Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/XgZ876fSi-3ucEBSf_vD_8YNbq0.roa
File: XgZ876fSi-3ucEBSf_vD_8YNbq0.roa (raw, json)
Hash identifier: jveD8rj7IXjkaI0S9J6LJHCIFbBROSsSx11TJdwje48=
Subject key identifier: 5E:06:7C:EF:A7:D2:8B:ED:EE:70:40:52:7F:FB:C3:FF:C6:0D:6E:AD
Certificate issuer: /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial: 01847A670E02BC40A3E49C819C49DF9231D3
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/XgZ876fSi-3ucEBSf_vD_8YNbq0.roa
Signing time: Tue 15 Nov 2022 08:28:04 +0000
ROA not before: Tue 15 Nov 2022 08:28:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203950
IP address blocks: 89.40.161.0/24 maxlen: 24
89.39.242.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
185.170.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:67:0e:02:bc:40:a3:e4:9c:81:9c:49:df:92:31:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Validity
Not Before: Nov 15 08:28:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e067cefa7d28bedee7040527ffbc3ffc60d6ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:30:78:9b:d0:55:08:3c:0d:b8:fe:ef:ea:e8:
36:de:b7:fe:f3:4e:dd:21:f5:32:8e:b1:8d:6d:b9:
40:cf:98:0e:58:a1:39:eb:f6:34:08:eb:63:c3:d5:
5f:83:31:01:98:cc:0d:3a:be:05:b7:34:5c:62:c3:
41:98:c1:72:93:6e:72:62:a6:1a:af:fd:61:58:f9:
55:4a:2d:e5:de:6f:0c:7b:3e:9b:39:c5:87:46:20:
21:e9:6f:ce:5a:ce:6f:ae:6a:11:23:0a:ea:f4:0b:
67:42:b4:c4:de:6a:4c:e8:2c:1a:3c:87:e1:83:d9:
84:51:c1:98:0c:1e:5f:a9:10:91:83:64:73:f2:2d:
05:a2:de:11:2d:3b:25:f5:a3:ff:ff:85:20:04:c5:
8a:78:07:aa:d3:e4:45:84:0f:79:94:f2:02:14:42:
bd:b4:65:0f:47:ed:07:8d:ad:21:51:71:a9:10:85:
62:d0:ac:4e:0a:ca:78:74:26:89:d9:ac:4d:2b:8e:
5a:46:64:13:b9:ca:4c:b6:99:e1:24:9d:b6:53:6e:
f2:0b:1c:14:75:26:eb:50:42:71:fa:8c:58:67:f5:
d9:20:40:1d:68:db:9e:69:82:07:26:52:5d:0d:a8:
d1:3c:6a:4c:fa:b5:91:fa:af:bb:f5:a5:a0:1d:d7:
f5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:06:7C:EF:A7:D2:8B:ED:EE:70:40:52:7F:FB:C3:FF:C6:0D:6E:AD
X509v3 Authority Key Identifier:
keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/XgZ876fSi-3ucEBSf_vD_8YNbq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.39.242.0/24
89.40.35.0/24
89.40.161.0/24
185.170.65.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e4:00:07:f9:ce:d9:5f:67:6c:63:45:45:73:91:f7:46:27:
f4:c8:3d:c1:32:25:24:b0:47:bb:ab:49:c1:0d:c9:cb:da:81:
eb:2b:4d:d9:94:a8:9a:b7:22:35:ff:8c:30:5f:fd:7e:1f:8c:
