Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/nWIejHzVXqnB1FSfvBabD5B_yFE.roa
File: nWIejHzVXqnB1FSfvBabD5B_yFE.roa (raw, json)
Hash identifier: gBGcFJW0lYAoxYdArCYu6w60gO9jftRPUbEJawbBWJQ=
Subject key identifier: 9D:62:1E:8C:7C:D5:5E:A9:C1:D4:54:9F:BC:16:9B:0F:90:7F:C8:51
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27C0279CA42E6205AFCA6EEFC9B13A
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/nWIejHzVXqnB1FSfvBabD5B_yFE.roa
Signing time: Fri 28 Oct 2022 10:33:52 +0000
ROA not before: Fri 28 Oct 2022 10:33:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12735
IP address blocks: 89.117.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:c0:27:9c:a4:2e:62:05:af:ca:6e:ef:c9:b1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d621e8c7cd55ea9c1d4549fbc169b0f907fc851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:8a:80:5a:8b:a4:56:7c:0f:59:87:e3:55:
e0:ba:72:21:59:ca:3b:1c:73:11:55:49:93:f3:3c:
f3:4d:a0:36:63:58:bc:18:28:9b:bd:9e:4e:9b:d7:
73:6d:4d:a0:2b:2f:59:7a:a8:98:35:a2:28:cf:1d:
2a:d5:74:df:0a:ce:7c:fb:2b:d4:62:9a:d5:32:c5:
85:93:be:7b:a4:32:0b:05:55:1d:57:56:0c:09:19:
a8:b4:d3:9f:b1:a4:28:b4:d8:cc:46:a7:48:2f:d9:
53:fe:71:2a:21:c5:d3:5d:ba:eb:f9:65:e7:ea:8b:
15:59:9d:7a:6b:68:67:ad:e3:6b:bb:a9:c9:17:3f:
eb:e5:b3:3e:5f:dc:67:ba:58:22:b4:05:86:53:ad:
af:56:1d:35:9c:b3:9a:9f:84:6c:16:f9:4d:67:7c:
0b:a9:e6:f4:32:5f:d9:6f:8f:3c:69:73:fa:ae:64:
b5:40:26:da:5b:13:6e:48:17:03:ad:b0:c0:50:41:
78:c2:ba:c3:c0:70:e9:7d:3e:b9:90:13:ae:e5:f3:
f6:3f:3b:a1:ff:31:cc:b0:2b:3e:ae:2a:f1:fe:e7:
01:48:66:cc:05:cd:0e:ec:70:97:c5:2c:28:2e:70:
b8:f9:26:0a:03:d2:3a:d2:9e:c3:09:08:6d:8f:34:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:62:1E:8C:7C:D5:5E:A9:C1:D4:54:9F:BC:16:9B:0F:90:7F:C8:51
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/nWIejHzVXqnB1FSfvBabD5B_yFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a8:fa:05:e8:d6:14:12:77:13:42:5f:6a:dc:e6:5b:11:1f:
92:8b:30:cf:b1:72:07:ff:ac:79:ab:05:1f:17:f3:17:3a:60:
3b:97:45:78:44:12:c6:bf:81:f1:35:4e:46:14:a3:4d:bb:26:
79:8a:3d:db:63:50:2a:0a:7c:42:b2:70:45:e1:ac:16:bd:bd:
dc:81:f9:4d:f4:14:8f:8c:47:3d:3f:a1:2e:33:fe:20:d8:24:
64:55:2e:78:bf:04:fe:ca:4a:27:bc:41:da:26:6e:68:cc:27:
ba:ea:7a:0d:00:4c:12:d7:1d:c4:19:80:5c:a3:d4:8c:f9:f1:
a9:92:2c:b6:06:13:88:93:30:01:5c:65:49:0f:ff:e9:31:11:
3c:48:bd:de:c3:92:b7:36:c8:a5:07:67:78:12:04:dc:85:40:
eb:85:d3:8b:8f:e3:b5:d2:ac:c2:94:dc:45:83:1d:cc:93:c7:
7f:45:34:b9:29:d7:ff:1b:2e:cf:15:f3:1b:38:bb:d9:93:1a:
b8:d4:b4:cb:57:ed:a6:ae:b0:e4:c8:4a:b4:40:b4:0c:e1:0c:
3a:f5:f3:ec:30:cd:48:ac:c1:de:5a:87:d9:2d:b6:2e:27:70:
5f:d1:e0:26:f2:bb:55:49:d3:c4:5c:40:06:3b:a9:07:19:cc:
07:d1:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org