Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FsYFU700FuJZYz4QXp-XIcomMiE.roa
File: FsYFU700FuJZYz4QXp-XIcomMiE.roa (raw, json)
Hash identifier: nwHqfqKy5tpJMeaDvWypBeXRhEggGC0QHvp2lrmoRgo=
Subject key identifier: 16:C6:05:53:BD:34:16:E2:59:63:3E:10:5E:9F:97:21:CA:26:32:21
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019549DD61EB63D86D463E7F468AB2DE023B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FsYFU700FuJZYz4QXp-XIcomMiE.roa
Signing time: Fri 28 Feb 2025 00:03:20 +0000
ROA not before: Fri 28 Feb 2025 00:03:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60223
IP address blocks: 89.144.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:49:dd:61:eb:63:d8:6d:46:3e:7f:46:8a:b2:de:02:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 28 00:03:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16c60553bd3416e259633e105e9f9721ca263221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0f:70:83:f8:3d:21:dd:c4:f8:73:11:5e:02:
8c:66:0e:38:95:5a:66:f8:66:d2:b2:0e:2d:f3:fd:
45:bd:b9:18:da:90:76:d5:17:c3:28:f0:ef:44:14:
1b:e0:b5:6d:1a:e0:0b:a2:be:f2:3d:29:c4:a3:69:
30:f5:0a:b4:29:65:7b:aa:16:d2:a6:59:32:ea:de:
da:de:c5:a0:bc:0a:fb:58:f7:10:38:c2:5e:b8:15:
25:0f:e3:d6:a4:74:ee:5a:2e:b1:ab:5c:6a:b7:67:
1e:b3:8f:34:a3:76:fd:f4:05:9f:c6:9e:27:96:82:
e6:aa:75:39:3b:8f:2c:be:0d:5c:6a:1f:3f:03:88:
d7:fa:cf:48:b6:39:91:2f:3d:0d:7f:9e:ad:10:ff:
3f:3a:ff:d6:f7:14:34:95:a1:4e:d1:b4:40:50:79:
b2:48:2a:06:6c:c1:a6:42:85:34:3b:bc:c3:ae:ea:
9b:eb:0d:a5:68:5b:85:17:79:6c:cc:90:60:07:2a:
15:92:8b:fd:aa:8a:17:6b:fb:92:11:ca:6b:1a:6a:
21:ac:fa:5b:8e:d2:e2:6d:88:82:0b:64:a0:9e:9c:
29:7c:38:e4:e6:30:60:f0:04:e7:8c:c8:99:02:15:
75:df:d5:72:73:11:87:fb:19:0b:ff:e9:68:3e:60:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C6:05:53:BD:34:16:E2:59:63:3E:10:5E:9F:97:21:CA:26:32:21
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/FsYFU700FuJZYz4QXp-XIcomMiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.22.0/24
Signature Algorithm: sha256WithRSAEncryption
38:50:77:62:0e:d2:29:b3:c4:53:16:c7:48:98:35:51:30:dc:
b4:d2:74:92:c0:f1:ac:6f:22:e7:9f:27:4c:b6:db:d9:f2:ea:
e5:01:bb:06:fa:7e:b0:0f:ab:6f:e4:df:dd:4d:22:c9:3e:e6:
5d:6d:9c:af:22:ab:2b:00:fd:7c:3c:0b:20:62:27:41:e0:70:
17:b9:57:ad:7e:e7:75:11:19:af:1b:a8:42:1d:59:8e:62:f5:
29:4f:a6:cc:20:3f:13:da:91:04:9b:7f:33:d1:3a:4e:15:9f:
45:30:cb:7b:5e:b5:84:77:40:0d:5a:af:de:94:b4:44:48:67:
43:89:4a:61:95:06:20:fd:ea:4b:13:50:0c:c3:65:3b:24:3c:
a5:fe:8c:9b:8b:b6:56:f8:ff:ac:0a:f3:83:83:e3:51:e1:be:
9b:dd:b8:69:97:15:84:a7:fd:4b:d9:f7:8e:76:f9:88:45:8a:
9e:10:8b:57:25:f8:26:be:87:19:a5:bc:a1:23:31:23:d6:cb:
be:dd:35:50:7a:72:ab:c9:b1:18:2b:11:6a:0d:42:dc:bf:49:
b5:ba:92:0d:ad:3d:bd:01:1f:02:fb:78:9c:63:33:a0:f9:2d:
38:a7:4d:7b:c1:ed:48:c1:87:e6:f7:15:7b:6c:e5:89:d9:2a:
f6:d5:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:32:13 2025 by rpki-client