8c:a4:37:ea:ec:68:76:8e:fc:76:c0:ac:c6:b9:8e:d8:e3:18:
d0:80:ea:66:41:d9:8c:21:fa:6e:b7:9c:f8:33:14:e3:6a:02:
de:b7:70:7e:96:16:24:3c:9b:19:fc:58:dc:ff:da:2c:a8:d9:
a5:03:0d:dc:7f:c2:74:60:1d:fa:ed:9b:2e:1c:80:21:c7:35:
92:5a:9e:77:5e:ca:89:96:c1:0f:10:81:90:02:ae:1b:8f:45:
f4:a1:75:8f:ad:25:4e:fe:07:44:72:ba:ff:5b:0d:44:0f:a4:
22:99:fc:fa:c4:36:17:a5:20:7c:8b:1a:0c:24:07:d7:8c:99:
4c:6c:33:d8:a2:13:8d:cf:07:52:1e:e6:0e:aa:c0:95:69:55:
ff:16:f8:d6:4a:8b:ff:87:f6:b9:ff:9d:26:61:b0:c2:13:16:
b4:56:62:67:90:f9:e3:be:67:f8:f6:c4:a2:2d:50:83:65:26:
55:74:90:e1:a7:6d:72:ea:6f:0a:cd:03:9c:e2:83:64:5c:16:
08:42:c9:46
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYR6Zw4CvECj5JyBnEnfkjHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMmIyZDJmYThiY2Y1ZjgzNjIxMGI5ZjQ5MjExZWU2ZDA5
NGQwZDIwHhcNMjIxMTE1MDgyODA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTA2N2NlZmE3ZDI4YmVkZWU3MDQwNTI3ZmZiYzNmZmM2MGQ2ZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjB4m9BVCDwNuP7v6ug23rf+807d
IfUyjrGNbblAz5gOWKE56/Y0COtjw9VfgzEBmMwNOr4FtzRcYsNBmMFyk25yYqYa
r/1hWPlVSi3l3m8Mez6bOcWHRiAh6W/OWs5vrmoRIwrq9AtnQrTE3mpM6CwaPIfh
g9mEUcGYDB5fqRCRg2Rz8i0Fot4RLTsl9aP//4UgBMWKeAeq0+RFhA95lPICFEK9
tGUPR+0Hja0hUXGpEIVi0KxOCsp4dCaJ2axNK45aRmQTucpMtpnhJJ22U27yCxwU
dSbrUEJx+oxYZ/XZIEAdaNueaYIHJlJdDajRPGpM+rWR+q+79aWgHdf10QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFF4GfO+n0ovt7nBAUn/7w//GDW6tMB8GA1UdIwQY
MBaAFBIrLS+ovPX4NiELn0khHubQlNDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlzdEw2aTg5ZmcySVF1ZlNTRWU1dENVME5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kNTQ2MGUtMGRlMS00YTc0LTk1MWIt
M2U3N2Q1NjdjY2M4LzEvWGdaODc2ZlNpLTN1Y0VCU2ZfdkRfOFlOYnEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kNTQ2MGUtMGRlMS00YTc0LTk1MWItM2U3N2Q1NjdjY2M4
LzEvRWlzdEw2aTg5ZmcySVF1ZlNTRWU1dENVME5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWSfyAwQA
WSgjAwQAWSihAwQAuapBMA0GCSqGSIb3DQEBCwUAA4IBAQBf5AAH+c7ZX2dsY0VF
c5H3Rif0yD3BMiUksEe7q0nBDcnL2oHrK03ZlKiatyI1/4wwX/1+H4yMpDfq7Gh2
jvx2wKzGuY7Y4xjQgOpmQdmMIfput5z4MxTjagLet3B+lhYkPJsZ/Fjc/9osqNml
Aw3cf8J0YB367ZsuHIAhxzWSWp53XsqJlsEPEIGQAq4bj0X0oXWPrSVO/gdEcrr/
Ww1ED6Qimfz6xDYXpSB8ixoMJAfXjJlMbDPYohONzwdSHuYOqsCVaVX/FvjWSov/
h/a5/50mYbDCExa0VmJnkPnjvmf49sSiLVCDZSZVdJDhp21y6m8KzQOc4oNkXBYI
QslG
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:48 2023 by rpki-client on console-ams.rpki-client.org