Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/Wyi3MkdbJT79jzDqUp1doEAT7HM.roa
File: Wyi3MkdbJT79jzDqUp1doEAT7HM.roa (raw, json)
Hash identifier: uBcUuCYQfnueI3Yo87JR6yKGCIBYuJq3wEbfyJEsPT0=
Subject key identifier: 5B:28:B7:32:47:5B:25:3E:FD:8F:30:EA:52:9D:5D:A0:40:13:EC:73
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27D6676D7752928543B8BBDF325A06
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/Wyi3MkdbJT79jzDqUp1doEAT7HM.roa
Signing time: Fri 28 Oct 2022 10:33:57 +0000
ROA not before: Fri 28 Oct 2022 10:33:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197890
IP address blocks: 89.117.102.0/23 maxlen: 24
89.116.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:d6:67:6d:77:52:92:85:43:b8:bb:df:32:5a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b28b732475b253efd8f30ea529d5da04013ec73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:2a:30:16:d7:ca:27:19:d6:d2:1b:a9:41:
c5:84:64:04:1d:5e:42:be:49:7f:4c:23:62:02:d2:
f4:f5:7b:57:ee:4b:44:df:d0:74:62:ab:45:47:3c:
3f:ad:cf:54:bb:37:14:97:5b:34:f2:4c:da:ce:b8:
03:36:58:d7:e7:6d:45:1a:54:56:15:25:b7:c2:b5:
d4:64:ca:70:b3:e3:77:0c:d8:74:3c:cb:0c:96:50:
e2:2e:c3:e6:5a:e7:5e:09:3e:3b:f0:54:40:1b:9a:
e3:e3:9c:45:21:3f:8d:91:f5:d1:a6:90:e0:33:8f:
4e:94:69:a3:39:2d:0d:50:16:b1:e9:f5:7b:26:1a:
15:8a:70:a0:c2:db:d0:8b:ee:06:90:21:9e:17:8f:
52:dc:5c:02:f5:6b:74:b2:dd:32:c9:56:67:38:72:
bf:e1:6c:1a:98:96:18:6f:19:e6:99:69:d3:1a:0f:
83:e2:b2:f1:c0:f7:ca:3e:b6:e5:c1:e1:7e:b1:83:
59:97:1f:31:e8:46:00:51:d3:49:ab:75:3b:11:8d:
8a:fd:d6:0f:73:80:4b:70:01:15:47:60:f0:5b:66:
9c:24:8c:ea:34:aa:cf:bc:1b:9f:48:36:54:e7:02:
a1:a2:41:4f:77:47:a1:93:4f:03:fb:a8:e0:b5:dd:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:28:B7:32:47:5B:25:3E:FD:8F:30:EA:52:9D:5D:A0:40:13:EC:73
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/Wyi3MkdbJT79jzDqUp1doEAT7HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.146.0/23
89.117.102.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:90:50:2c:dc:05:9b:a9:dd:5d:33:0d:a0:95:0a:00:fe:06:
3f:ce:7e:ef:0d:0b:d9:f6:31:ce:d4:6b:7b:a2:0e:ab:9d:f2:
61:56:72:4f:68:de:69:41:c6:ed:19:e8:e5:1f:91:e9:80:cf:
e8:4f:9e:ac:6a:a9:f3:5e:69:17:9e:bb:d4:1c:bd:04:3d:3e:
93:09:69:3e:0f:95:ea:35:2f:2c:d6:5b:03:31:9e:ae:05:bd:
42:4a:8a:1f:43:47:6d:10:8b:9c:65:87:21:39:66:e9:cd:de:
df:6a:2f:81:5c:23:29:22:ec:dc:bb:28:57:6e:17:e3:50:2c:
af:51:bc:a8:ef:42:b7:77:17:94:72:64:bb:cd:92:43:30:e8:
a0:4f:9a:63:43:8e:8e:c5:d4:70:e0:2d:3e:05:66:ea:98:3f:
cd:cd:2c:25:4f:e4:a0:91:72:34:23:b0:ce:ed:01:2c:71:99:
f3:d4:3b:ae:b6:0c:2a:00:a4:b9:0a:8a:40:80:18:73:b6:5c:
09:49:d6:81:9c:4d:c6:df:9b:06:d3:d8:d2:c5:8c:c9:5c:73:
a9:c6:15:53:14:0e:f6:76:19:2c:f6:d3:e4:ba:65:2f:6d:2f:
e4:7a:c7:52:e2:26:73:db:56:91:af:3c:5b:76:c5:af:74:44:
b9:0a:76:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQeJ9ZnbXdSkoVDuLvfMloGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI4MTAzMzU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjI4YjczMjQ3NWIyNTNlZmQ4ZjMwZWE1MjlkNWRhMDQwMTNlYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo64qMBbXyicZ1tIbqUHFhGQEHV5C
vkl/TCNiAtL09XtX7ktE39B0YqtFRzw/rc9UuzcUl1s08kzazrgDNljX521FGlRW
FSW3wrXUZMpws+N3DNh0PMsMllDiLsPmWudeCT478FRAG5rj45xFIT+NkfXRppDg
M49OlGmjOS0NUBax6fV7JhoVinCgwtvQi+4GkCGeF49S3FwC9Wt0st0yyVZnOHK/
4WwamJYYbxnmmWnTGg+D4rLxwPfKPrblweF+sYNZlx8x6EYAUdNJq3U7EY2K/dYP
c4BLcAEVR2DwW2acJIzqNKrPvBufSDZU5wKhokFPd0ehk08D+6jgtd0rWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFsotzJHWyU+/Y8w6lKdXaBAE+xzMB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvV3lpM01rZGJKVDc5anpEcVVwMWRvRUFUN0hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBWXSSAwQB
WXVmMA0GCSqGSIb3DQEBCwUAA4IBAQANkFAs3AWbqd1dMw2glQoA/gY/zn7vDQvZ
9jHO1Gt7og6rnfJhVnJPaN5pQcbtGejlH5HpgM/oT56saqnzXmkXnrvUHL0EPT6T
CWk+D5XqNS8s1lsDMZ6uBb1CSoofQ0dtEIucZYchOWbpzd7fai+BXCMpIuzcuyhX
bhfjUCyvUbyo70K3dxeUcmS7zZJDMOigT5pjQ46OxdRw4C0+BWbqmD/NzSwlT+Sg
kXI0I7DO7QEscZnz1DuutgwqAKS5CopAgBhztlwJSdaBnE3G35sG09jSxYzJXHOp
xhVTFA72dhks9tPkumUvbS/kesdS4iZz21aRrzxbdsWvdES5CnaQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:19 2024 by rpki-client on console-fra.rpki-client.org