Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/cd7z3k5qpL0L7YhB5tM5baH0eFk.roa
File: cd7z3k5qpL0L7YhB5tM5baH0eFk.roa (raw, json)
Hash identifier: k77W7pqkSzI0L8Qc6BYFbl6y+pGJUyfYbXT9L8VIDtc=
Subject key identifier: 71:DE:F3:DE:4E:6A:A4:BD:0B:ED:88:41:E6:D3:39:6D:A1:F4:78:59
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27CDECEABC077035451D85CF5ECC02
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/cd7z3k5qpL0L7YhB5tM5baH0eFk.roa
Signing time: Fri 28 Oct 2022 10:33:55 +0000
ROA not before: Fri 28 Oct 2022 10:33:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 89.117.88.0/22 maxlen: 24
89.117.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:cd:ec:ea:bc:07:70:35:45:1d:85:cf:5e:cc:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71def3de4e6aa4bd0bed8841e6d3396da1f47859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:4e:3f:0b:68:82:55:63:e1:3b:dd:58:49:
14:22:52:ba:ce:d3:ce:cc:18:78:e5:9b:28:fe:5f:
bb:ad:7a:25:ac:aa:56:a4:4d:e4:a1:21:91:9f:f4:
c2:04:c0:81:e7:8d:a7:eb:a5:80:2b:5e:71:7c:72:
8a:bc:ed:b6:2d:1c:f3:90:33:2d:c3:d2:21:72:75:
00:b1:79:68:cf:8e:c2:05:3f:0d:e3:79:b8:be:a1:
0b:97:5a:3d:1d:a4:ed:89:27:9e:04:8e:85:ad:52:
dd:df:ad:92:0d:a3:a9:3f:57:2e:15:f0:ce:bc:02:
f7:f8:1e:f6:67:e0:10:48:a3:9c:14:8c:6a:9e:27:
3a:f3:b2:dc:dc:90:9d:7b:5c:cc:e1:10:d7:6c:78:
c4:9f:9f:81:6f:30:b9:36:a5:6d:06:c8:f1:92:63:
c7:56:83:f0:1f:e7:b9:93:a7:93:12:f7:67:40:5d:
42:59:47:5d:70:bc:6c:34:ad:4c:63:78:91:6c:9d:
91:9a:c6:b1:df:7f:3d:e3:cb:5a:eb:4a:d6:ba:5b:
02:53:5f:b5:dd:54:c9:3f:56:13:4f:b6:c5:a9:57:
a0:eb:b3:d6:7b:e8:49:83:75:be:b8:c2:eb:33:1c:
75:ec:18:1d:d9:bc:16:cc:b5:92:73:14:4a:6f:2e:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DE:F3:DE:4E:6A:A4:BD:0B:ED:88:41:E6:D3:39:6D:A1:F4:78:59
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/cd7z3k5qpL0L7YhB5tM5baH0eFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.88.0/22
89.117.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:13:9d:98:93:c5:e7:66:c1:05:35:1b:20:e2:14:b5:a4:e4:
1e:42:f7:2d:7e:8c:0d:78:b9:6a:f6:14:ed:e4:1c:93:34:e8:
42:95:f2:d2:dc:87:09:96:f2:66:a4:2c:66:b9:b0:0b:33:54:
ab:69:84:53:6f:41:8c:c4:13:66:a9:6f:d1:0b:4f:ae:d4:58:
54:54:d1:cc:1e:7d:63:f2:37:bd:b1:61:cd:74:28:68:99:91:
5e:9c:58:65:17:aa:b7:13:b7:71:1c:23:ca:62:09:9b:42:bd:
78:42:ed:32:86:c0:2d:ca:3c:0e:ad:49:e9:e7:d5:80:79:ea:
c1:c1:fe:eb:b9:2f:74:58:cf:29:8d:0f:42:3e:9f:1b:f5:23:
f9:4a:6e:9d:9d:c7:7b:fa:77:0c:73:82:ef:40:d6:a8:b2:8a:
db:c8:38:1b:77:0f:c3:d4:b5:68:d9:25:89:74:02:28:e0:30:
38:44:70:b2:39:40:fe:a7:db:9a:e2:f1:47:d8:5c:7f:72:a2:
a5:17:ea:4d:37:77:40:31:2b:ca:b2:91:bc:77:44:98:95:5b:
64:a7:1f:6e:e7:ef:7e:8c:61:53:3c:92:1d:2f:b5:41:3b:c3:
39:e7:91:7a:8f:d5:8e:bf:6f:5c:53:ce:35:d7:da:c2:31:65:
a6:d4:cb:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org