Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/FCi57DALQxFY5L_1Zig0EJDTKhY.roa
File: FCi57DALQxFY5L_1Zig0EJDTKhY.roa (raw, json)
Hash identifier: 9xkYIHHILSe4R1cJkn8mb6y5H0MMzcZ10nRKNqqSVNk=
Subject key identifier: 14:28:B9:EC:30:0B:43:11:58:E4:BF:F5:66:28:34:10:90:D3:2A:16
Certificate issuer: /CN=60614515907e8eac99806617d5f69c40db91a3f5
Certificate serial: 1002D5A9
Authority key identifier: 60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/FCi57DALQxFY5L_1Zig0EJDTKhY.roa
Signing time: Sat 01 Jan 2022 06:58:58 +0000
ROA not before: Sat 01 Jan 2022 06:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51790
IP address blocks: 185.185.91.0/24 maxlen: 24
185.185.90.0/23 maxlen: 23
2a0b:4e87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268621225 (0x1002d5a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60614515907e8eac99806617d5f69c40db91a3f5
Validity
Not Before: Jan 1 06:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1428b9ec300b431158e4bff56628341090d32a16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:33:d1:c2:a4:54:a2:5b:cd:6d:6b:01:87:
18:20:2a:98:64:4f:4d:28:ea:b0:31:e0:f0:19:80:
6b:88:46:d4:94:88:bb:34:ff:26:49:f3:8c:3c:0d:
a9:31:43:86:e4:bd:1e:7a:1e:c5:92:96:57:1b:59:
85:3c:f2:57:5f:64:04:49:4b:64:07:14:26:f2:65:
c8:a9:66:f0:db:ff:6d:aa:fc:85:b2:c0:b2:a7:32:
c8:20:99:d2:32:32:62:55:e3:21:92:6f:bd:38:d7:
1c:91:79:ea:80:74:0b:26:30:c9:b8:0a:09:64:54:
9d:c5:bb:1c:1d:13:b1:81:01:db:d9:bb:7b:24:36:
b9:3f:c4:5c:c1:7c:36:ee:38:53:e1:b7:c9:a7:04:
40:13:4e:65:9a:36:07:72:6f:68:0e:f4:89:f6:a3:
f7:1e:a5:7f:f4:b2:92:4e:d6:3e:d4:b1:a9:17:ad:
2d:60:1d:45:56:af:00:12:31:4c:31:bc:6e:33:b4:
66:c2:04:03:2b:03:38:40:d9:55:81:97:eb:3f:7b:
f3:e5:7c:04:9a:73:1a:0e:df:6a:c6:22:a2:41:e2:
2f:4a:62:fc:fd:2a:29:1d:55:68:54:96:d4:4f:11:
b7:ab:20:09:c6:ce:05:aa:f8:a7:0e:7e:87:b0:a2:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:28:B9:EC:30:0B:43:11:58:E4:BF:F5:66:28:34:10:90:D3:2A:16
X509v3 Authority Key Identifier:
keyid:60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/FCi57DALQxFY5L_1Zig0EJDTKhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.90.0/23
IPv6:
2a0b:4e87::/32
Signature Algorithm: sha256WithRSAEncryption
4f:ec:4c:c1:3e:df:2d:9c:14:b7:36:5d:b2:39:ee:49:df:07:
05:a2:1c:e3:0f:9b:21:94:6b:8a:19:c1:6c:1c:87:49:a0:7d:
b1:89:fa:d1:33:4c:7a:0e:a6:2d:31:6f:b1:e6:a7:47:91:51:
