Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/7w-aRiJ8B-AU_wJWjpG0Lfawf08.roa
File: 7w-aRiJ8B-AU_wJWjpG0Lfawf08.roa (raw, json)
Hash identifier: 3EPle7ulDIotcyNIpMWphwhhatj9bvLzafsST5Z0vfA=
Subject key identifier: EF:0F:9A:46:22:7C:07:E0:14:FF:02:56:8E:91:B4:2D:F6:B0:7F:4F
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27BEA7A4CA59B5CB436DF9F541C990
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/7w-aRiJ8B-AU_wJWjpG0Lfawf08.roa
Signing time: Fri 28 Oct 2022 10:33:51 +0000
ROA not before: Fri 28 Oct 2022 10:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 89.117.80.0/22 maxlen: 24
89.117.104.0/22 maxlen: 24
89.116.32.0/21 maxlen: 24
89.117.16.0/21 maxlen: 24
89.116.180.0/22 maxlen: 24
89.116.80.0/21 maxlen: 24
89.117.40.0/21 maxlen: 24
84.46.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:be:a7:a4:ca:59:b5:cb:43:6d:f9:f5:41:c9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef0f9a46227c07e014ff02568e91b42df6b07f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:ff:5e:62:4e:8e:55:10:08:71:ba:11:53:
5e:01:a4:83:ad:8c:95:74:9b:1b:21:b2:31:e2:d3:
2e:2c:f6:d3:4c:32:0d:c7:b1:32:31:48:82:b8:8c:
1b:76:b3:6e:38:8c:ae:1c:d3:fe:a5:7a:21:fb:d4:
59:6c:5a:6e:65:59:e6:14:0b:9b:fd:40:b4:a5:f1:
f9:a6:65:98:43:19:65:b4:04:df:da:d8:cc:3a:94:
5b:a1:38:c0:5d:72:68:01:de:fc:8f:df:11:cf:0b:
4e:f0:16:d9:7d:85:06:de:43:93:2a:ac:1d:bd:04:
86:6c:00:82:72:fb:79:25:d6:78:df:62:87:27:2f:
4b:8a:87:b4:f7:70:0d:46:2f:92:c5:46:d7:7f:55:
e7:c7:34:36:29:42:39:d5:0d:9d:bd:ce:a7:ca:07:
da:4d:bd:76:9e:30:ea:b5:f3:81:c9:6d:8f:35:52:
7d:b2:36:db:b7:d9:ea:ed:f2:22:99:8f:3f:9e:fc:
ed:2f:00:49:bd:01:72:a9:b7:cd:09:dc:51:5c:0c:
40:a8:3d:00:0e:67:99:93:98:f7:d3:44:50:dd:f1:
7c:4d:09:c8:6c:d7:c9:58:5e:6d:1c:90:a1:03:52:
c8:98:9c:4e:73:48:2f:9f:8c:4b:23:22:d4:dc:c0:
ef:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0F:9A:46:22:7C:07:E0:14:FF:02:56:8E:91:B4:2D:F6:B0:7F:4F
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/7w-aRiJ8B-AU_wJWjpG0Lfawf08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
89.116.32.0/21
89.116.80.0/21
89.116.180.0/22
89.117.16.0/21
89.117.40.0/21
89.117.80.0/22
89.117.104.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:43:94:17:12:5f:85:d6:c1:54:16:7a:12:23:73:08:02:76:
07:d9:f2:a3:06:94:0e:ea:f6:bb:26:cf:85:15:b3:6a:22:d2:
18:59:d8:d6:1c:ac:e8:2b:09:3c:f7:4a:3b:f0:04:ff:99:d6:
23:85:1c:69:02:ed:7d:5b:bb:df:7e:53:5d:d0:83:17:60:a2:
8a:9d:b4:78:c8:35:4e:bc:fd:0e:6a:68:5a:13:6a:6c:e1:58:
4a:b6:be:5c:30:be:80:00:f4:9f:2f:dc:22:93:e7:44:d6:9a:
05:3e:19:0c:1d:77:e2:e7:af:35:3e:4e:75:aa:c3:08:23:60:
1b:18:b1:12:ab:8b:48:b2:df:10:57:bd:4a:aa:30:39:8d:93:
16:e1:19:8a:0f:6e:d4:e1:0f:58:d1:21:11:31:ae:56:6a:eb:
2b:7f:41:d8:f4:18:80:94:08:21:2c:a9:91:6f:a3:14:cd:5d:
66:28:8e:0e:e0:9f:db:fc:a6:d5:b4:7d:75:aa:5f:b8:da:db:
1a:23:a7:8a:6c:d6:1b:15:1c:40:16:27:df:1e:5e:a7:91:96:
f7:57:ef:5f:55:30:25:a0:73:0e:d4:16:e7:aa:5d:b2:20:27:
10:6e:6e:bb:e3:a6:99:63:08:e6:6d:98:58:49:bd:ff:18:90:
88:48:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:31 2025 by rpki-client