Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/BHQASRICITiozNgZG1NMEwQ4rQ0.roa
File: BHQASRICITiozNgZG1NMEwQ4rQ0.roa (raw, json)
Hash identifier: v4QZPpXQ3v3MsebIuGg1YbtkhyYnLPbKGgOpuY3SyB0=
Subject key identifier: 04:74:00:49:12:02:21:38:A8:CC:D8:19:1B:53:4C:13:04:38:AD:0D
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27CEAC70002BBFA0B15620B505EFD9
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/BHQASRICITiozNgZG1NMEwQ4rQ0.roa
Signing time: Fri 28 Oct 2022 10:33:56 +0000
ROA not before: Fri 28 Oct 2022 10:33:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55720
IP address blocks: 89.116.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:ce:ac:70:00:2b:bf:a0:b1:56:20:b5:05:ef:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0474004912022138a8ccd8191b534c130438ad0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:7c:5c:92:f8:10:95:59:4c:24:42:bf:d4:
b3:05:8a:7a:7a:b4:a5:58:23:63:dc:44:46:fd:e4:
56:89:2b:b7:23:7b:76:54:d5:49:30:4d:33:7d:86:
05:99:7e:6d:94:bb:eb:19:0e:60:e3:e3:fa:09:7c:
e3:1f:52:11:e3:3d:40:78:29:d9:77:79:18:40:31:
5b:f3:7a:c2:32:0d:0d:ca:8d:da:f4:e6:61:f2:ed:
9c:28:48:c0:1a:e5:cb:68:bf:48:26:fd:b6:1a:85:
06:42:28:2a:38:42:2c:48:65:1a:c3:e7:f7:a6:d3:
db:7a:7b:4c:51:18:d7:fc:61:fa:78:8a:94:e4:42:
93:5e:0f:c2:36:18:46:6a:73:48:91:5a:e4:c2:b4:
3d:26:c0:31:11:20:8e:f0:af:65:01:be:93:54:10:
85:fd:94:33:d6:c6:b6:ba:ac:7b:54:58:77:06:d3:
8f:d8:ef:43:e9:cd:e1:2c:c8:a9:ed:68:59:57:ab:
17:16:ed:6f:ab:0f:1e:0d:11:00:5e:4a:25:6a:a6:
68:dc:5e:30:47:d6:cb:a2:6d:4e:9e:66:77:1f:03:
2b:5e:ac:7f:63:e9:f1:5c:1d:3e:eb:73:f7:36:6f:
0c:56:5d:ad:17:0d:03:44:29:24:de:ea:f4:be:ee:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:00:49:12:02:21:38:A8:CC:D8:19:1B:53:4C:13:04:38:AD:0D
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/BHQASRICITiozNgZG1NMEwQ4rQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:cb:ee:1e:45:ad:94:7d:74:d5:64:fd:0d:f8:6b:55:cc:fc:
84:b7:33:62:c1:84:73:ad:99:45:cd:6f:f8:9f:b6:0a:f4:43:
e3:5f:5d:ed:cb:77:cc:10:40:78:07:5a:e9:a8:4b:1a:9a:35:
7c:82:ae:25:a8:fd:4c:9e:b0:99:4b:f0:21:c5:85:94:36:07:
1e:86:df:c2:9a:91:d8:45:d8:75:d0:fc:9f:9a:18:83:fd:d8:
26:5f:36:2f:0f:3c:38:1d:47:9e:cb:62:d2:d3:11:65:da:2e:
4c:04:6d:35:77:cc:15:e2:40:c0:a2:0a:b9:44:9f:cd:ee:78:
98:6f:da:64:71:66:b0:61:82:16:dc:c2:13:87:60:8f:3f:d1:
37:02:e2:ad:59:dd:b2:60:b9:fc:c5:32:c2:f2:04:83:ca:7c:
ef:09:9c:90:26:84:38:c9:a3:20:81:0e:62:e4:80:21:23:a8:
70:af:9a:f3:1d:cd:84:75:70:de:0f:81:3f:c8:96:64:be:0f:
15:c0:ec:51:dc:cc:70:32:b5:c9:6e:b4:73:dc:89:44:a3:8c:
20:6f:24:cc:bf:04:91:bb:cb:87:6a:6e:82:3f:75:63:b8:c3:
c9:7c:e5:07:c1:67:c1:ac:6c:d5:c1:97:de:d3:b7:ec:8d:52:
ad:a5:c1:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQeJ86scAArv6CxViC1Be/ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI4MTAzMzU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDc0MDA0OTEyMDIyMTM4YThjY2Q4MTkxYjUzNGMxMzA0MzhhZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN98XJL4EJVZTCRCv9SzBYp6erSl
WCNj3ERG/eRWiSu3I3t2VNVJME0zfYYFmX5tlLvrGQ5g4+P6CXzjH1IR4z1AeCnZ
d3kYQDFb83rCMg0Nyo3a9OZh8u2cKEjAGuXLaL9IJv22GoUGQigqOEIsSGUaw+f3
ptPbentMURjX/GH6eIqU5EKTXg/CNhhGanNIkVrkwrQ9JsAxESCO8K9lAb6TVBCF
/ZQz1sa2uqx7VFh3BtOP2O9D6c3hLMip7WhZV6sXFu1vqw8eDREAXkolaqZo3F4w
R9bLom1OnmZ3HwMrXqx/Y+nxXB0+63P3Nm8MVl2tFw0DRCkk3ur0vu54nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAR0AEkSAiE4qMzYGRtTTBMEOK0NMB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvQkhRQVNSSUNJVGlvek5nWkcxTk1Fd1E0clEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXSMMA0G
CSqGSIb3DQEBCwUAA4IBAQB+y+4eRa2UfXTVZP0N+GtVzPyEtzNiwYRzrZlFzW/4
n7YK9EPjX13ty3fMEEB4B1rpqEsamjV8gq4lqP1MnrCZS/AhxYWUNgceht/CmpHY
Rdh10PyfmhiD/dgmXzYvDzw4HUeey2LS0xFl2i5MBG01d8wV4kDAogq5RJ/N7niY
b9pkcWawYYIW3MITh2CPP9E3AuKtWd2yYLn8xTLC8gSDynzvCZyQJoQ4yaMggQ5i
5IAhI6hwr5rzHc2EdXDeD4E/yJZkvg8VwOxR3MxwMrXJbrRz3IlEo4wgbyTMvwSR
u8uHam6CP3VjuMPJfOUHwWfBrGzVwZfe07fsjVKtpcF0
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:45 2025 by rpki-client