Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/_fwKk0b8-kW0y5xpvbhvy1AH31Q.roa
File: _fwKk0b8-kW0y5xpvbhvy1AH31Q.roa (raw, json)
Hash identifier: oKa/PVBI2UfiB3UgE41j9OtwQMXaOOOMKQ9DAlKV6Sk=
Subject key identifier: FD:FC:0A:93:46:FC:FA:45:B4:CB:9C:69:BD:B8:6F:CB:50:07:DF:54
Certificate issuer: /CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Certificate serial: 02F83255
Authority key identifier: 42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/_fwKk0b8-kW0y5xpvbhvy1AH31Q.roa
Signing time: Sat 01 Jan 2022 04:57:52 +0000
ROA not before: Sat 01 Jan 2022 04:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39411
IP address blocks: 89.35.60.0/23 maxlen: 23
89.33.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49820245 (0x2f83255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f48f7fae012916a775d5e3b6fa231098343ea0
Validity
Not Before: Jan 1 04:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdfc0a9346fcfa45b4cb9c69bdb86fcb5007df54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:6a:7a:fa:f0:8d:5b:01:a6:9b:4d:d7:12:
6d:82:76:e3:95:1c:0d:1a:19:7d:48:6a:a1:55:0c:
1e:46:3a:d9:95:07:f0:9b:a0:f3:d1:86:86:59:09:
13:bf:d0:7d:65:85:4b:07:e1:66:61:57:36:7f:00:
7b:2c:f0:9d:0d:0c:36:66:44:ca:09:88:b6:5d:34:
d0:c3:fe:cb:04:ba:bb:a6:ba:37:d5:53:5e:86:f0:
68:52:6b:33:93:d7:47:ec:cb:5a:6f:b0:d7:bb:51:
55:d0:94:b8:be:7d:42:2d:94:4b:f1:41:a7:a0:a4:
eb:a4:5f:0d:2a:6e:f4:9c:b9:40:5c:0a:48:80:99:
a7:8d:1f:24:c9:90:88:17:c8:80:68:c4:69:64:93:
32:28:80:c7:f2:a5:67:04:76:06:7a:ad:56:c0:2b:
7a:79:62:6a:70:20:19:5a:ba:00:33:45:e3:c1:3c:
32:c5:77:59:49:e4:78:90:1a:62:13:fd:ba:e1:e3:
72:80:e1:3e:5b:97:1f:22:88:02:45:23:0d:ce:e5:
dc:4f:26:a4:ff:08:d2:b2:a0:8f:90:2b:c9:f9:37:
32:e1:ca:5c:8f:e4:24:b0:3f:ca:aa:90:70:08:04:
a9:13:ac:1d:e0:59:5d:cb:9e:2e:44:7a:a8:01:67:
5a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FC:0A:93:46:FC:FA:45:B4:CB:9C:69:BD:B8:6F:CB:50:07:DF:54
X509v3 Authority Key Identifier:
keyid:42:F4:8F:7F:AE:01:29:16:A7:75:D5:E3:B6:FA:23:10:98:34:3E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvSPf64BKRanddXjtvojEJg0PqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/_fwKk0b8-kW0y5xpvbhvy1AH31Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/494455-1d2e-4e2b-8f0e-9a0cfce878a4/1/QvSPf64BKRanddXjtvojEJg0PqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.166.0/23
89.35.60.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:c4:d0:c1:a4:a8:1a:67:66:db:0c:e9:e2:8c:0c:57:65:51:
3e:12:05:f7:e9:de:49:bb:b0:0c:f8:a0:a9:b4:c2:cc:26:c6:
ed:47:08:4e:da:6a:81:af:f0:73:c6:bd:0e:46:a1:d7:40:cf:
f6:76:12:f0:a3:c8:b6:8f:9f:ab:8f:71:4a:42:ef:9d:27:2b:
a8:56:a6:f9:df:d9:1e:2c:3d:26:5f:8d:8e:61:a9:57:88:5d:
5f:3e:1a:c0:00:11:9e:5a:ad:40:ec:41:0a:3c:c7:c9:dd:2f:
c6:8b:20:06:c9:60:2b:3f:52:16:01:fa:fb:1f:fd:7f:88:b0:
97:3c:a1:76:b7:1f:f9:ef:e2:ec:5b:e6:fa:71:9a:d8:3d:53:
9a:b3:2b:5d:a8:62:e7:92:5c:17:01:b6:bd:61:65:62:31:00:
86:66:a9:e8:5d:0c:ff:4b:fd:8b:a0:4b:d0:36:91:32:c6:c3:
99:6b:00:8d:a2:62:2c:8d:0a:47:d5:7b:70:3c:7e:fd:b6:0f:
9f:57:75:82:bb:99:40:d0:7a:1d:d9:f7:9d:38:af:e1:b9:44:
ed:b5:10:02:af:fe:47:19:be:d6:82:f5:c8:78:20:c3:ff:55:
ec:59:55:2c:6a:72:26:f0:9d:bb:09:d2:10:4c:04:35:df:7b:
27:97:88:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:18 2025 by rpki-client