4c:27:57:fa:04:ef:88:37:dd:4b:6d:ce:a6:be:f8:5b:2e:c9:
e2:80:43:8a:fd:86:3a:0a:25:82:fb:b3:3f:35:db:07:0c:6d:
c5:5a:3c:a8:09:6e:9e:29:a6:73:26:c1:be:09:a6:7a:fa:24:
1a:a0:21:28:1a:33:a0:8e:59:ab:ed:45:b6:ac:48:e4:8b:5d:
56:ef:8c:41:43:ca:a3:e1:f6:c1:57:d1:bd:c4:47:a5:2f:07:
e1:f9:71:8f:cc:79:dd:69:17:1f:bf:15:34:ec:4a:98:3a:4f:
6b:fb:9e:33:eb:3f:7b:db:37:b1:0c:5a:0c:d7:8d:1c:9f:23:
9b:9d:1c:75:3e:8b:57:f8:ee:dc:a5:e8:8b:86:7a:0c:7d:10:
75:d0:79:e1:2c:2f:a5:c9:81:97:dc:d5:58:99:ff:4f:1a:09:
b1:a2:88:f7:70:02:33:36:0a:bc:dc:c0:24:96:b4:3c:a8:23:
75:51:59:09:e2:a2:43:d6:d6:62:d4:23:e1:15:e0:88:11:de:
4e:5d:83:6b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEEALVqTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDYxNDUxNTkwN2U4ZWFjOTk4MDY2MTdkNWY2OWM0MGRiOTFhM2Y1MB4XDTIyMDEw
MTA2NTg1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQyOGI5ZWMzMDBi
NDMxMTU4ZTRiZmY1NjYyODM0MTA5MGQzMmExNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN5OM9HCpFSiW81tawGHGCAqmGRPTSjqsDHg8BmAa4hG1JSI
uzT/JknzjDwNqTFDhuS9HnoexZKWVxtZhTzyV19kBElLZAcUJvJlyKlm8Nv/bar8
hbLAsqcyyCCZ0jIyYlXjIZJvvTjXHJF56oB0CyYwybgKCWRUncW7HB0TsYEB29m7
eyQ2uT/EXMF8Nu44U+G3yacEQBNOZZo2B3JvaA70ifaj9x6lf/Sykk7WPtSxqRet
LWAdRVavABIxTDG8bjO0ZsIEAysDOEDZVYGX6z978+V8BJpzGg7fasYiokHiL0pi
/P0qKR1VaFSW1E8Rt6sgCcbOBar4pw5+h7CieTUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQUKLnsMAtDEVjkv/VmKDQQkNMqFjAfBgNVHSMEGDAWgBRgYUUVkH6OrJmA
ZhfV9pxA25Gj9TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lHRkZGWkItanF5WmdHWVgxZmFjUU51Um9fVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTQvMzQzZWUzLWM4ZWEtNDU0MC1hMTcyLWY5OGM0MzhmMGEzNS8x
L0ZDaTU3REFMUXhGWTVMXzFaaWcwRUpEVEtoWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQv
MzQzZWUzLWM4ZWEtNDU0MC1hMTcyLWY5OGM0MzhmMGEzNS8xL1lHRkZGWkItanF5
WmdHWVgxZmFjUU51Um9fVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAbm5WjANBAIAAjAHAwUAKgtOhzAN
BgkqhkiG9w0BAQsFAAOCAQEAT+xMwT7fLZwUtzZdsjnuSd8HBaIc4w+bIZRrihnB
bByHSaB9sYn60TNMeg6mLTFvseanR5FRTCdX+gTviDfdS23Opr74Wy7J4oBDiv2G
OgolgvuzPzXbBwxtxVo8qAlunimmcybBvgmmevokGqAhKBozoI5Zq+1FtqxI5Itd
Vu+MQUPKo+H2wVfRvcRHpS8H4flxj8x53WkXH78VNOxKmDpPa/ueM+s/e9s3sQxa
DNeNHJ8jm50cdT6LV/ju3KXoi4Z6DH0QddB54SwvpcmBl9zVWJn/TxoJsaKI93AC
MzYKvNzAJJa0PKgjdVFZCeKiQ9bWYtQj4RXgiBHeTl2Daw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:40 2025 by rpki-client