Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/rGJ1ti8dH6EuxJCMshgtyGGydlE.roa
File: rGJ1ti8dH6EuxJCMshgtyGGydlE.roa (raw, json)
Hash identifier: fJWHZx2k6/IKxFkF7G+sxRVyZiZpcJVWYoF8wljt9Eo=
Subject key identifier: AC:62:75:B6:2F:1D:1F:A1:2E:C4:90:8C:B2:18:2D:C8:61:B2:76:51
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27D5C90819C7BC6C2BFA64380F6FB5
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/rGJ1ti8dH6EuxJCMshgtyGGydlE.roa
Signing time: Fri 28 Oct 2022 10:33:57 +0000
ROA not before: Fri 28 Oct 2022 10:33:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142617
IP address blocks: 89.116.248.0/24 maxlen: 24
89.117.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:d5:c9:08:19:c7:bc:6c:2b:fa:64:38:0f:6f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac6275b62f1d1fa12ec4908cb2182dc861b27651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:84:1c:17:0c:ac:67:d1:b4:43:ed:e8:2c:df:
e3:9f:45:11:cd:0f:e2:c2:ae:a1:f4:33:95:e9:63:
c6:aa:20:e3:9b:c4:ce:e7:81:7e:0c:0e:17:ac:a7:
7c:f0:0a:4d:8c:5a:c8:95:5e:48:1d:ea:9b:fc:fd:
63:bb:8c:1e:96:cc:0a:c4:63:b0:b7:27:a7:3c:b5:
f5:60:72:3b:be:43:92:f0:50:1c:30:45:2c:84:72:
ff:5e:3f:42:a6:e0:0e:8b:15:a7:e2:9e:07:ec:02:
d7:53:e2:2b:8e:5b:7e:e5:7c:d7:a7:f3:a7:23:3b:
ef:d9:e9:46:24:b4:15:a4:f0:df:1a:7d:4f:20:25:
f4:d9:3a:7f:cd:1f:d0:f0:b3:d8:76:3b:10:40:93:
6d:58:b8:a9:30:23:fd:6c:5c:9c:5c:50:d3:1a:8f:
3e:67:8c:c4:1b:d8:49:06:c7:50:d9:b7:59:35:29:
b9:87:1f:59:5c:87:69:a4:28:29:43:e7:44:24:88:
c4:73:d0:04:06:72:11:7c:a8:36:a2:b1:75:2e:5a:
37:5e:34:af:62:82:6f:d5:74:9e:e8:b5:a8:73:b5:
17:b2:48:a8:c9:19:d7:2e:3c:ef:d3:4e:4c:7b:bb:
7d:0b:24:7c:15:2c:8f:86:3e:36:eb:22:b9:b7:1b:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:75:B6:2F:1D:1F:A1:2E:C4:90:8C:B2:18:2D:C8:61:B2:76:51
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/rGJ1ti8dH6EuxJCMshgtyGGydlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.248.0/24
89.117.144.0/21
Signature Algorithm: sha256WithRSAEncryption
77:af:8b:97:8d:41:c3:7e:8c:c2:93:ef:a0:45:c0:30:77:77:
f7:b7:96:83:87:f2:6e:11:84:11:0b:44:c1:96:f7:92:e9:e5:
82:97:f1:46:bf:86:69:88:a1:4a:af:2a:e2:84:87:4d:7a:6f:
03:8a:f6:1b:66:12:23:41:f3:13:b8:a1:ae:19:4b:c6:16:06:
34:e8:9e:10:52:ee:6c:19:59:11:30:f7:b3:27:27:48:cf:42:
d6:00:e5:84:2f:7a:3c:be:e7:3a:26:34:e7:b8:94:47:4d:72:
7b:80:a2:35:89:89:b4:a7:46:51:17:9b:cc:05:5a:84:1f:60:
a2:39:b2:77:13:e0:44:88:17:ac:19:9a:3e:5c:30:35:f6:3b:
73:9f:b4:f9:ed:c4:8f:d8:86:4c:f8:76:c8:e0:54:6d:f3:d8:
c7:58:ab:f7:39:45:28:1f:98:42:aa:43:3c:01:95:a2:4c:dc:
65:0e:e0:a8:b7:12:f0:3e:fc:30:cf:28:e3:69:be:fb:79:dd:
9d:ff:c5:c2:ff:d2:04:58:da:c1:e6:e3:8e:7f:81:fd:04:22:
81:6d:78:00:e9:99:52:2d:09:f7:7b:ce:23:24:7c:7f:18:19:
2e:e2:89:ec:0d:54:bc:04:f7:59:9d:8c:ea:6c:d9:06:c4:80:
6b:18:d5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:45 2025 by rpki-client