Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/FGJLDNwIe5pLjXrqbymC0a0gPJo.roa
File: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (raw, json)
Hash identifier: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=
Subject key identifier: 14:62:4B:0C:DC:08:7B:9A:4B:8D:7A:EA:6F:29:82:D1:AD:20:3C:9A
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 01941FFA8F80656E73E71262E1DB5C115B23
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/FGJLDNwIe5pLjXrqbymC0a0gPJo.roa
Signing time: Wed 01 Jan 2025 03:48:21 +0000
ROA not before: Wed 01 Jan 2025 03:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43191
IP address blocks: 79.170.118.0/23 maxlen: 23
79.170.118.0/24 maxlen: 24
79.170.119.0/24 maxlen: 24
185.80.68.0/23 maxlen: 23
185.80.68.0/24 maxlen: 24
185.80.69.0/24 maxlen: 24
185.80.70.0/23 maxlen: 23
185.80.70.0/24 maxlen: 24
185.80.71.0/24 maxlen: 24
2a03:5fe0::/32 maxlen: 32
2a03:5fe1::/32 maxlen: 32
2a03:5fe2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8f:80:65:6e:73:e7:12:62:e1:db:5c:11:5b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14624b0cdc087b9a4b8d7aea6f2982d1ad203c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:36:67:3b:81:59:29:11:c1:24:5e:47:14:0a:
37:4d:c7:63:b6:54:f9:f6:88:c1:f3:25:f0:06:d4:
33:1f:0d:7e:53:5f:83:f1:af:91:98:c7:f0:f4:99:
68:3a:3f:99:06:13:62:01:75:a8:5f:26:7f:23:ff:
f2:de:ce:ad:f0:59:87:01:80:de:23:8b:5e:38:cf:
9d:cc:8f:7d:15:0a:8a:85:cb:65:dd:70:16:9f:3c:
65:4f:15:21:bf:3d:6b:73:12:a1:f0:96:a5:64:df:
64:cb:61:30:f9:dd:46:55:1f:8a:9a:89:02:bb:14:
14:a2:a1:cd:1c:41:bc:f9:7e:5a:75:3e:a6:9a:19:
22:2b:02:c1:79:a0:d7:c6:d5:d8:78:7c:b0:eb:58:
76:7b:6f:7d:bf:3c:01:f8:38:22:f3:5d:bf:bd:3f:
9b:25:00:0f:bf:f0:ab:1a:fa:fa:7b:a0:5b:57:d1:
5a:71:30:8c:cf:48:a0:cd:3e:1d:a8:03:a7:01:c8:
10:72:2b:8d:03:f3:7e:a3:7c:56:96:57:da:1b:95:
58:ed:81:e8:47:32:6d:59:31:19:bb:76:2e:9c:12:
36:73:b2:42:e7:19:34:d1:57:9e:d3:cb:c6:11:7f:
68:da:59:69:47:7f:49:ea:87:c0:ef:8c:ca:c4:d4:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:62:4B:0C:DC:08:7B:9A:4B:8D:7A:EA:6F:29:82:D1:AD:20:3C:9A
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/FGJLDNwIe5pLjXrqbymC0a0gPJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.118.0/23
185.80.68.0/22
IPv6:
2a03:5fe0::-2a03:5fe2:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
28:e5:bc:df:81:cd:7c:77:6a:8d:dd:e7:d1:21:c7:37:ee:da:
f4:b5:81:9a:5d:02:d2:5e:d6:99:1d:23:64:a6:41:98:a1:b1:
2d:7e:c2:c9:98:d0:eb:3b:f2:7d:41:84:15:6f:ec:a9:66:61:
b7:64:6b:9f:99:04:10:f6:78:14:c8:8b:79:68:d9:2c:99:20:
5f:9c:1c:6e:8f:49:ad:b1:fa:01:46:96:6b:b7:52:02:d4:5e:
d0:45:24:45:af:c8:63:ec:20:60:c6:ca:39:66:4a:ed:0b:3c:
27:6d:0e:ef:fc:96:da:79:07:16:6d:48:c1:78:8f:cd:ae:39:
6a:43:10:db:34:9b:35:cf:6f:1e:0e:ec:8e:95:73:da:68:36:
22:44:ce:80:f7:91:8e:d5:ac:eb:7b:f7:be:9e:16:fa:40:c6:
3c:26:bb:61:88:dc:0a:8f:10:8a:cd:c0:a4:88:c6:a9:0e:4d:
94:82:b7:55:54:b3:2e:71:6b:28:c0:1c:e8:35:72:5f:19:c1:
7d:68:36:5d:c3:eb:e8:89:d9:49:f4:ed:90:f3:94:65:48:45:
ff:c1:7a:b1:31:89:14:e5:44:b7:c0:97:b4:c6:ab:4d:ac:a6:
33:29:c0:a2:15:dc:f9:89:2e:8c:57:8a:a0:30:6f:88:93:ed:
39:7e:7f:7f
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQf+o+AZW5z5xJi4dtcEVsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjViYjgwZmVlZjM0NDY1MGE5YTc3M2Y2MWYwYjJjZmJm
N2NlOGMwHhcNMjUwMTAxMDM0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDYyNGIwY2RjMDg3YjlhNGI4ZDdhZWE2ZjI5ODJkMWFkMjAzYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDZnO4FZKRHBJF5HFAo3TcdjtlT5
9ojB8yXwBtQzHw1+U1+D8a+RmMfw9JloOj+ZBhNiAXWoXyZ/I//y3s6t8FmHAYDe
I4teOM+dzI99FQqKhctl3XAWnzxlTxUhvz1rcxKh8JalZN9ky2Ew+d1GVR+KmokC
uxQUoqHNHEG8+X5adT6mmhkiKwLBeaDXxtXYeHyw61h2e299vzwB+Dgi812/vT+b
JQAPv/CrGvr6e6BbV9FacTCMz0igzT4dqAOnAcgQciuNA/N+o3xWllfaG5VY7YHo
RzJtWTEZu3YunBI2c7JC5xk00Vee08vGEX9o2llpR39J6ofA74zKxNRGKwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBRiSwzcCHuaS4166m8pgtGtIDyaMB8GA1UdIwQY
MBaAFJC1u4D+7zRGUKmnc/YfCyz7986MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMt
NWVkNTI3MGVkZjIzLzEvRkdKTEROd0llNXBMalhycWJ5bUMwYTBnUEpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wNTIxMTgtYzQ2Yi00OGI0LTg3ZGMtNWVkNTI3MGVkZjIz
LzEva0xXN2dQN3ZORVpRcWFkejloOExMUHYzem93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQBT6p2AwQC
uVBEMBYEAgACMBAwDgMFBSoDX+ADBQAqA1/iMA0GCSqGSIb3DQEBCwUAA4IBAQAo
5bzfgc18d2qN3efRIcc37tr0tYGaXQLSXtaZHSNkpkGYobEtfsLJmNDrO/J9QYQV
b+ypZmG3ZGufmQQQ9ngUyIt5aNksmSBfnBxuj0mtsfoBRpZrt1IC1F7QRSRFr8hj
7CBgxso5ZkrtCzwnbQ7v/JbaeQcWbUjBeI/NrjlqQxDbNJs1z28eDuyOlXPaaDYi
RM6A95GO1azre/e+nhb6QMY8JrthiNwKjxCKzcCkiMapDk2UgrdVVLMucWsowBzo
NXJfGcF9aDZdw+voidlJ9O2Q85RlSEX/wXqxMYkU5US3wJe0xqtNrKYzKcCiFdz5
iS6MV4qgMG+Ik+05fn9/
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:13 2025 by rpki-client