Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/g4UMralkotql35qjvGZn89fzVeY.roa
File: g4UMralkotql35qjvGZn89fzVeY.roa (raw, json)
Hash identifier: dGXQz+M+l8gdNW+hWGcTyIrALtDCqAlO7LuLELC+pV4=
Subject key identifier: 83:85:0C:AD:A9:64:A2:DA:A5:DF:9A:A3:BC:66:67:F3:D7:F3:55:E6
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27D708D0A503F4D629F6C9CDC56BCB
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/g4UMralkotql35qjvGZn89fzVeY.roa
Signing time: Fri 28 Oct 2022 10:33:58 +0000
ROA not before: Fri 28 Oct 2022 10:33:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204372
IP address blocks: 89.117.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:d7:08:d0:a5:03:f4:d6:29:f6:c9:cd:c5:6b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=83850cada964a2daa5df9aa3bc6667f3d7f355e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cf:91:db:5d:d5:6a:c1:9e:2e:1d:01:a1:01:
88:f7:05:89:37:31:50:45:94:9f:12:15:e8:3f:66:
02:43:15:a3:6d:7d:9b:62:97:45:46:f0:0b:e0:45:
dc:ae:cf:36:75:35:8d:f2:b5:4a:bd:32:02:32:9f:
f0:4b:65:52:88:fc:a3:5e:e8:3e:3c:17:bb:5c:b5:
8a:67:35:1a:fe:9a:22:45:c9:5c:7b:d8:57:ef:25:
3e:42:7b:12:a1:ec:47:df:7b:e8:3f:6e:a5:3a:f2:
07:42:d4:29:f5:f8:9f:03:3f:a1:98:7b:6e:56:60:
9d:db:91:e4:22:a2:c2:6c:e7:0a:8d:a0:55:6a:85:
4a:32:92:1b:eb:42:87:02:26:1f:0a:0b:fe:d5:fc:
56:1e:eb:63:89:fe:6b:9a:04:a5:3e:38:b6:27:10:
0c:a9:6f:5b:08:68:f1:cb:da:3b:1e:8e:ee:21:dc:
94:34:b2:81:18:df:79:50:f2:d1:ec:4c:92:a8:f3:
c0:9a:d8:9e:92:35:0d:e8:4a:ad:0f:05:80:44:7a:
14:68:4e:04:c9:d0:db:ea:26:08:d6:7b:fe:62:e6:
62:03:8e:88:d9:ae:e1:0c:a4:93:0b:0e:dd:c8:73:
ab:a0:f4:9c:90:e1:36:a1:fb:79:a2:5d:27:c8:78:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:85:0C:AD:A9:64:A2:DA:A5:DF:9A:A3:BC:66:67:F3:D7:F3:55:E6
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/g4UMralkotql35qjvGZn89fzVeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:55:05:6d:47:37:49:e0:f2:41:b2:ac:6d:61:3e:be:d6:73:
94:13:f2:c3:49:b8:6e:46:a8:ee:49:5b:ae:27:84:d2:d1:73:
58:4c:b9:68:6e:13:95:77:05:60:dc:c5:b1:a6:1c:38:18:a2:
ec:aa:71:cc:cb:2a:b1:03:7d:37:00:49:50:16:fb:e4:2f:f0:
8e:99:fc:1c:fd:42:12:3b:37:c4:66:25:98:bb:a4:35:30:e7:
30:25:50:d1:98:88:04:6a:2f:5e:50:8e:d8:67:b9:70:51:d6:
f4:ae:67:85:ce:71:c0:98:37:92:64:93:83:39:40:2b:df:cb:
e2:b0:80:52:0d:d6:73:46:07:5f:66:6f:c3:82:77:99:58:00:
ac:e2:08:f1:cd:c4:2f:31:30:e8:ab:ae:c7:ba:1e:c0:63:35:
3c:5c:3a:71:f0:e8:91:03:14:69:1d:34:08:95:84:3f:47:36:
d0:ca:a5:59:5e:b2:11:b2:90:3e:ff:ee:e2:e3:d0:7e:63:68:
b0:1f:77:6f:be:f8:8a:f7:76:ad:4e:da:34:9b:01:0a:bf:4f:
e6:8b:a4:92:b3:5e:c5:a9:e5:65:45:a6:63:75:94:04:aa:7a:
54:93:51:c1:d3:ea:d7:fe:3a:db:cf:78:a3:88:15:5e:91:fa:
c1:27:11:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQeJ9cI0KUD9NYp9snNxWvLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI4MTAzMzU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Mzg1MGNhZGE5NjRhMmRhYTVkZjlhYTNiYzY2NjdmM2Q3ZjM1NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8+R213VasGeLh0BoQGI9wWJNzFQ
RZSfEhXoP2YCQxWjbX2bYpdFRvAL4EXcrs82dTWN8rVKvTICMp/wS2VSiPyjXug+
PBe7XLWKZzUa/poiRclce9hX7yU+QnsSoexH33voP26lOvIHQtQp9fifAz+hmHtu
VmCd25HkIqLCbOcKjaBVaoVKMpIb60KHAiYfCgv+1fxWHutjif5rmgSlPji2JxAM
qW9bCGjxy9o7Ho7uIdyUNLKBGN95UPLR7EySqPPAmtiekjUN6EqtDwWARHoUaE4E
ydDb6iYI1nv+YuZiA46I2a7hDKSTCw7dyHOroPSckOE2oft5ol0nyHgU0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIOFDK2pZKLapd+ao7xmZ/PX81XmMB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvZzRVTXJhbGtvdHFsMzVxanZHWm44OWZ6VmVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXVXMA0G
CSqGSIb3DQEBCwUAA4IBAQBMVQVtRzdJ4PJBsqxtYT6+1nOUE/LDSbhuRqjuSVuu
J4TS0XNYTLlobhOVdwVg3MWxphw4GKLsqnHMyyqxA303AElQFvvkL/COmfwc/UIS
OzfEZiWYu6Q1MOcwJVDRmIgEai9eUI7YZ7lwUdb0rmeFznHAmDeSZJODOUAr38vi
sIBSDdZzRgdfZm/DgneZWACs4gjxzcQvMTDoq67Huh7AYzU8XDpx8OiRAxRpHTQI
lYQ/RzbQyqVZXrIRspA+/+7i49B+Y2iwH3dvvviK93atTto0mwEKv0/mi6SSs17F
qeVlRaZjdZQEqnpUk1HB0+rX/jrbz3ijiBVekfrBJxEL
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:32 2025 by rpki-client