Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/CAlOb7BWPe54xuHdlS7xf_HIdBY.roa
File: CAlOb7BWPe54xuHdlS7xf_HIdBY.roa (raw, json)
Hash identifier: jCYVuFWzs0MGxsnucmIFYz8+p1gyEBB6JsnShPjZKDc=
Subject key identifier: 08:09:4E:6F:B0:56:3D:EE:78:C6:E1:DD:95:2E:F1:7F:F1:C8:74:16
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27C288F5125C1182B5E6A7350ECEC7
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/CAlOb7BWPe54xuHdlS7xf_HIdBY.roa
Signing time: Fri 28 Oct 2022 10:33:52 +0000
ROA not before: Fri 28 Oct 2022 10:33:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14445
IP address blocks: 89.117.164.0/24 maxlen: 24
89.116.209.0/24 maxlen: 24
89.116.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:c2:88:f5:12:5c:11:82:b5:e6:a7:35:0e:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08094e6fb0563dee78c6e1dd952ef17ff1c87416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:cd:51:fb:33:7b:12:d2:2d:7d:2c:b4:f7:
97:e3:c3:ff:f5:2b:20:02:db:fc:ba:0d:eb:03:2e:
b2:16:23:c8:32:a2:53:53:9b:b9:41:ea:c0:3c:12:
80:87:69:d5:ba:a6:f7:9e:03:b9:62:a2:98:9c:ca:
63:aa:63:bd:a2:0a:46:d2:91:d3:ba:9a:e9:69:44:
b1:82:0c:52:4b:ef:45:30:83:80:a6:44:62:ae:ff:
6a:84:6e:56:1c:23:97:e1:ee:d4:8b:43:b9:d0:cb:
2d:f9:a4:88:b5:1b:46:a2:87:28:30:ee:4b:ea:34:
b3:e1:c7:47:12:a4:9d:2c:dd:94:ea:9c:64:e4:9d:
a0:a5:22:95:b7:aa:5e:76:4e:56:5f:71:9e:0c:e3:
ea:b3:8f:a1:b8:f4:4b:f5:a4:99:c5:4d:ff:3b:99:
f8:36:c5:49:67:90:60:b6:4f:62:bc:a5:dd:c8:de:
d0:51:f4:4a:5d:51:ed:5d:c4:89:78:a9:93:da:c8:
21:6a:56:c0:b9:fc:05:99:4f:15:3b:08:bc:b5:6a:
99:00:e0:9d:88:f1:bc:b4:89:13:f2:31:df:da:83:
b8:91:35:4b:9c:0b:ea:39:c9:0e:3c:56:b4:2b:f6:
11:70:06:e4:22:0b:ee:2b:d1:5b:33:53:7e:55:c0:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:09:4E:6F:B0:56:3D:EE:78:C6:E1:DD:95:2E:F1:7F:F1:C8:74:16
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/CAlOb7BWPe54xuHdlS7xf_HIdBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.103.0/24
89.116.209.0/24
89.117.164.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f2:f6:25:94:39:72:5e:19:46:83:bc:c2:44:9b:7b:92:74:
45:a6:c5:ba:b2:a1:99:63:fc:9f:a6:3b:d9:b9:bf:33:d0:9c:
de:eb:6b:15:b7:5a:2f:07:fa:ff:0e:53:32:4a:63:a4:a2:10:
25:0d:a9:2c:f3:2f:56:39:7c:0a:1d:a0:63:ac:78:5e:d7:f0:
94:59:4f:c5:56:64:d1:0f:b6:06:0c:56:6f:c4:db:64:77:15:
0d:11:ae:0e:97:ec:5d:59:df:59:8c:a3:dc:23:a1:98:58:d2:
e8:40:e3:67:87:6a:22:ad:3e:cc:18:ec:19:8c:fc:ce:0a:a3:
ec:b1:4e:c0:7e:1c:13:be:68:b3:a4:2c:c6:af:70:07:76:d3:
d9:86:8b:58:30:12:54:64:7d:14:7f:71:30:c2:ee:bf:3f:ff:
95:33:3d:2c:8f:56:98:7e:d6:64:f7:b1:66:0e:18:b4:5e:19:
28:81:7b:62:27:2f:5b:da:64:33:7b:ea:a9:61:e6:88:67:38:
71:bd:45:24:8d:bc:10:ae:f9:c1:d0:3e:12:5f:5d:7a:39:fb:
45:17:a9:59:fc:62:cf:c4:98:bb:87:0a:ef:f4:82:dd:4d:fb:
63:d1:bf:3e:6d:85:b0:ed:ed:3a:19:e0:f3:34:c4:e1:b6:39:
86:a7:c3:6c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYQeJ8KI9RJcEYK15qc1Ds7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI4MTAzMzUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODA5NGU2ZmIwNTYzZGVlNzhjNmUxZGQ5NTJlZjE3ZmYxYzg3NDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy3NUfszexLSLX0stPeX48P/9Ssg
Atv8ug3rAy6yFiPIMqJTU5u5QerAPBKAh2nVuqb3ngO5YqKYnMpjqmO9ogpG0pHT
uprpaUSxggxSS+9FMIOApkRirv9qhG5WHCOX4e7Ui0O50Mst+aSItRtGoocoMO5L
6jSz4cdHEqSdLN2U6pxk5J2gpSKVt6pedk5WX3GeDOPqs4+huPRL9aSZxU3/O5n4
NsVJZ5Bgtk9ivKXdyN7QUfRKXVHtXcSJeKmT2sghalbAufwFmU8VOwi8tWqZAOCd
iPG8tIkT8jHf2oO4kTVLnAvqOckOPFa0K/YRcAbkIgvuK9FbM1N+VcAQLQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAgJTm+wVj3ueMbh3ZUu8X/xyHQWMB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvQ0FsT2I3QldQZTU0eHVIZGxTN3hmX0hJZEJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWXRnAwQA
WXTRAwQAWXWkMA0GCSqGSIb3DQEBCwUAA4IBAQBi8vYllDlyXhlGg7zCRJt7knRF
psW6sqGZY/yfpjvZub8z0Jze62sVt1ovB/r/DlMySmOkohAlDaks8y9WOXwKHaBj
rHhe1/CUWU/FVmTRD7YGDFZvxNtkdxUNEa4Ol+xdWd9ZjKPcI6GYWNLoQONnh2oi
rT7MGOwZjPzOCqPssU7AfhwTvmizpCzGr3AHdtPZhotYMBJUZH0Uf3Ewwu6/P/+V
Mz0sj1aYftZk97FmDhi0XhkogXtiJy9b2mQze+qpYeaIZzhxvUUkjbwQrvnB0D4S
X116OftFF6lZ/GLPxJi7hwrv9ILdTftj0b8+bYWw7e06GeDzNMThtjmGp8Ns
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org