Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/94e5hNY5vjXkRBIQh2peEFonS_w.roa
File: 94e5hNY5vjXkRBIQh2peEFonS_w.roa (raw, json)
Hash identifier: w6GEStY6IUBZ9UXp4PtdmfEGf3sOcpBu2Miv0bVmGME=
Subject key identifier: F7:87:B9:84:D6:39:BE:35:E4:44:12:10:87:6A:5E:10:5A:27:4B:FC
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27CB2892FC8A500807D782E81AF89C
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/94e5hNY5vjXkRBIQh2peEFonS_w.roa
Signing time: Fri 28 Oct 2022 10:33:55 +0000
ROA not before: Fri 28 Oct 2022 10:33:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43431
IP address blocks: 89.117.129.0/24 maxlen: 24
82.140.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:cb:28:92:fc:8a:50:08:07:d7:82:e8:1a:f8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f787b984d639be35e4441210876a5e105a274bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:b8:c9:4d:2c:1f:b2:e8:ae:ff:47:86:ed:
44:de:60:1e:a7:89:c7:39:69:e0:69:ae:15:f3:a1:
7a:3a:4a:d8:71:7d:47:9f:02:ee:f5:f2:aa:81:ac:
7b:4f:d1:8e:78:07:cb:a1:4f:4f:63:9f:dc:5d:b8:
eb:7a:58:40:ea:39:e5:63:82:3f:a4:a5:61:36:9f:
d2:83:e5:3b:8d:a2:bc:e4:10:40:44:ec:a5:c6:ba:
e3:99:d9:c7:8d:a9:60:23:b1:f5:56:09:f4:88:90:
64:06:22:77:2f:28:1d:0e:71:2f:c9:9f:81:3b:c2:
f0:f4:78:58:a2:6e:f1:40:5c:bf:f9:6e:b4:53:92:
a8:35:dd:48:39:5d:b1:b3:91:f1:0e:a4:7b:e3:8c:
5c:3f:c8:41:cf:bf:03:b9:16:f5:61:78:88:2e:a7:
47:e1:50:db:5f:91:3c:51:43:7f:15:4c:58:f1:c2:
00:22:3e:95:cb:b3:24:d3:67:4a:a2:51:9f:5d:02:
95:f6:58:a3:af:15:81:68:54:ab:cb:d7:07:83:cd:
4b:41:54:1e:74:9a:89:d6:39:d2:07:aa:e8:9e:f8:
fd:f5:5f:69:9d:5c:4a:19:6a:69:8d:ee:53:95:e3:
e7:4a:f4:18:5c:3d:7a:4d:ab:0c:5b:ef:1c:e5:b7:
20:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:87:B9:84:D6:39:BE:35:E4:44:12:10:87:6A:5E:10:5A:27:4B:FC
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/94e5hNY5vjXkRBIQh2peEFonS_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.183.0/24
89.117.129.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8c:cf:7d:a1:e0:21:d1:09:c9:55:a5:40:a9:5a:54:45:2c:
67:5f:cc:f1:06:bd:dc:48:83:d3:23:11:e7:4f:de:cb:79:cb:
f7:3d:46:9a:66:a7:59:ee:42:f2:bd:a5:6c:07:b1:4c:21:ca:
fa:ff:b4:f0:40:79:78:c9:ea:8e:50:bd:16:54:26:05:6a:a4:
dd:3c:dc:e7:13:91:20:e4:6f:30:ba:8f:b4:04:48:f4:86:9e:
43:b4:aa:2e:71:f0:85:c1:15:d3:47:07:28:df:6a:37:44:45:
4d:cf:0e:45:40:43:d3:c7:c9:35:36:a4:f3:f7:2b:3c:5a:61:
33:3a:b2:46:4b:72:ae:97:e7:39:41:c2:d0:8a:e8:26:e8:9a:
01:d2:97:95:a7:71:20:be:51:eb:d6:33:ba:4f:07:3c:b5:45:
4d:f2:ef:d7:a2:8e:09:d4:d8:0f:03:d7:58:57:dd:7d:3b:28:
9a:50:c4:87:38:0c:bb:db:3d:b3:da:b1:eb:ac:f2:1c:42:ff:
ec:2e:f7:e5:67:b6:a3:3a:45:6d:71:ae:1b:cc:6d:5b:b4:bd:
dc:52:97:70:e6:dd:d9:ea:9d:77:5d:ee:4a:8c:58:14:87:76:
47:75:e6:c3:31:03:77:d1:65:0c:4c:10:f3:69:82:87:5d:c4:
58:b5:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:39 2025 by rpki-client