Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cd3686-6586-4696-8655-777b09608c31/1/F40cGELYpfm8CNHi_l42JV8sbeQ.roa
File: F40cGELYpfm8CNHi_l42JV8sbeQ.roa (raw, json)
Hash identifier: ow7GeKDHam7niUtq1ZqbSv0lArVEmwQXeXPGhqewf+A=
Subject key identifier: 17:8D:1C:18:42:D8:A5:F9:BC:08:D1:E2:FE:5E:36:25:5F:2C:6D:E4
Certificate issuer: /CN=c881e94c1d402f6b0d3fb3f8b6c9762c77813f8b
Certificate serial: 01896478EAF75B1538870C0A2E7287F9F1F5
Authority key identifier: C8:81:E9:4C:1D:40:2F:6B:0D:3F:B3:F8:B6:C9:76:2C:77:81:3F:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIHpTB1AL2sNP7P4tsl2LHeBP4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cd3686-6586-4696-8655-777b09608c31/1/F40cGELYpfm8CNHi_l42JV8sbeQ.roa
Signing time: Mon 17 Jul 2023 15:29:53 +0000
ROA not before: Mon 17 Jul 2023 15:29:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 89.107.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:ea:f7:5b:15:38:87:0c:0a:2e:72:87:f9:f1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c881e94c1d402f6b0d3fb3f8b6c9762c77813f8b
Validity
Not Before: Jul 17 15:29:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=178d1c1842d8a5f9bc08d1e2fe5e36255f2c6de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:0c:3b:e7:70:e3:13:9a:ce:21:ea:c5:be:
71:9c:2c:50:82:b6:61:db:34:18:70:e8:3c:e4:da:
b9:4f:ff:ac:cf:f7:52:c0:5d:98:fd:15:8f:4a:ad:
b4:35:8e:81:6a:1f:fb:b8:f9:ec:59:17:37:58:97:
8e:9e:ab:8a:6f:de:61:4a:13:1c:a5:14:4c:2b:73:
ea:ba:62:da:eb:12:9c:7f:dd:ed:4c:52:f3:13:d4:
88:78:8c:b7:f1:2a:0f:f2:10:17:23:c1:a9:d2:3c:
bd:d5:e2:7a:89:4c:6a:e2:0b:3b:12:ff:9a:a0:c3:
29:a9:82:7a:3b:be:6c:6e:ac:f9:06:ce:c0:92:c7:
ff:34:96:39:75:47:26:2e:88:e2:66:3b:d9:88:c2:
5b:6d:ad:12:ba:4f:fa:c7:fb:55:ae:0a:ff:6a:fc:
7e:73:b5:0f:c2:16:24:a7:72:63:4e:b1:b1:e1:04:
61:21:f6:8d:9f:56:b7:0e:39:26:ad:c2:9f:81:ae:
1e:d9:3e:56:20:5d:5d:3d:c5:a6:fb:37:c6:b7:74:
7f:e9:fc:ef:8b:bb:2d:23:fb:b5:30:6c:d5:a0:f9:
64:42:c8:3b:36:1f:29:87:dd:05:ca:ba:20:d0:34:
e1:d2:19:c3:2e:db:8d:2d:c7:01:8c:f1:da:09:a1:
ee:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:1C:18:42:D8:A5:F9:BC:08:D1:E2:FE:5E:36:25:5F:2C:6D:E4
X509v3 Authority Key Identifier:
keyid:C8:81:E9:4C:1D:40:2F:6B:0D:3F:B3:F8:B6:C9:76:2C:77:81:3F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIHpTB1AL2sNP7P4tsl2LHeBP4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cd3686-6586-4696-8655-777b09608c31/1/F40cGELYpfm8CNHi_l42JV8sbeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cd3686-6586-4696-8655-777b09608c31/1/yIHpTB1AL2sNP7P4tsl2LHeBP4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.107.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:09:20:82:61:41:de:eb:17:14:22:8d:58:93:95:67:2f:bf:
