Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/pWa5aL2qUtLpUri6l2L4rP1QC44.roa
File: pWa5aL2qUtLpUri6l2L4rP1QC44.roa (raw, json)
Hash identifier: a6t7aipsP42+vN9LtJez19BKp9CyD0n9/VAE1lUAWQU=
Subject key identifier: A5:66:B9:68:BD:AA:52:D2:E9:52:B8:BA:97:62:F8:AC:FD:50:0B:8E
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27C77C94BC8DCE5A38344EF3CD9D5C
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/pWa5aL2qUtLpUri6l2L4rP1QC44.roa
Signing time: Fri 28 Oct 2022 10:33:54 +0000
ROA not before: Fri 28 Oct 2022 10:33:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33387
IP address blocks: 89.116.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:c7:7c:94:bc:8d:ce:5a:38:34:4e:f3:cd:9d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a566b968bdaa52d2e952b8ba9762f8acfd500b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:01:eb:b5:dc:24:c9:40:e8:83:8b:fd:e1:
a5:e2:bb:b7:3c:75:31:cd:4b:80:0a:dc:6a:05:fc:
29:b9:63:e5:3a:15:81:60:99:d5:98:15:59:12:78:
05:7f:e7:ba:33:9d:17:52:28:5d:04:01:6e:e2:f6:
17:4d:32:44:f6:6c:57:20:31:f1:9f:07:a0:1d:30:
e3:a4:a1:1b:8f:b3:fe:09:c3:dc:98:70:d1:72:ae:
7c:ab:6b:f8:50:84:90:20:40:5f:84:ec:2a:29:2e:
8f:5c:00:4b:d0:31:06:d0:39:2d:53:94:e9:26:35:
99:61:71:aa:fd:b3:d9:b4:0b:c7:60:21:92:ed:94:
ea:be:a1:83:67:49:43:18:5f:f6:dd:3e:78:0f:c5:
4a:49:4c:e1:c7:c2:54:66:c3:3d:a5:ca:90:66:0d:
07:1a:3e:81:1a:69:f1:cd:89:79:83:54:91:1d:30:
10:4c:1a:f7:8d:57:6f:3c:b8:41:a1:f4:41:05:b3:
ee:bd:eb:7e:4c:23:4f:14:88:ee:55:d3:bf:03:9f:
40:67:7f:09:ba:15:d6:84:4b:61:e8:9d:fa:41:41:
d7:ab:56:5d:31:97:03:a8:69:ed:33:74:1f:de:d9:
91:b4:3b:a7:65:aa:18:d0:40:0a:92:0d:6e:06:24:
64:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:66:B9:68:BD:AA:52:D2:E9:52:B8:BA:97:62:F8:AC:FD:50:0B:8E
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/pWa5aL2qUtLpUri6l2L4rP1QC44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:53:36:6c:9a:18:28:a5:ba:cf:c9:08:0b:e0:76:1a:b8:af:
f7:7b:b3:19:30:27:dd:3d:ec:f8:08:54:3b:77:72:b1:68:0b:
85:2c:c9:b4:ff:0e:15:f9:4c:82:26:1d:87:30:8b:33:49:f0:
6d:5e:2e:bb:0c:31:75:cd:22:d6:a5:3a:4d:b9:12:90:5f:39:
62:dc:06:0d:1a:b9:64:7f:fc:27:07:df:ed:1a:8a:91:f4:05:
7d:cc:d0:2b:69:9f:c2:70:1b:4e:7a:e6:1c:2b:45:79:6f:5f:
9a:a9:1d:c3:01:e5:f4:38:ed:2e:a9:d9:45:2c:02:7f:01:6b:
32:24:d8:a9:23:7a:30:d8:87:cd:c5:a6:b0:f7:a0:ac:72:d3:
a7:f6:8f:b9:10:14:51:59:5e:f5:a7:fd:9b:ea:5c:30:ad:7f:
b6:2e:b1:e2:7e:4f:fd:51:06:2a:65:fe:e9:a3:db:d8:e3:9c:
0b:82:68:40:06:a7:9e:5d:24:ab:16:8a:f9:0b:e1:0f:c5:41:
28:cd:51:35:ca:2b:4a:93:02:bc:a5:fb:97:7f:93:88:49:5d:
7a:3e:cf:a9:84:f3:49:79:99:c5:14:b1:f9:fb:87:b6:7c:e1:
e8:6a:ab:37:1c:a8:ab:48:59:19:58:a1:f0:de:4a:3a:84:e7:
69:3e:66:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:05 2025 by rpki-client