Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/c7FjbyXUp1azETmaVjGE4zrdS_0.roa
File: c7FjbyXUp1azETmaVjGE4zrdS_0.roa (raw, json)
Hash identifier: 1EAkoGZKuSvHaZbHdV7CIpiPAKR0EYS9XC/HDvN96qw=
Subject key identifier: 73:B1:63:6F:25:D4:A7:56:B3:11:39:9A:56:31:84:E3:3A:DD:4B:FD
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27D4911D45F7912CA5C6F321A56C42
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/c7FjbyXUp1azETmaVjGE4zrdS_0.roa
Signing time: Fri 28 Oct 2022 10:33:57 +0000
ROA not before: Fri 28 Oct 2022 10:33:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 89.117.254.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:d4:91:1d:45:f7:91:2c:a5:c6:f3:21:a5:6c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73b1636f25d4a756b311399a563184e33add4bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:99:15:96:43:d1:bf:eb:36:fa:1b:ba:fc:
83:5d:c7:3f:4f:43:57:27:fd:6b:88:27:4b:9a:a8:
fe:c2:c2:e5:02:16:8f:e0:a1:b4:e7:9d:64:45:27:
62:dd:58:ac:a3:74:c0:c0:16:ea:86:a4:14:1a:98:
d4:37:fd:9d:25:2c:af:2d:b0:73:c2:95:86:68:4a:
bf:9e:03:85:09:83:cd:b8:24:82:4c:38:34:95:09:
95:d9:a1:6b:44:60:82:74:24:43:d1:fd:ad:ee:d6:
3f:61:d4:5c:77:c9:cd:6c:34:d1:cb:97:94:96:bb:
dd:ee:8a:98:6b:27:0a:21:a5:8f:39:aa:d6:b1:2a:
17:15:04:fe:f0:77:65:6c:90:2b:f1:fa:e3:2b:3e:
60:d6:47:69:60:e8:40:db:6c:5b:90:15:55:6d:14:
39:76:35:83:7e:55:fa:00:dd:1d:54:06:c6:6c:af:
5d:92:d2:1f:70:af:bb:78:0d:b6:b9:75:76:2e:a2:
19:a0:90:96:5f:18:ed:70:a0:e1:c8:f1:39:e8:ca:
c4:33:4f:8a:20:9d:84:49:90:a2:13:bb:c7:fe:ee:
34:72:5d:8b:64:24:b6:09:d0:96:6d:a5:68:32:11:
eb:a9:07:8d:03:f5:71:db:d8:b0:88:14:0c:cd:87:
19:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B1:63:6F:25:D4:A7:56:B3:11:39:9A:56:31:84:E3:3A:DD:4B:FD
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/c7FjbyXUp1azETmaVjGE4zrdS_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.92.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:71:62:ce:a9:b7:e6:1a:df:02:e8:58:7c:0c:57:04:84:cc:
65:46:5c:12:74:cd:e8:d2:d7:96:7e:be:ce:9d:55:e5:40:f4:
72:a9:ea:ae:c3:c5:14:f0:29:cd:0e:cc:c1:31:91:08:73:fe:
d7:57:71:16:f2:bf:43:c4:37:17:90:4f:e8:bd:9b:0d:cb:e4:
da:d3:dc:c6:1c:42:8b:75:f6:ee:d6:37:7a:cd:9c:1d:aa:e9:
d4:5c:5e:02:5d:a9:e9:ba:85:a7:88:76:f7:58:f3:19:90:05:
c0:cc:77:51:ab:07:9b:c5:e3:44:14:53:dc:4f:17:a7:fa:eb:
f8:41:01:08:0b:ab:d2:35:78:81:3a:00:8a:95:39:31:fa:24:
a6:3b:c9:23:24:65:24:a0:5f:05:a3:ff:83:40:83:98:b1:59:
08:80:86:ad:94:00:da:61:52:ce:eb:3e:71:27:87:42:6f:73:
09:5e:de:64:42:2e:96:f4:f0:58:02:48:75:d3:91:2c:5f:f0:
3b:2f:26:6d:d9:62:e7:d1:47:d5:1e:95:bf:6e:ec:7c:87:55:
43:a4:99:ff:22:35:5b:cd:1b:46:8d:5b:43:13:ce:a4:45:ac:
51:fa:46:b0:5f:ce:cf:2a:ba:65:f9:5a:c8:79:cd:0e:ad:32:
cd:8e:02:11
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQeJ9SRHUX3kSylxvMhpWxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI4MTAzMzU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2IxNjM2ZjI1ZDRhNzU2YjMxMTM5OWE1NjMxODRlMzNhZGQ0YmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mSZFZZD0b/rNvobuvyDXcc/T0NX
J/1riCdLmqj+wsLlAhaP4KG0551kRSdi3Viso3TAwBbqhqQUGpjUN/2dJSyvLbBz
wpWGaEq/ngOFCYPNuCSCTDg0lQmV2aFrRGCCdCRD0f2t7tY/YdRcd8nNbDTRy5eU
lrvd7oqYaycKIaWPOarWsSoXFQT+8HdlbJAr8frjKz5g1kdpYOhA22xbkBVVbRQ5
djWDflX6AN0dVAbGbK9dktIfcK+7eA22uXV2LqIZoJCWXxjtcKDhyPE56MrEM0+K
IJ2ESZCiE7vH/u40cl2LZCS2CdCWbaVoMhHrqQeNA/Vx29iwiBQMzYcZywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHOxY28l1KdWsxE5mlYxhOM63Uv9MB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvYzdGamJ5WFVwMWF6RVRtYVZqR0U0enJkU18wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWXRcAwQA
WXX+MA0GCSqGSIb3DQEBCwUAA4IBAQC7cWLOqbfmGt8C6Fh8DFcEhMxlRlwSdM3o
0teWfr7OnVXlQPRyqequw8UU8CnNDszBMZEIc/7XV3EW8r9DxDcXkE/ovZsNy+Ta
09zGHEKLdfbu1jd6zZwdqunUXF4CXanpuoWniHb3WPMZkAXAzHdRqwebxeNEFFPc
Txen+uv4QQEIC6vSNXiBOgCKlTkx+iSmO8kjJGUkoF8Fo/+DQIOYsVkIgIatlADa
YVLO6z5xJ4dCb3MJXt5kQi6W9PBYAkh105EsX/A7LyZt2WLn0UfVHpW/bux8h1VD
pJn/IjVbzRtGjVtDE86kRaxR+kawX87PKrpl+VrIec0OrTLNjgIR
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:42 2025 by rpki-client