Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/s3sywek7WiRPbDeyDrL-f633NBE.roa
File: s3sywek7WiRPbDeyDrL-f633NBE.roa (raw, json)
Hash identifier: +vO5m1tC5POF3KZgMF6C/3ZhLxtNitVJmahl4SqLcHs=
Subject key identifier: B3:7B:32:C1:E9:3B:5A:24:4F:6C:37:B2:0E:B2:FE:7F:AD:F7:34:11
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27E29BD9A56CFEC5E409E502FE6C40
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/s3sywek7WiRPbDeyDrL-f633NBE.roa
Signing time: Fri 28 Oct 2022 10:34:01 +0000
ROA not before: Fri 28 Oct 2022 10:34:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400799
IP address blocks: 89.116.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:e2:9b:d9:a5:6c:fe:c5:e4:09:e5:02:fe:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:34:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b37b32c1e93b5a244f6c37b20eb2fe7fadf73411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:29:5e:b9:a2:2d:7e:e5:ed:8e:b0:0e:19:
33:b9:bd:96:00:44:df:fb:67:5e:33:77:d0:5e:65:
4b:f1:7c:fb:45:91:ea:99:7c:16:20:d5:d5:9e:12:
22:26:31:ec:bf:ec:a4:c9:a0:2e:1d:e8:04:d9:c0:
be:23:b1:a2:eb:20:4f:1b:e3:72:b7:8f:41:75:59:
db:de:70:7a:21:f8:72:f9:b6:32:1b:c0:ae:1e:e2:
5c:96:f8:f2:29:a0:ad:47:2f:a8:5d:c7:4e:6a:c9:
39:0d:0a:3b:72:b6:4a:33:48:2a:85:e4:ca:8b:11:
91:24:97:46:10:7a:6e:1a:66:65:be:b5:66:7e:a6:
a0:0f:4d:65:b0:e2:72:90:03:24:7e:f5:3f:16:a6:
2d:3f:15:c6:65:51:3d:ac:d6:64:f4:15:a6:6d:b1:
d2:14:75:45:ef:3a:21:9e:79:34:91:16:75:ec:ed:
a7:b3:99:f0:45:55:97:f7:2c:85:85:f2:72:b4:ce:
18:4d:e0:3f:69:cb:93:00:63:7f:80:3f:d0:53:cb:
20:4f:d5:78:a0:c7:21:d9:b5:3d:3d:19:26:24:10:
42:47:9f:4f:1e:91:a5:fe:ac:b4:0b:2a:43:85:9b:
aa:0f:72:8d:ea:74:a8:ec:7f:ef:eb:29:93:8a:54:
3a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7B:32:C1:E9:3B:5A:24:4F:6C:37:B2:0E:B2:FE:7F:AD:F7:34:11
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/s3sywek7WiRPbDeyDrL-f633NBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.234.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8a:32:61:ad:1e:e1:ec:29:08:1d:a3:ee:7d:a1:81:af:25:
5d:b3:c5:56:73:98:77:8c:91:e1:5a:ea:79:76:24:14:c5:5f:
5a:b7:a9:74:7b:83:5f:76:ea:83:07:a1:57:bd:91:2f:17:8a:
2a:fe:f8:94:2f:76:11:95:01:fd:d3:e6:14:86:bb:85:26:30:
3d:98:5b:05:92:cd:2e:64:0b:cf:aa:75:34:f0:2b:fa:b1:80:
83:66:bc:d0:cb:e5:da:be:7b:f9:a5:c8:fa:9d:24:5b:db:9f:
b3:3e:77:a6:a3:f8:ae:bb:75:ac:ab:c0:e7:6b:93:b3:a1:ae:
1e:7f:8b:03:73:5f:54:e1:22:78:32:a7:d1:64:fa:83:a2:59:
79:6b:79:e9:81:60:f2:83:1b:94:33:6b:20:2a:29:97:5c:ac:
b0:70:4d:37:56:f5:83:a6:d1:e3:64:9c:1d:bf:77:8d:42:3e:
da:1b:8d:f1:29:b0:84:24:12:5b:89:f4:00:17:46:52:06:2a:
07:15:af:41:2d:bc:b0:d0:2d:e7:22:83:9c:90:75:f2:71:5b:
59:80:49:eb:b9:c8:e4:c9:a0:81:83:92:b3:98:61:6f:5c:37:
53:68:7e:ee:8f:44:e6:f9:fa:c4:28:6f:f6:9a:74:69:f6:6c:
b9:9a:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:45 2025 by rpki-client