Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/gTOw2ZHGK8TpHZ3Mwej3Vwq-fpk.roa
File: gTOw2ZHGK8TpHZ3Mwej3Vwq-fpk.roa (raw, json)
Hash identifier: oKnB3UuCvzWI0SnF8+as/Njp7tQ1hB8VF7Hi7je10IM=
Subject key identifier: 81:33:B0:D9:91:C6:2B:C4:E9:1D:9D:CC:C1:E8:F7:57:0A:BE:7E:99
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0186263BA9DD6975DB03D52C9BF1B0D463EF
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/gTOw2ZHGK8TpHZ3Mwej3Vwq-fpk.roa
Signing time: Mon 06 Feb 2023 10:18:09 +0000
ROA not before: Mon 06 Feb 2023 10:18:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58022
IP address blocks: 188.241.122.0/23 maxlen: 24
86.107.50.0/23 maxlen: 24
89.47.55.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:3b:a9:dd:69:75:db:03:d5:2c:9b:f1:b0:d4:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Feb 6 10:18:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8133b0d991c62bc4e91d9dccc1e8f7570abe7e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:52:50:c1:40:aa:17:24:32:81:3f:5c:6f:
62:7a:70:d8:71:7c:4c:2c:e0:01:c2:9d:f5:a0:4f:
14:9f:42:81:c4:21:02:75:d7:54:45:88:64:a8:30:
61:c6:df:4f:27:57:27:86:d5:2a:13:b2:f7:37:79:
ef:91:7f:99:07:d1:24:ac:02:1f:18:15:6b:26:35:
63:2a:d8:60:a9:67:f4:58:20:ce:bb:68:1c:79:df:
f2:13:a9:f5:d9:93:07:e1:2b:45:82:d2:97:43:b5:
a7:50:9c:fc:19:b9:9d:c0:57:00:c4:5b:da:15:bb:
66:c3:90:e0:bf:c2:4e:1b:d2:66:13:bf:62:b8:cb:
7f:b6:c2:7e:30:75:77:a7:58:5c:1c:aa:8d:5c:d2:
bb:85:a5:ba:07:f9:5c:60:06:17:50:a1:21:52:4d:
60:d0:58:90:b7:64:80:ef:3b:61:75:c1:6f:e7:7f:
fe:72:17:bb:b7:e8:68:91:c8:95:a1:6e:cc:53:d9:
0b:15:07:83:28:14:8f:c8:9b:4a:a1:d4:66:46:58:
bb:ec:e6:d7:0f:23:45:44:9b:34:28:c2:c3:49:f2:
ba:67:c8:47:6f:96:c0:fb:79:fa:f6:60:1e:04:9d:
4b:38:df:ef:39:d7:57:1a:79:3c:29:79:83:7d:50:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:33:B0:D9:91:C6:2B:C4:E9:1D:9D:CC:C1:E8:F7:57:0A:BE:7E:99
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/gTOw2ZHGK8TpHZ3Mwej3Vwq-fpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.50.0/23
89.47.55.0/24
94.177.106.0/24
188.241.122.0/23
Signature Algorithm: sha256WithRSAEncryption
52:de:30:7e:31:5e:8d:19:6f:08:a4:1f:a2:6d:d8:c2:61:29:
17:57:14:db:61:25:c3:c2:8a:83:cd:9a:2d:e0:54:4a:17:e8:
72:98:ed:37:c8:5b:3f:e0:56:6c:9b:0a:f4:30:65:42:02:d7:
20:05:0a:46:22:57:68:2d:7d:1d:e1:25:76:15:8e:05:f1:fe:
72:5a:9c:03:c0:98:bb:0a:a8:9a:aa:a2:4a:74:e6:1c:46:2e:
28:83:46:2c:e8:39:00:ab:f0:1d:43:56:04:9f:37:a7:1d:06:
b4:36:d7:8f:91:70:12:83:d0:aa:cd:5d:1a:d0:65:4d:10:95:
c1:88:dd:bb:74:17:f0:f4:ec:be:bb:8e:69:b4:ac:27:67:4c:
91:9e:2d:b1:30:42:74:c5:80:40:c6:82:a0:ea:be:a5:a1:38:
ff:77:c0:ea:94:2d:fa:25:80:6a:75:de:96:17:34:fc:2d:2c:
5a:c5:d1:34:91:ba:48:e3:1e:33:3c:6a:66:d2:8b:5e:cc:26:
ff:71:20:e7:0d:4f:96:6b:87:6d:78:32:69:98:78:d1:70:9c:
0d:2d:e9:d0:00:6c:37:38:68:94:44:8a:0c:7b:7f:66:38:77:
22:75:97:4b:c6:75:f2:81:40:cc:e0:03:33:5c:ee:b3:a7:3b:
cb:26:33:c7
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYYmO6ndaXXbA9Usm/Gw1GPvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwMjA2MTAxODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTMzYjBkOTkxYzYyYmM0ZTkxZDlkY2NjMWU4Zjc1NzBhYmU3ZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoENSUMFAqhckMoE/XG9ienDYcXxM
LOABwp31oE8Un0KBxCECdddURYhkqDBhxt9PJ1cnhtUqE7L3N3nvkX+ZB9EkrAIf
GBVrJjVjKthgqWf0WCDOu2gced/yE6n12ZMH4StFgtKXQ7WnUJz8GbmdwFcAxFva
Fbtmw5Dgv8JOG9JmE79iuMt/tsJ+MHV3p1hcHKqNXNK7haW6B/lcYAYXUKEhUk1g
0FiQt2SA7zthdcFv53/+che7t+hokciVoW7MU9kLFQeDKBSPyJtKodRmRli77ObX
DyNFRJs0KMLDSfK6Z8hHb5bA+3n69mAeBJ1LON/vOddXGnk8KXmDfVB+ZQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFIEzsNmRxivE6R2dzMHo91cKvn6ZMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL2dUT3cyWkhHSzhUcEhaM013ZWozVndxLWZway5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAFWazID
BABZLzcDBABesWoDBAG88XowDQYJKoZIhvcNAQELBQADggEBAFLeMH4xXo0Zbwik
H6Jt2MJhKRdXFNthJcPCioPNmi3gVEoX6HKY7TfIWz/gVmybCvQwZUIC1yAFCkYi
V2gtfR3hJXYVjgXx/nJanAPAmLsKqJqqokp05hxGLiiDRizoOQCr8B1DVgSfN6cd
BrQ214+RcBKD0KrNXRrQZU0QlcGI3bt0F/D07L67jmm0rCdnTJGeLbEwQnTFgEDG
gqDqvqWhOP93wOqULfolgGp13pYXNPwtLFrF0TSRukjjHjM8ambSi17MJv9xIOcN
T5Zrh214MmmYeNFwnA0t6dAAbDc4aJREigx7f2Y4dyJ1l0vGdfKBQMzgAzNc7rOn
O8smM8c=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:53 2025 by rpki-client