Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/xrVmAFGr-KUbq6bOdF65_AG16pg.roa
File: xrVmAFGr-KUbq6bOdF65_AG16pg.roa (raw, json)
Hash identifier: ukJQJfmXjAYuSuIaUEInSQwPOZkEykIMiQKwkyZPVRA=
Subject key identifier: C6:B5:66:00:51:AB:F8:A5:1B:AB:A6:CE:74:5E:B9:FC:01:B5:EA:98
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184060E018082D02007218BB6283FBE5606
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/xrVmAFGr-KUbq6bOdF65_AG16pg.roa
Signing time: Sun 23 Oct 2022 18:14:51 +0000
ROA not before: Sun 23 Oct 2022 18:14:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 152.89.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:06:0e:01:80:82:d0:20:07:21:8b:b6:28:3f:be:56:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 23 18:14:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6b5660051abf8a51baba6ce745eb9fc01b5ea98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:1f:f5:43:88:66:12:0c:6f:f1:14:4d:d2:
e6:21:9e:63:72:c5:72:c1:4a:ef:af:a7:1a:c9:5b:
4d:10:84:7b:8d:90:cf:51:d3:96:62:a0:e0:24:47:
71:d2:28:9c:8c:f2:4c:f6:40:81:56:c7:01:38:07:
d2:33:49:4f:82:4f:a3:95:8a:26:82:96:b9:83:86:
32:1a:c5:45:ed:80:b2:ba:ac:0d:8a:f5:80:b4:21:
87:6a:90:53:0a:02:6d:50:a1:87:40:26:64:59:44:
cc:e4:29:41:4f:9e:d8:0d:03:68:85:c7:05:c2:bc:
e2:fd:55:d8:fa:d6:29:0e:d8:12:e0:3d:4a:e1:a2:
a7:6d:63:00:51:32:53:5c:d3:43:2a:a2:0b:a4:9b:
d2:7d:0a:e3:7a:1d:4a:3f:c9:9e:ac:4e:b2:5b:50:
f4:6c:08:85:f9:73:2c:aa:5d:5b:32:c4:dd:94:93:
04:24:ad:20:ab:6d:ad:5b:2d:c3:07:53:37:75:ac:
10:4f:80:00:21:d5:d9:c2:a8:68:74:e9:f8:b4:1a:
cc:3d:86:2c:58:5a:6d:d7:a9:15:ef:be:33:56:57:
7f:55:cb:a7:b6:d0:56:d4:f5:09:3a:38:b5:a7:9e:
fb:5b:6a:8f:00:5d:de:3f:20:27:13:20:85:82:8e:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B5:66:00:51:AB:F8:A5:1B:AB:A6:CE:74:5E:B9:FC:01:B5:EA:98
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/xrVmAFGr-KUbq6bOdF65_AG16pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.249.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e5:de:da:86:94:e9:32:2b:3a:a7:41:4d:32:47:7f:20:d8:
54:16:83:f9:7d:b4:02:0b:9a:7e:3b:a5:29:d6:ad:e9:09:99:
5c:17:38:38:1d:82:3f:12:58:cc:ad:80:55:25:26:c9:60:77:
d8:85:66:74:91:9e:8b:43:86:6e:f3:98:64:e0:b3:20:01:a5:
23:dd:c3:3f:e4:3b:a6:11:69:c6:86:f5:10:c1:1c:6e:46:24:
df:c2:38:1b:aa:e4:51:9d:46:0f:ec:59:e3:1c:c2:b9:26:55:
91:b6:79:d3:8b:b6:69:29:4c:81:fe:37:46:c4:7c:71:8e:bb:
b2:38:fc:62:5e:3a:3a:23:a5:fb:9b:cc:81:1c:ac:24:69:d2:
e1:47:ca:d4:71:9e:97:d1:6d:1b:7e:ee:dd:5f:21:ef:57:22:
cc:ec:cf:dd:0e:c1:06:19:f8:e3:c7:13:6e:48:0a:12:77:07:
96:3c:f7:f5:7b:ee:0a:99:4f:d6:5c:b0:ac:cb:da:82:f3:9f:
7b:c2:f8:e7:eb:ee:43:5a:bc:7f:df:f2:11:fb:91:78:c8:a3:
df:d6:76:72:7a:4c:32:a7:10:bb:4a:a2:74:32:bd:da:5d:18:
92:bf:dc:21:5d:82:39:98:36:0f:1c:2b:b1:25:54:f4:05:1e:
37:e1:59:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQGDgGAgtAgByGLtig/vlYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMDIzMTgxNDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmI1NjYwMDUxYWJmOGE1MWJhYmE2Y2U3NDVlYjlmYzAxYjVlYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XMf9UOIZhIMb/EUTdLmIZ5jcsVy
wUrvr6cayVtNEIR7jZDPUdOWYqDgJEdx0iicjPJM9kCBVscBOAfSM0lPgk+jlYom
gpa5g4YyGsVF7YCyuqwNivWAtCGHapBTCgJtUKGHQCZkWUTM5ClBT57YDQNohccF
wrzi/VXY+tYpDtgS4D1K4aKnbWMAUTJTXNNDKqILpJvSfQrjeh1KP8merE6yW1D0
bAiF+XMsql1bMsTdlJMEJK0gq22tWy3DB1M3dawQT4AAIdXZwqhodOn4tBrMPYYs
WFpt16kV774zVld/VcunttBW1PUJOji1p577W2qPAF3ePyAnEyCFgo7r5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMa1ZgBRq/ilG6umznReufwBteqYMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEveHJWbUFGR3ItS1VicTZiT2RGNjVfQUcxNnBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFn5MA0G
CSqGSIb3DQEBCwUAA4IBAQBh5d7ahpTpMis6p0FNMkd/INhUFoP5fbQCC5p+O6Up
1q3pCZlcFzg4HYI/EljMrYBVJSbJYHfYhWZ0kZ6LQ4Zu85hk4LMgAaUj3cM/5Dum
EWnGhvUQwRxuRiTfwjgbquRRnUYP7FnjHMK5JlWRtnnTi7ZpKUyB/jdGxHxxjruy
OPxiXjo6I6X7m8yBHKwkadLhR8rUcZ6X0W0bfu7dXyHvVyLM7M/dDsEGGfjjxxNu
SAoSdweWPPf1e+4KmU/WXLCsy9qC8597wvjn6+5DWrx/3/IR+5F4yKPf1nZyekwy
pxC7SqJ0Mr3aXRiSv9whXYI5mDYPHCuxJVT0BR434VkI
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org