f:
6b:6e:02:51:ba:4c:65:ab:7c:6e:0d:fb:d0:4b:fa:
78:65:1c:c9:8e:04:a5:ea:0d:cd:b8:f8:74:db:e2:
3f:f6:dc:c8:03:49:fe:bc:8b:f3:0c:e7:fa:bf:2f:
a2:5f:63:ae:46:7c:4d:51:8e:fe:43:75:0f:d4:bd:
8c:a4:7f:88:06:c2:3b:82:8b:bb:bf:9a:f9:a5:bc:
3a:6c:5a:1e:28:6b:2c:ab:41:58:b7:ae:4d:bc:a0:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2A:0F:89:6D:59:A3:BB:BF:92:8F:A1:31:B4:4B:08:AE:12:01:8D
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/aioPiW1Zo7u_ko-hMbRLCK4SAY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.158.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b2:ba:29:29:b9:ca:68:25:7d:e2:45:2b:05:65:8f:dd:b9:
1f:5a:54:bd:c5:b0:17:86:25:71:e5:e8:ec:db:e8:79:40:3d:
cf:dd:7e:b3:96:4e:7f:93:34:3b:74:a0:ac:28:0a:d8:2e:da:
7e:da:61:5b:c5:82:33:74:a0:1f:d4:ca:51:c4:35:00:7c:0f:
83:3b:6d:3e:45:c1:c5:76:ce:45:5f:2c:ff:23:41:c5:71:73:
7a:98:27:cc:cf:5c:82:fb:8f:bf:d6:41:07:bb:6a:20:e2:24:
c2:21:8f:cf:56:3c:4c:36:8a:9b:60:ec:ab:d4:ae:e0:fc:3b:
75:46:a3:cb:b5:17:53:cd:22:7f:ba:12:16:b7:5c:89:49:b4:
14:4c:a5:e0:c6:f1:05:2f:cc:12:2d:30:fe:6b:c1:f0:8b:c1:
f9:bf:2a:7f:3b:e8:c3:54:c7:1c:dd:35:2f:b4:d9:3a:70:44:
a1:92:65:d6:82:a7:75:5e:db:84:58:57:f0:74:9e:c3:02:af:
7b:57:b5:2a:3f:9d:e6:3d:29:50:bc:19:d7:b4:6d:63:f6:f1:
a3:95:91:0f:58:f7:b3:34:fa:95:fc:26:c1:25:c9:52:09:1e:
45:7f:da:49:19:cc:81:00:ae:dd:06:ad:50:a2:10:89:2b:50:
b0:07:d0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org