Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/PqQOvlcyCgnD_KrTcPNVeT5y_Q4.roa
File: PqQOvlcyCgnD_KrTcPNVeT5y_Q4.roa (raw, json)
Hash identifier: I7J+anSkY2fkQ5n+KqRs1YijsKmm5MWl2Af5t5y/eoA=
Subject key identifier: 3E:A4:0E:BE:57:32:0A:09:C3:FC:AA:D3:70:F3:55:79:3E:72:FD:0E
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27DA9484F9BBE31C33AA4260032E74
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/PqQOvlcyCgnD_KrTcPNVeT5y_Q4.roa
Signing time: Fri 28 Oct 2022 10:33:59 +0000
ROA not before: Fri 28 Oct 2022 10:33:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 89.116.132.0/24 maxlen: 24
89.116.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:da:94:84:f9:bb:e3:1c:33:aa:42:60:03:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ea40ebe57320a09c3fcaad370f355793e72fd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:2a:72:cb:5b:c4:c1:2b:08:17:bc:d0:cb:
ac:6c:2f:37:3b:c3:99:3b:57:e7:43:f0:c2:b0:dc:
7b:8f:46:b6:3e:2d:87:6a:72:1f:69:09:f1:ae:e2:
cb:2b:cb:59:d0:cf:61:4c:52:fe:cf:d5:81:19:37:
a9:57:4e:2e:b2:cf:fd:03:c7:22:81:6f:78:24:70:
83:61:62:2d:17:4c:b2:b7:05:b5:d8:01:86:ab:b0:
46:13:9a:ea:1c:ba:00:fc:48:85:67:f2:1a:99:2b:
46:2e:69:3b:ca:72:68:74:2a:e1:6c:fc:cc:f5:45:
e7:39:95:01:a3:b0:dc:30:1a:b1:24:ba:a1:24:5b:
8c:b9:60:78:78:68:7c:09:59:ee:df:42:68:5b:2b:
ef:38:d2:03:0b:47:86:2a:1a:6d:ba:8e:4b:08:8d:
32:65:6a:f0:86:51:b7:81:d5:9c:04:60:81:2c:65:
c5:08:f2:5a:9d:43:e8:52:c1:22:ca:0b:ba:29:13:
5c:ef:32:2b:f3:0a:29:37:b1:6e:c7:cf:f5:49:bd:
08:ba:f7:76:df:17:cc:4e:61:56:ff:93:b4:ec:88:
4f:29:95:a7:22:84:44:b3:1e:f9:8f:91:7e:d8:9a:
15:24:ab:84:b4:56:94:85:d8:be:a6:fc:10:7d:cf:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:0E:BE:57:32:0A:09:C3:FC:AA:D3:70:F3:55:79:3E:72:FD:0E
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/PqQOvlcyCgnD_KrTcPNVeT5y_Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.132.0/24
89.116.166.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:93:cc:b6:1b:ab:22:72:e8:ce:5b:1a:9b:22:cd:ac:bc:41:
cd:c1:00:ac:10:a3:2d:7e:6d:49:a7:03:0f:b2:6a:52:dc:83:
ed:5c:a2:f3:23:58:56:34:14:83:8b:b8:6a:29:f4:4a:cd:86:
5f:3e:66:98:a1:63:94:f2:11:8e:49:f9:22:3d:c7:45:77:ba:
70:22:51:97:e6:75:21:58:8a:c8:3a:a6:46:98:87:f7:c6:38:
43:69:e3:35:d5:c2:fc:b3:15:ae:27:2b:50:c3:12:c7:3d:39:
8e:65:c5:9d:0a:0f:9e:46:35:3c:4b:a0:96:f3:89:42:28:2b:
95:f3:2d:59:68:7a:eb:64:98:7b:3b:23:cc:61:3f:6c:38:f6:
ab:26:7d:5d:66:1c:59:3a:cb:f3:d7:4a:9f:45:25:c0:2d:95:
c0:6b:77:3a:7d:c0:37:59:d6:bd:e5:ca:92:92:e3:14:69:c3:
80:61:ff:2f:0f:a4:f3:4a:f0:d1:bd:32:75:33:71:1c:b5:32:
c3:9d:d1:ba:75:95:6f:6c:e0:fe:2b:8f:e7:e5:f8:30:ec:de:
8b:ab:34:3f:4e:36:8e:d1:36:5a:cb:22:3a:c4:b5:95:e1:47:
a8:db:d7:2e:b7:8f:88:dd:0e:a4:0c:2c:db:ed:cd:e2:bb:d9:
fe:b9:38:7e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQeJ9qUhPm74xwzqkJgAy50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI4MTAzMzU5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWE0MGViZTU3MzIwYTA5YzNmY2FhZDM3MGYzNTU3OTNlNzJmZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOoqcstbxMErCBe80MusbC83O8OZ
O1fnQ/DCsNx7j0a2Pi2HanIfaQnxruLLK8tZ0M9hTFL+z9WBGTepV04uss/9A8ci
gW94JHCDYWItF0yytwW12AGGq7BGE5rqHLoA/EiFZ/IamStGLmk7ynJodCrhbPzM
9UXnOZUBo7DcMBqxJLqhJFuMuWB4eGh8CVnu30JoWyvvONIDC0eGKhptuo5LCI0y
ZWrwhlG3gdWcBGCBLGXFCPJanUPoUsEiygu6KRNc7zIr8wopN7Fux8/1Sb0Iuvd2
3xfMTmFW/5O07IhPKZWnIoREsx75j5F+2JoVJKuEtFaUhdi+pvwQfc90KwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD6kDr5XMgoJw/yq03DzVXk+cv0OMB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvUHFRT3ZsY3lDZ25EX0tyVGNQTlZlVDV5X1E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWXSEAwQA
WXSmMA0GCSqGSIb3DQEBCwUAA4IBAQCqk8y2G6sicujOWxqbIs2svEHNwQCsEKMt
fm1JpwMPsmpS3IPtXKLzI1hWNBSDi7hqKfRKzYZfPmaYoWOU8hGOSfkiPcdFd7pw
IlGX5nUhWIrIOqZGmIf3xjhDaeM11cL8sxWuJytQwxLHPTmOZcWdCg+eRjU8S6CW
84lCKCuV8y1ZaHrrZJh7OyPMYT9sOParJn1dZhxZOsvz10qfRSXALZXAa3c6fcA3
Wda95cqSkuMUacOAYf8vD6TzSvDRvTJ1M3EctTLDndG6dZVvbOD+K4/n5fgw7N6L
qzQ/TjaO0TZayyI6xLWV4Ueo29cut4+I3Q6kDCzb7c3iu9n+uTh+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org