Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/YKgWNBHBhMYNAXrqeAaFYiIV8Yk.roa
File: YKgWNBHBhMYNAXrqeAaFYiIV8Yk.roa (raw, json)
Hash identifier: eR0mVONJIgkxehs937+7iRD2ymKYXo9QwUIUbc9tuBY=
Subject key identifier: 60:A8:16:34:11:C1:84:C6:0D:01:7A:EA:78:06:85:62:22:15:F1:89
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27D6A5F7C627CF98A0F4554ECEA506
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/YKgWNBHBhMYNAXrqeAaFYiIV8Yk.roa
Signing time: Fri 28 Oct 2022 10:33:58 +0000
ROA not before: Fri 28 Oct 2022 10:33:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 89.117.104.0/22 maxlen: 24
89.117.132.0/22 maxlen: 24
89.117.28.0/22 maxlen: 24
89.116.72.0/22 maxlen: 24
89.117.160.0/22 maxlen: 24
89.117.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:d6:a5:f7:c6:27:cf:98:a0:f4:55:4e:ce:a5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60a8163411c184c60d017aea780685622215f189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6c:14:f9:55:f1:ed:3c:c4:00:44:03:ea:96:
93:7e:4c:05:ed:5e:67:2f:b3:59:f1:0d:59:e6:d1:
96:79:e7:d0:fe:83:ba:a8:b0:7d:68:0a:9f:1a:41:
b7:55:5d:b4:72:2f:71:0f:1d:a2:d3:bd:1f:43:9d:
7b:f2:56:56:b5:63:39:75:b4:c4:63:9e:49:a9:91:
03:ef:87:c8:54:6a:66:ba:8a:0e:9a:45:1e:32:a7:
a0:f9:be:e9:2d:9d:ac:ed:9a:75:ad:70:ef:7a:a2:
41:c5:cc:20:ea:aa:49:22:09:10:a0:11:f1:8b:64:
11:69:a6:bb:39:30:88:aa:ec:ee:67:e3:5b:32:04:
6f:3b:e0:da:b1:66:5d:07:98:fb:aa:8b:88:2a:d2:
84:dd:58:3c:47:a7:05:73:ef:85:b0:bd:8c:ed:3b:
11:75:36:28:80:60:dd:ba:24:e1:91:44:96:34:63:
ea:1b:08:02:08:35:0b:f1:68:ec:21:b3:ee:c6:98:
57:4a:83:48:1c:71:d0:f9:78:83:cc:2b:b8:32:5b:
ce:66:0d:32:ee:f6:24:59:8d:d0:c7:4f:74:83:df:
53:64:e6:23:d0:e7:dc:11:94:b1:8a:e5:4f:b1:e1:
24:9f:b5:e3:f2:97:14:0b:8a:06:1d:72:6c:e8:76:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:16:34:11:C1:84:C6:0D:01:7A:EA:78:06:85:62:22:15:F1:89
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/YKgWNBHBhMYNAXrqeAaFYiIV8Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.72.0/22
89.117.28.0/22
89.117.64.0/22
89.117.104.0/22
89.117.132.0/22
89.117.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:50:1f:7a:55:e8:a5:5e:f9:01:2e:35:0c:42:a5:3f:c6:35:
1b:49:bb:1e:33:16:69:a2:3d:87:9a:fc:d0:b1:2e:37:67:1f:
87:d3:2c:09:24:c7:a8:7e:07:a4:d6:32:09:dc:a5:33:3b:94:
73:9c:f4:3d:6c:61:66:44:4e:15:ff:f2:9d:cd:62:c4:66:46:
bd:be:60:1b:f6:15:e1:79:54:54:fa:d0:4b:06:24:4a:9c:19:
1e:95:76:e5:ec:8a:7a:81:12:ae:38:92:c5:c5:ee:f8:d9:78:
df:9f:1f:b4:2b:ef:55:8f:f1:b8:bc:f2:6f:9d:94:af:60:4c:
c0:a0:f3:37:a5:91:d0:b0:b5:f0:d8:74:c6:d1:b5:8d:4b:54:
df:d9:6b:14:80:aa:75:9d:81:ca:bf:fb:03:6d:b7:76:5a:9c:
9b:0b:10:51:be:36:ff:27:e5:5a:63:aa:25:af:20:9c:af:2d:
c8:28:0c:11:b3:e3:6b:ba:59:56:33:07:10:b9:1d:af:3d:7f:
3f:d1:3d:7d:85:5e:6c:be:fd:db:44:fa:53:6f:13:98:a9:7c:
74:f7:3e:44:e7:a8:cd:dd:c6:d3:4a:af:87:12:9b:d2:87:03:
f8:39:d9:3d:5d:dc:a7:34:01:9a:dd:ca:22:32:58:55:80:21:
e7:ee:39:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:05:52 2025 by rpki-client