Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/zVEpd5eOrX763vZYV8KAy7R1iLU.roa
File: zVEpd5eOrX763vZYV8KAy7R1iLU.roa (raw, json)
Hash identifier: CL8z1tQYcEBfeneWJCJeNyEsWvq71yJym+nkjepnEJU=
Subject key identifier: CD:51:29:77:97:8E:AD:7E:FA:DE:F6:58:57:C2:80:CB:B4:75:88:B5
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27C24EEA6CE943F933491C61593AC9
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/zVEpd5eOrX763vZYV8KAy7R1iLU.roa
Signing time: Fri 28 Oct 2022 10:33:52 +0000
ROA not before: Fri 28 Oct 2022 10:33:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 89.116.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:c2:4e:ea:6c:e9:43:f9:33:49:1c:61:59:3a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd512977978ead7efadef65857c280cbb47588b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:27:a0:ab:b1:83:ba:64:ff:db:68:22:76:
f8:4d:73:97:18:c4:8b:a8:51:4c:73:f8:1a:28:70:
92:aa:ca:ae:8a:10:42:ec:e1:d9:65:d0:71:83:fb:
77:7d:46:2e:89:23:20:3a:c1:8a:ae:a7:7d:d9:7e:
08:1e:97:80:8f:7b:23:4c:f5:06:b0:1a:54:f6:af:
27:83:92:c7:5f:bf:84:e9:7d:f4:f6:cd:45:78:d9:
41:4d:38:c2:9f:57:d3:f4:73:23:f4:de:05:38:35:
03:57:ff:b6:ad:a4:12:6c:ef:c3:dd:eb:15:98:48:
fa:d1:9e:e6:82:c0:f6:bb:67:88:08:50:29:b5:e5:
81:55:bb:2a:7f:0d:ac:2a:48:80:bc:a0:8b:7a:71:
bc:96:6d:af:85:c5:0f:40:c3:28:4a:04:3a:cc:c8:
38:d5:4d:d5:e7:25:f1:f1:f3:3c:fd:50:c0:5a:0b:
e2:9b:89:21:8f:93:28:5d:03:59:dc:a8:fb:a7:c7:
3a:73:c5:f7:f6:19:51:bd:a9:3a:da:38:bb:7a:b9:
fb:9a:3c:0b:18:db:2f:98:2c:a2:56:f8:de:f3:7e:
22:a4:b9:e7:2e:4b:74:63:3b:3e:21:a3:8e:24:3f:
53:7b:ec:7a:15:35:78:89:9a:b7:c6:8a:bd:6d:bb:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:51:29:77:97:8E:AD:7E:FA:DE:F6:58:57:C2:80:CB:B4:75:88:B5
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/zVEpd5eOrX763vZYV8KAy7R1iLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.241.0/24
Signature Algorithm: sha256WithRSAEncryption
51:8f:22:89:00:9c:10:d0:b8:27:28:c2:cd:db:91:2a:88:e4:
b5:3f:df:69:b8:b6:ff:01:31:c0:3d:ad:c6:33:f6:af:dc:53:
11:52:ae:1c:19:7a:04:e8:11:d8:5f:be:6d:9b:5a:f3:b8:de:
ef:d3:78:1c:1d:68:c9:51:65:ea:d8:44:9a:55:23:2e:df:21:
e6:f8:c8:4e:fd:eb:29:27:27:c8:f5:0d:09:15:2a:41:df:94:
7a:b3:d0:e4:81:e4:c5:bd:d0:d8:4b:40:c8:f0:5e:65:40:8f:
4b:0b:0c:93:c3:b6:57:34:27:96:60:93:a7:69:25:77:88:98:
2f:bb:d2:d0:13:76:a2:d7:ae:c0:52:8b:c6:ff:51:29:4b:da:
c0:c6:2b:a2:a9:5e:79:2f:4d:e8:a1:2e:f1:29:89:c2:e2:68:
b2:85:80:1a:52:ae:51:2f:1c:24:7f:1a:36:9f:94:25:ff:2d:
93:c7:1e:92:b0:44:93:29:18:76:cd:ee:52:fa:88:50:da:58:
1a:9e:46:40:e0:45:41:cc:67:11:58:99:22:16:40:d4:43:da:
89:84:59:48:c1:bb:08:d6:3a:54:12:ee:1b:9e:20:35:ef:98:
0e:64:ef:7d:06:26:78:c0:7b:f7:64:dc:44:5d:33:46:1a:97:
92:8b:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:08 2025 by rpki-client