Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/0fHbFzE9YzKarWhcToQp-9HSDoI.roa
File: 0fHbFzE9YzKarWhcToQp-9HSDoI.roa (raw, json)
Hash identifier: N2jmsg1h7kvXDRjFNPk0XdJUXFRiKPgwsrzXCr65K+o=
Subject key identifier: D1:F1:DB:17:31:3D:63:32:9A:AD:68:5C:4E:84:29:FB:D1:D2:0E:82
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 098D36A7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/0fHbFzE9YzKarWhcToQp-9HSDoI.roa
Signing time: Mon 14 Feb 2022 11:01:58 +0000
ROA not before: Mon 14 Feb 2022 11:01:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 89.116.224.0/21 maxlen: 24
89.116.80.0/21 maxlen: 24
84.46.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160249511 (0x98d36a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 14 11:01:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1f1db17313d63329aad685c4e8429fbd1d20e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f9:2c:a2:70:39:65:4d:cf:18:7c:9d:8e:a0:
e4:35:c4:df:01:2f:cc:67:72:d7:eb:da:20:f8:cd:
76:49:cc:01:b5:18:e8:93:24:e5:b4:d8:c1:39:76:
31:ea:6b:d1:03:46:f5:4c:1a:25:36:da:64:ba:56:
c7:8c:cd:b6:e8:38:48:69:e9:3f:67:33:ff:a5:54:
d2:13:cc:53:e9:91:9b:38:75:7d:2d:f4:08:42:02:
f2:ec:2e:7c:5d:de:91:92:20:1c:8b:5b:80:ed:ff:
b3:12:04:fe:b5:45:29:d9:ee:02:2b:46:fd:a9:c8:
93:46:57:d4:d1:28:4e:ab:cf:d3:ac:06:c3:0f:11:
b7:bf:25:17:28:e4:72:74:bf:0b:87:bd:49:30:b0:
d7:dd:cb:a4:f7:81:ea:58:6c:87:3b:6e:82:2f:e0:
61:a9:e8:3b:80:07:0c:e8:33:a2:eb:1d:fd:db:fd:
4b:68:04:4a:93:ca:41:8b:72:5b:be:cc:a8:28:ff:
1d:71:cc:42:9c:a2:80:dc:6d:23:a1:5d:57:8c:40:
38:6b:ee:ca:b0:bc:fc:fd:42:18:09:b2:69:d2:7d:
47:eb:a0:b2:00:fb:1f:ec:5f:6e:c4:74:a3:61:10:
77:dc:69:c7:7a:50:d6:30:a3:07:20:8b:31:12:55:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:DB:17:31:3D:63:32:9A:AD:68:5C:4E:84:29:FB:D1:D2:0E:82
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/0fHbFzE9YzKarWhcToQp-9HSDoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
89.116.80.0/21
89.116.224.0/21
Signature Algorithm: sha256WithRSAEncryption
77:31:62:6f:35:bc:bc:14:ad:57:dd:b6:60:9b:40:7f:58:e4:
0f:f6:74:cc:fa:b3:ad:c4:1f:8d:97:a5:0d:e1:76:9f:85:79:
16:1e:b4:be:f7:55:a5:34:d7:57:8d:27:26:3d:1f:ea:41:91:
d3:81:ad:04:32:3d:45:42:68:aa:dc:2e:b3:86:b5:89:ef:c7:
b4:20:e1:45:cf:5d:75:19:b9:e0:ee:2f:8c:ab:cf:9e:19:bb:
9c:2b:fd:04:95:4f:56:a2:fc:c2:59:18:c0:59:da:a1:8b:0f:
45:1b:bc:a0:64:43:33:66:30:15:e9:55:f4:1e:82:2e:d8:49:
da:2d:fe:c5:eb:d5:40:6b:bf:55:7c:87:4c:1d:54:7c:f9:b2:
bb:29:64:3f:61:99:db:d2:fa:d2:af:aa:85:41:35:7a:3b:25:
79:b5:a2:2e:f1:58:0d:c1:9a:8a:28:ab:87:2e:6b:07:ed:32:
41:af:59:7d:36:44:df:b0:6a:f1:5d:68:b4:6e:5b:79:26:6b:
99:bc:70:67:24:12:16:80:4f:b5:77:7a:91:58:79:76:11:5e:
8a:ac:ea:81:4f:8f:b8:13:d0:ea:9a:3f:87:1e:f1:64:90:b4:
52:81:04:e4:92:4b:a7:26:cf:4c:92:99:e9:46:63:69:c8:10:
e0:45:26:39
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECY02pzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDIx
NDExMDE1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDFmMWRiMTczMTNk
NjMzMjlhYWQ2ODVjNGU4NDI5ZmJkMWQyMGU4MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIr5LKJwOWVNzxh8nY6g5DXE3wEvzGdy1+vaIPjNdknMAbUY
6JMk5bTYwTl2Mepr0QNG9UwaJTbaZLpWx4zNtug4SGnpP2cz/6VU0hPMU+mRmzh1
fS30CEIC8uwufF3ekZIgHItbgO3/sxIE/rVFKdnuAitG/anIk0ZX1NEoTqvP06wG
ww8Rt78lFyjkcnS/C4e9STCw193LpPeB6lhshztugi/gYanoO4AHDOgzousd/dv9
S2gESpPKQYtyW77MqCj/HXHMQpyigNxtI6FdV4xAOGvuyrC8/P1CGAmyadJ9R+ug
sgD7H+xfbsR0o2EQd9xpx3pQ1jCjByCLMRJV5/UCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTR8dsXMT1jMpqtaFxOhCn70dIOgjAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
LzBmSGJGekU5WXpLYXJXaGNUb1FwLTlIU0RvSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAlQu7AMEA1l0UAMEA1l04DANBgkq
hkiG9w0BAQsFAAOCAQEAdzFibzW8vBStV922YJtAf1jkD/Z0zPqzrcQfjZelDeF2
n4V5Fh60vvdVpTTXV40nJj0f6kGR04GtBDI9RUJoqtwus4a1ie/HtCDhRc9ddRm5
4O4vjKvPnhm7nCv9BJVPVqL8wlkYwFnaoYsPRRu8oGRDM2YwFelV9B6CLthJ2i3+
xevVQGu/VXyHTB1UfPmyuylkP2GZ29L60q+qhUE1ejslebWiLvFYDcGaiiirhy5r
B+0yQa9ZfTZE37Bq8V1otG5beSZrmbxwZyQSFoBPtXd6kVh5dhFeiqzqgU+PuBPQ
6po/hx7xZJC0UoEE5JJLpybPTJKZ6UZjacgQ4EUmOQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:17 2023 by rpki-client on console-ams.rpki-client.org