Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/izTXQh8o7CJ69V-DqQeCMtuuTbo.roa
File: izTXQh8o7CJ69V-DqQeCMtuuTbo.roa (raw, json)
Hash identifier: 77MH/AMV0cByyuzuJGzrkYvajKypxuZcCqJ29JqrVjg=
Subject key identifier: 8B:34:D7:42:1F:28:EC:22:7A:F5:5F:83:A9:07:82:32:DB:AE:4D:BA
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 01841E27C9854C8FB3A2A9B968B4D25A674F
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/izTXQh8o7CJ69V-DqQeCMtuuTbo.roa
Signing time: Fri 28 Oct 2022 10:33:54 +0000
ROA not before: Fri 28 Oct 2022 10:33:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 89.116.252.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:27:c9:85:4c:8f:b3:a2:a9:b9:68:b4:d2:5a:67:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Oct 28 10:33:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b34d7421f28ec227af55f83a9078232dbae4dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:d7:74:a7:bf:0b:4f:fe:15:0f:3c:42:fe:
ee:fd:55:02:ab:81:5b:ac:0d:f4:c8:f1:ac:5a:1e:
1f:4c:fd:cd:85:5d:ae:e1:8c:b9:9a:c7:bd:bb:4b:
47:ad:f1:32:f0:36:e5:f9:4e:0b:58:22:39:6c:65:
68:ec:56:94:d9:c4:fb:fc:19:15:88:1d:0d:9e:6c:
0d:2f:cc:40:6d:19:78:12:35:9d:7d:ce:ea:0b:7b:
63:cb:0e:0d:fb:cd:68:7c:da:52:db:78:cf:76:82:
11:ad:03:b9:8d:fd:c5:56:27:33:23:b0:31:57:8a:
34:6f:22:87:ed:d6:42:2d:33:11:2b:d0:51:a7:e3:
9e:33:45:f4:37:e1:a8:a1:28:a7:20:52:2d:ba:14:
b4:a9:23:3f:28:70:c3:25:bf:87:0b:87:d3:03:93:
e4:cf:30:90:a9:40:46:17:7d:4f:e5:7c:44:61:5d:
eb:a0:77:08:d5:62:8b:fc:92:42:dd:dd:46:0e:28:
04:13:27:06:3c:6f:e9:83:cc:86:0e:75:af:1a:e7:
75:32:88:8a:7f:80:2e:1c:fa:2c:78:75:01:99:0f:
53:c1:04:5d:18:8e:05:db:f7:af:21:97:c9:a6:40:
3c:24:f5:12:2a:26:9f:a0:85:79:e7:58:57:00:e1:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:34:D7:42:1F:28:EC:22:7A:F5:5F:83:A9:07:82:32:DB:AE:4D:BA
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/izTXQh8o7CJ69V-DqQeCMtuuTbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.56.0/24
89.116.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:37:9d:ec:0d:84:8e:b6:41:8c:b8:09:8f:d4:6c:54:ff:27:
75:3a:d5:b4:99:e8:68:73:ef:cf:af:75:57:12:cf:57:66:cc:
d3:2c:83:d6:92:85:6f:fe:d1:a2:a3:2e:33:25:09:02:cc:b2:
5f:3f:19:18:f6:56:70:60:52:9d:c5:16:ae:24:65:0a:97:d8:
c7:01:0d:a3:26:22:95:cb:1d:c1:6e:b6:ab:2c:78:62:0b:d9:
58:68:e3:d8:38:1f:4e:43:fc:1c:42:b7:89:bc:82:d3:b9:cf:
32:5f:7b:cc:5c:44:a7:67:06:18:fd:0f:59:dd:3b:53:d9:cc:
42:48:c9:e3:1a:29:ff:b1:6d:b6:16:86:7e:eb:35:a6:80:57:
d0:e7:c7:1d:87:90:b4:8f:84:e1:00:f1:49:97:7c:ed:85:1f:
7e:6b:fc:53:07:38:8c:06:08:2e:dc:93:a4:58:93:eb:66:a7:
a5:91:ac:87:56:98:53:7d:bf:63:61:3a:bd:60:9d:62:fe:6c:
01:8e:91:d7:3b:65:82:fb:b0:86:71:33:d0:86:63:3e:62:e1:
d8:ee:68:b0:75:4e:e0:d4:76:7b:75:5d:ea:ee:dc:6b:c7:91:
5b:72:a1:72:2a:b1:45:c6:6d:fd:bd:8c:d2:88:57:58:b5:92:
55:05:46:90
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQeJ8mFTI+zoqm5aLTSWmdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNWI1M2RmYTgzMTYwOTNjMTcyYjQzMTU5MjJlZjE3ZTY1
ZjA1MWQwHhcNMjIxMDI4MTAzMzU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjM0ZDc0MjFmMjhlYzIyN2FmNTVmODNhOTA3ODIzMmRiYWU0ZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y3XdKe/C0/+FQ88Qv7u/VUCq4Fb
rA30yPGsWh4fTP3NhV2u4Yy5mse9u0tHrfEy8Dbl+U4LWCI5bGVo7FaU2cT7/BkV
iB0NnmwNL8xAbRl4EjWdfc7qC3tjyw4N+81ofNpS23jPdoIRrQO5jf3FViczI7Ax
V4o0byKH7dZCLTMRK9BRp+OeM0X0N+GooSinIFItuhS0qSM/KHDDJb+HC4fTA5Pk
zzCQqUBGF31P5XxEYV3roHcI1WKL/JJC3d1GDigEEycGPG/pg8yGDnWvGud1MoiK
f4AuHPoseHUBmQ9TwQRdGI4F2/evIZfJpkA8JPUSKiafoIV551hXAOHi5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIs010IfKOwievVfg6kHgjLbrk26MB8GA1UdIwQY
MBaAFPxbU9+oMWCTwXK0MVki7xfmXwUdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMt
MTRlZmM5ODI4NjdmLzEvaXpUWFFoOG83Q0o2OVYtRHFRZUNNdHV1VGJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC81ZDU2ZTUtODM4YS00M2YzLWI1MmMtMTRlZmM5ODI4Njdm
LzEvX0Z0VDM2Z3hZSlBCY3JReFdTTHZGLVpmQlIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWXQ4AwQA
WXT8MA0GCSqGSIb3DQEBCwUAA4IBAQAfN53sDYSOtkGMuAmP1GxU/yd1OtW0meho
c+/Pr3VXEs9XZszTLIPWkoVv/tGioy4zJQkCzLJfPxkY9lZwYFKdxRauJGUKl9jH
AQ2jJiKVyx3BbrarLHhiC9lYaOPYOB9OQ/wcQreJvILTuc8yX3vMXESnZwYY/Q9Z
3TtT2cxCSMnjGin/sW22FoZ+6zWmgFfQ58cdh5C0j4ThAPFJl3zthR9+a/xTBziM
Bggu3JOkWJPrZqelkayHVphTfb9jYTq9YJ1i/mwBjpHXO2WC+7CGcTPQhmM+YuHY
7miwdU7g1HZ7dV3q7txrx5FbcqFyKrFFxm39vYzSiFdYtZJVBUaQ
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:25 2023 by rpki-client on console.sobornost.net