Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/zkXZjoqqOz8tL0zoVrH696q2B-I.roa
File: zkXZjoqqOz8tL0zoVrH696q2B-I.roa (raw, json)
Hash identifier: dgxq+h3SNyPe9+Uh0VLQVEFTeN5UgWRWO8SwhWX6w9w=
Subject key identifier: CE:45:D9:8E:8A:AA:3B:3F:2D:2F:4C:E8:56:B1:FA:F7:AA:B6:07:E2
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27C93945D9C34BDBB2DC4AF2CA3D74
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/zkXZjoqqOz8tL0zoVrH696q2B-I.roa
Signing time: Fri 28 Oct 2022 10:33:54 +0000
ROA not before: Fri 28 Oct 2022 10:33:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36351
IP address blocks: 89.116.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:c9:39:45:d9:c3:4b:db:b2:dc:4a:f2:ca:3d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce45d98e8aaa3b3f2d2f4ce856b1faf7aab607e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:44:1a:bd:44:3f:f4:fd:96:16:0b:46:c8:
09:a3:13:8e:1d:83:9b:4d:e2:3e:1a:0a:5a:64:30:
ac:37:75:2f:ce:ee:50:29:26:2d:70:30:09:30:82:
8b:3b:ef:e2:69:36:2c:9c:68:dd:52:a0:64:f9:11:
81:61:88:05:3f:3f:bf:59:ae:fe:d9:54:82:84:70:
d3:09:9f:c8:b1:58:f4:35:46:91:70:48:ad:b3:66:
68:de:1a:b0:7e:d6:7f:ff:39:f0:e1:53:31:48:ac:
aa:a6:6c:0b:7e:3b:d5:46:2f:fc:5c:08:bb:41:21:
b2:5e:90:90:49:d7:e5:fd:0f:81:ba:34:92:86:62:
91:d4:ed:19:99:3b:ee:5a:6f:56:b6:4c:d7:3c:75:
b5:27:8b:4f:82:d6:47:2c:ef:27:e5:72:9f:19:8c:
d2:bc:ee:c9:d2:4f:c0:0b:64:02:93:d0:67:80:de:
f0:b9:e7:fd:e6:c6:22:27:f5:2e:fa:25:a7:9c:30:
3c:7f:ff:b6:0a:68:4d:b1:e8:07:a7:ce:a4:48:5a:
e7:7f:3a:10:b6:b7:4b:01:6e:b8:c4:d1:2f:46:21:
3a:5d:c0:a7:48:35:0b:f0:0a:f9:63:33:25:05:72:
2d:21:b7:2f:e6:38:83:4e:38:45:a3:c9:e7:6e:f6:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:45:D9:8E:8A:AA:3B:3F:2D:2F:4C:E8:56:B1:FA:F7:AA:B6:07:E2
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/zkXZjoqqOz8tL0zoVrH696q2B-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:8a:62:d1:87:9c:0e:0d:3b:78:35:14:21:5a:72:6c:04:3e:
bf:b0:39:95:9a:15:ea:4d:96:7a:a8:0a:51:72:18:16:1e:5d:
c4:6a:61:09:85:69:e4:cf:c9:b2:a3:99:42:13:52:24:b5:eb:
00:16:e8:a1:03:fb:2a:55:ad:4f:1a:60:90:a7:7c:0d:d0:c2:
8e:e1:f6:56:17:a9:9c:20:86:d4:cc:20:84:71:fc:3c:dd:45:
20:91:27:4c:d5:52:d4:ea:75:fd:90:96:d9:e3:ea:65:b3:f7:
60:7a:d0:62:a2:80:62:a7:48:b2:58:af:5c:de:91:3f:f9:39:
06:5f:2a:61:e5:1c:c0:19:2b:eb:23:67:79:1c:15:22:55:32:
0c:76:6d:76:2d:e5:7f:c5:d4:da:5c:4a:ac:36:8b:ea:68:e4:
50:e6:d8:cf:be:ff:66:20:44:94:40:af:71:bb:ba:77:5f:9e:
fd:e8:b3:6d:c7:94:a5:cc:4e:45:c3:1c:3d:fd:41:43:c6:c2:
a8:83:e9:8d:57:77:63:fb:c4:b4:89:c2:c5:40:68:c3:4a:76:
75:d4:31:f0:35:1f:ae:8f:5b:35:1e:c4:bd:a3:3d:ce:27:0b:
19:e8:f9:48:f1:ab:e5:b4:9a:3d:73:fb:9f:9c:86:72:51:ff:
e7:7c:60:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org