Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/thVyasENk3MzKqDy2IjFsEyxPxw.roa
File: thVyasENk3MzKqDy2IjFsEyxPxw.roa (raw, json)
Hash identifier: SLVn3fx1y0t+qAjUZSrgGwRmUDU0bOMNoOnov2BECF8=
Subject key identifier: B6:15:72:6A:C1:0D:93:73:33:2A:A0:F2:D8:88:C5:B0:4C:B1:3F:1C
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27DB74B2EACABE453F5E1CE8790B92
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/thVyasENk3MzKqDy2IjFsEyxPxw.roa
Signing time: Fri 28 Oct 2022 10:33:59 +0000
ROA not before: Fri 28 Oct 2022 10:33:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209737
IP address blocks: 89.116.106.0/23 maxlen: 24
89.116.126.0/23 maxlen: 24
89.117.104.0/22 maxlen: 24
89.116.44.0/22 maxlen: 24
89.117.0.0/22 maxlen: 24
89.116.48.0/22 maxlen: 24
89.116.60.0/22 maxlen: 24
89.117.152.0/22 maxlen: 24
89.116.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:db:74:b2:ea:ca:be:45:3f:5e:1c:e8:79:0b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b615726ac10d9373332aa0f2d888c5b04cb13f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:93:b1:ee:ee:9c:d3:b7:27:3f:a0:5f:82:ff:
1f:44:c5:5e:ee:08:e9:c7:96:2b:41:de:b5:83:2f:
8d:ec:7d:e5:f3:6e:d8:44:ad:84:40:d8:ba:f7:aa:
96:6c:c5:d2:39:4c:6b:83:a9:6d:36:2e:40:96:c4:
1f:72:bc:8e:7d:7b:e7:6c:71:51:ed:b7:f3:f0:43:
88:60:dd:e0:58:ee:45:8e:7e:2c:83:c9:50:42:a7:
e9:7e:e3:08:80:1a:61:36:5c:c7:9f:9c:aa:78:a6:
22:84:a4:8c:7d:e6:53:35:11:d8:e8:b5:77:70:9b:
0a:7d:2b:0a:87:2a:5d:1b:ad:4c:c7:22:7a:b4:c2:
6a:e1:a8:27:71:16:46:43:b4:27:9a:c7:49:d0:f1:
ac:85:64:50:16:30:34:79:7a:58:64:b9:d8:07:f7:
06:5a:78:a5:a3:41:eb:e5:81:17:98:11:d9:13:16:
7a:b7:3f:b0:5a:9a:e8:f2:26:22:a0:e8:5e:c6:13:
90:f6:7f:a1:26:d9:8a:8e:78:80:5c:95:2d:04:45:
a1:ae:52:fd:9e:1b:3c:d4:20:ef:da:58:39:55:4e:
c1:f6:2b:35:46:f3:d8:bc:32:89:8b:09:8b:46:29:
da:05:1a:59:52:93:06:91:bb:56:17:10:ee:92:3f:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:15:72:6A:C1:0D:93:73:33:2A:A0:F2:D8:88:C5:B0:4C:B1:3F:1C
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/thVyasENk3MzKqDy2IjFsEyxPxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.44.0-89.116.51.255
89.116.60.0/22
89.116.106.0/23
89.116.126.0/23
89.116.212.0/22
89.117.0.0/22
89.117.104.0/22
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:43:03:8e:a7:30:d3:9f:c6:18:c6:5d:35:20:26:ba:61:95:
1b:fa:72:9c:d3:b4:7d:22:51:51:0b:47:36:21:10:15:24:a7:
b7:40:e6:3a:85:08:df:a6:5a:73:43:41:9d:9e:21:99:ee:a2:
97:ee:2e:36:b1:63:fb:2b:84:38:39:1f:95:02:68:b5:e4:1c:
7d:25:a1:5b:1e:cc:c7:ef:b9:54:63:80:e3:11:c5:6d:93:02:
77:77:a1:30:23:92:08:27:96:d7:3c:9e:b5:be:98:63:af:cc:
b8:15:33:a0:7a:7c:a6:45:b4:26:76:3a:7a:6a:52:b3:a4:ab:
11:18:0a:7f:52:a4:32:93:e3:de:01:63:67:8f:1c:58:a6:5d:
19:23:12:65:3d:04:4c:d1:a4:d6:49:90:af:21:28:c4:65:b2:
89:1d:d0:2e:7c:b9:73:25:eb:88:bf:4d:62:78:19:85:ca:8a:
47:0b:57:3b:9a:cf:c2:b3:ca:53:6d:97:8c:64:b5:6c:7d:b3:
9d:2e:2c:d0:c4:1a:de:b3:b3:14:2d:2d:c2:7b:cb:bf:ca:69:
19:b6:39:c5:68:1a:03:75:80:c8:f9:9e:48:11:d0:ee:7f:d2:
33:f2:ae:3f:55:9c:7a:3c:67:53:f7:97:8c:ef:8f:5b:05:73:
62:db:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org