Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/FSp5pAKUkfXX-8SBXbIlgTYwdw0.roa
File: FSp5pAKUkfXX-8SBXbIlgTYwdw0.roa (raw, json)
Hash identifier: 64o4b5CqJQ09byyI6S2GTaon14yRLMcXwsenIWnJx3w=
Subject key identifier: 15:2A:79:A4:02:94:91:F5:D7:FB:C4:81:5D:B2:25:81:36:30:77:0D
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01856EAFF6507019E266383E2954621BB570
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/FSp5pAKUkfXX-8SBXbIlgTYwdw0.roa
Signing time: Sun 01 Jan 2023 18:55:03 +0000
ROA not before: Sun 01 Jan 2023 18:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 89.23.103.0/24 maxlen: 24
89.23.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:f6:50:70:19:e2:66:38:3e:29:54:62:1b:b5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 18:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=152a79a4029491f5d7fbc4815db225813630770d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:dc:1a:a2:23:8b:12:6d:87:98:e5:3c:4d:
23:92:2b:3c:35:15:00:f8:01:ab:3a:d1:19:34:3c:
2a:6a:c6:a0:f1:d7:60:16:17:19:46:34:09:c1:12:
d1:f3:d7:ee:75:d9:42:77:ee:5f:80:37:02:12:b7:
36:1f:a0:dc:8f:5d:9e:06:1e:d3:00:0c:3f:24:a5:
a3:9c:0f:06:08:fe:97:fe:f8:9c:ad:ae:ed:ea:a1:
98:1c:a6:27:4a:00:cb:b7:79:dc:e5:4e:f7:b4:14:
17:54:ea:b6:41:dc:06:9b:4c:c4:22:ca:e4:20:b5:
c7:bd:5a:47:4e:31:8b:12:49:25:75:26:03:39:43:
6c:b9:4a:32:38:be:11:80:84:75:1c:c0:6e:60:15:
84:64:06:66:9d:a7:dc:3a:89:6d:1d:2c:a8:00:4b:
22:f4:b2:7d:91:41:17:61:fa:f1:a7:3e:ae:6a:dd:
41:29:c0:3b:51:2d:b4:5e:f3:0c:ab:95:ff:ed:09:
9a:3f:fe:0c:55:38:8a:56:be:62:23:93:19:b1:43:
2b:20:92:27:74:cb:08:8e:7e:ab:aa:5b:40:91:af:
ce:86:c7:ea:c2:74:b9:3f:fb:ca:cf:ea:76:2a:ed:
e2:45:6b:12:20:0b:34:f1:9a:b2:e7:62:56:cd:5e:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2A:79:A4:02:94:91:F5:D7:FB:C4:81:5D:B2:25:81:36:30:77:0D
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/FSp5pAKUkfXX-8SBXbIlgTYwdw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.103.0/24
89.23.108.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f7:7e:c3:7d:4b:8f:b7:98:56:cd:23:da:f9:d1:b0:d9:7c:
ff:c1:0e:19:ab:0c:33:d5:e1:7d:95:bb:e4:bf:9b:14:8f:0c:
29:8c:dc:85:57:6d:cc:33:f2:0d:9e:9f:a9:cf:3f:f1:32:30:
a5:05:77:3c:4c:c9:79:50:c2:bb:e7:15:bf:3a:e8:a8:fc:ac:
79:c0:a9:30:d8:a0:86:40:67:5c:23:62:c5:3d:db:66:56:8d:
8e:24:49:61:6a:bc:34:46:50:f6:3c:79:68:7c:fb:2f:fc:a6:
8e:b0:23:05:65:95:be:74:eb:62:d4:76:91:fc:64:a0:76:1c:
17:8a:92:4c:95:bf:43:56:47:57:51:59:94:f6:0b:4e:6c:98:
f4:d5:0b:ae:22:f4:00:15:4f:89:01:73:da:66:b1:ea:2d:ce:
ec:2f:cd:c1:60:46:ed:60:4d:e6:14:b9:f8:20:cc:6a:63:b3:
e5:ab:f0:2f:60:de:55:53:1c:0a:d5:a0:8e:ed:a0:b6:5b:14:
8d:3e:c9:e5:e9:23:c6:79:7f:fe:04:09:e0:c8:89:8e:4c:51:
8b:58:b0:21:c1:ee:80:21:f5:dc:a7:89:8a:4e:bc:c8:e4:08:
ce:1d:f9:89:b0:45:98:c1:9a:fe:08:e8:c3:fc:e3:b7:bf:5a:
f5:1e:25:fb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVur/ZQcBniZjg+KVRiG7VwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjMwMTAxMTg1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTJhNzlhNDAyOTQ5MWY1ZDdmYmM0ODE1ZGIyMjU4MTM2MzA3NzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvXcGqIjixJth5jlPE0jkis8NRUA
+AGrOtEZNDwqasag8ddgFhcZRjQJwRLR89fuddlCd+5fgDcCErc2H6Dcj12eBh7T
AAw/JKWjnA8GCP6X/vicra7t6qGYHKYnSgDLt3nc5U73tBQXVOq2QdwGm0zEIsrk
ILXHvVpHTjGLEkkldSYDOUNsuUoyOL4RgIR1HMBuYBWEZAZmnafcOoltHSyoAEsi
9LJ9kUEXYfrxpz6uat1BKcA7US20XvMMq5X/7QmaP/4MVTiKVr5iI5MZsUMrIJIn
dMsIjn6rqltAka/OhsfqwnS5P/vKz+p2Ku3iRWsSIAs08Zqy52JWzV4f0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBUqeaQClJH11/vEgV2yJYE2MHcNMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvRlNwNXBBS1VrZlhYLThTQlhiSWxnVFl3ZHcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRdnAwQA
WRdsMA0GCSqGSIb3DQEBCwUAA4IBAQAa937DfUuPt5hWzSPa+dGw2Xz/wQ4Zqwwz
1eF9lbvkv5sUjwwpjNyFV23MM/INnp+pzz/xMjClBXc8TMl5UMK75xW/Ouio/Kx5
wKkw2KCGQGdcI2LFPdtmVo2OJElharw0RlD2PHlofPsv/KaOsCMFZZW+dOti1HaR
/GSgdhwXipJMlb9DVkdXUVmU9gtObJj01QuuIvQAFU+JAXPaZrHqLc7sL83BYEbt
YE3mFLn4IMxqY7Plq/AvYN5VUxwK1aCO7aC2WxSNPsnl6SPGeX/+BAngyImOTFGL
WLAhwe6AIfXcp4mKTrzI5AjOHfmJsEWYwZr+COjD/OO3v1r1HiX7
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:00 2025 by rpki-client