9f:63:2a:2f:5a:44:f5:24:a5:4c:34:44:23:e8:18:2a:be:40:
00:e7:c1:5a:bf:d8:88:7f:23:de:cb:26:d5:d1:17:6e:7c:ee:
bb:86:83:f5:d9:60:a9:29:c2:71:50:9e:66:88:09:ba:6b:ff:
a7:28:67:3d:ee:70:5c:7b:5a:b0:6e:d9:db:c5:4d:f9:d6:7e:
4b:2a:66:c9:b5:e1:7a:62:c9:30:f9:4b:3d:71:18:ed:a9:89:
de:9b:d5:21:06:3a:c8:26:1d:c9:7c:9b:fa:28:ba:78:af:ab:
ee:b1:d5:e6:ac:50:b8:f9:93:7f:e4:02:3c:b5:90:0e:3b:00:
39:af:a3:f1:bb:55:6a:88:21:7c:9d:6b:5f:52:8f:39:63:55:
e2:25:e4:57:db:90:0d:60:7d:c4:68:13:c5:00:1d:c5:6d:99:
91:13:4a:3a:9c:f6:09:66:5e:93:7b:58:bd:f0:e2:42:f4:b6:
40:3f:fd:b1:2c:4c:c2:cc:02:58:37:de:26:77:3f:32:9f:23:
70:4a:0c:fd:5f:1e:02:1d:62:24:3f:bd:72:52:6c:cf:f2:ba:
5e:78:e4:ce:9e:d9:64:94:2e:00:58:2d:3f:c0:94:3b:d2:16:
bd:f6:74:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkeOr3WxU4hwwKLnKH+fH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ODFlOTRjMWQ0MDJmNmIwZDNmYjNmOGI2Yzk3NjJjNzc4
MTNmOGIwHhcNMjMwNzE3MTUyOTUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzhkMWMxODQyZDhhNWY5YmMwOGQxZTJmZTVlMzYyNTVmMmM2ZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXQMO+dw4xOaziHqxb5xnCxQgrZh
2zQYcOg85Nq5T/+sz/dSwF2Y/RWPSq20NY6Bah/7uPnsWRc3WJeOnquKb95hShMc
pRRMK3PqumLa6xKcf93tTFLzE9SIeIy38SoP8hAXI8Gp0jy91eJ6iUxq4gs7Ev+a
oMMpqYJ6O75sbqz5Bs7Aksf/NJY5dUcmLojiZjvZiMJbba0Suk/6x/tVrgr/avx+
c7UPwhYkp3JjTrGx4QRhIfaNn1a3DjkmrcKfga4e2T5WIF1dPcWm+zfGt3R/6fzv
i7stI/u1MGzVoPlkQsg7Nh8ph90Fyrog0DTh0hnDLtuNLccBjPHaCaHuQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBeNHBhC2KX5vAjR4v5eNiVfLG3kMB8GA1UdIwQY
MBaAFMiB6UwdQC9rDT+z+LbJdix3gT+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUlIcFRCMUFMMnNOUDdQNHRzbDJMSGVCUDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jZDM2ODYtNjU4Ni00Njk2LTg2NTUt
Nzc3YjA5NjA4YzMxLzEvRjQwY0dFTFlwZm04Q05IaV9sNDJKVjhzYmVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jZDM2ODYtNjU4Ni00Njk2LTg2NTUtNzc3YjA5NjA4YzMx
LzEveUlIcFRCMUFMMnNOUDdQNHRzbDJMSGVCUDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWsOMA0G
CSqGSIb3DQEBCwUAA4IBAQAbCSCCYUHe6xcUIo1Yk5VnL7+fYyovWkT1JKVMNEQj
6BgqvkAA58Fav9iIfyPeyybV0RdufO67hoP12WCpKcJxUJ5miAm6a/+nKGc97nBc
e1qwbtnbxU351n5LKmbJteF6Yskw+Us9cRjtqYnem9UhBjrIJh3JfJv6KLp4r6vu
sdXmrFC4+ZN/5AI8tZAOOwA5r6Pxu1VqiCF8nWtfUo85Y1XiJeRX25ANYH3EaBPF
AB3FbZmRE0o6nPYJZl6Te1i98OJC9LZAP/2xLEzCzAJYN94mdz8ynyNwSgz9Xx4C
HWIkP71yUmzP8rpeeOTOntlklC4AWC0/wJQ70ha99nQL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:11 2024 by rpki-client on console-ams.rpki-client.org