Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/2_zD9_hi5Cf8hjR6FhD50LrclVo.roa
File: 2_zD9_hi5Cf8hjR6FhD50LrclVo.roa (raw, json)
Hash identifier: mQAy19Yug3uF1bhVuDYt/cdpLX6gHLUTxyDJsxcIsaY=
Subject key identifier: DB:FC:C3:F7:F8:62:E4:27:FC:86:34:7A:16:10:F9:D0:BA:DC:95:5A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 08537E50
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/2_zD9_hi5Cf8hjR6FhD50LrclVo.roa
Signing time: Sat 01 Jan 2022 00:51:25 +0000
ROA not before: Sat 01 Jan 2022 00:51:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 89.116.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139689552 (0x8537e50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jan 1 00:51:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbfcc3f7f862e427fc86347a1610f9d0badc955a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:07:ce:6d:b2:89:44:5e:03:69:be:50:8c:
55:22:fa:c1:01:9c:b6:ef:70:01:e4:86:df:5a:69:
f3:df:2f:d8:35:a8:42:0c:5a:a6:a7:14:fb:6a:1d:
ba:2c:39:20:30:11:13:55:81:10:da:a3:08:a7:17:
e0:46:af:18:a8:13:b0:0d:c5:fc:d9:01:25:d2:f9:
79:5c:78:05:a4:19:0f:bf:66:27:ed:32:6b:f3:33:
8f:d5:e2:b5:91:9c:e5:ab:0e:be:6e:2a:13:bf:7d:
7a:38:e8:35:45:df:44:18:1c:f1:64:d3:f3:80:01:
4f:4a:9a:26:ae:5f:00:87:d6:0a:0f:04:06:df:30:
42:39:21:1b:bb:0a:ec:2b:09:ca:c9:90:06:cc:d9:
23:ec:fb:af:32:8d:48:24:4c:32:e5:ff:da:12:2c:
23:a1:52:58:ac:29:b5:0b:5e:c8:30:f1:0a:bd:b5:
90:fe:c9:c8:a6:c4:40:25:c0:97:0c:ce:50:2a:51:
d8:c4:18:64:ca:82:a9:4a:2c:38:16:7a:b1:ac:f3:
c4:94:a1:e1:f4:0e:a8:45:4c:d2:0b:d2:a3:f5:0d:
ba:f1:18:5d:10:6f:e5:4f:19:b9:d6:82:25:e9:11:
f2:c1:8d:50:a0:a8:ca:8a:6c:30:e3:90:f1:f9:ed:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FC:C3:F7:F8:62:E4:27:FC:86:34:7A:16:10:F9:D0:BA:DC:95:5A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/2_zD9_hi5Cf8hjR6FhD50LrclVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.200.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:e3:c1:e7:f6:56:3d:81:3d:24:93:c5:8a:ae:c7:b3:8f:cf:
a1:b1:97:7c:d7:15:c4:25:70:a6:f0:2f:49:ca:53:50:4e:b7:
61:e3:f0:d5:7d:a6:73:00:75:f9:55:ed:72:82:c6:7c:b9:11:
9c:3e:ae:75:53:72:d1:64:68:f1:78:e4:62:e6:9e:49:cf:b2:
94:17:49:af:44:66:00:ec:0d:5b:c2:40:03:18:59:3e:4c:c9:
e9:4d:b2:fa:8f:d8:42:4d:1b:45:e1:e8:c9:49:36:96:4d:dc:
38:d5:6f:08:43:89:c1:41:82:18:e4:79:69:9b:96:bf:67:6c:
a8:ba:cf:85:ee:28:3e:d0:df:fd:8c:7a:10:30:6d:4f:fc:e1:
72:ae:d9:27:5a:3c:66:70:02:fc:f5:2e:a6:01:c9:7b:bf:ac:
51:1b:ff:ac:85:fa:dd:93:3f:6d:b0:0f:0a:fe:2c:e4:2f:52:
30:58:67:c7:8c:b9:ed:a8:45:09:f0:72:1c:c8:25:d3:29:ac:
ac:fe:7b:ed:38:8c:ab:4b:40:59:da:af:5a:dc:47:25:fe:ec:
e9:20:cf:68:5f:11:b7:59:77:4f:ab:20:b5:8b:37:2f:5d:56:
d4:47:d0:08:57:99:9d:db:18:6b:4b:d0:56:8a:22:d2:81:a7:
a0:6f:eb:7a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECFN+UDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDEw
MTAwNTEyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGJmY2MzZjdmODYy
ZTQyN2ZjODYzNDdhMTYxMGY5ZDBiYWRjOTU1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKDFB85tsolEXgNpvlCMVSL6wQGctu9wAeSG31pp898v2DWo
QgxapqcU+2oduiw5IDARE1WBENqjCKcX4EavGKgTsA3F/NkBJdL5eVx4BaQZD79m
J+0ya/Mzj9XitZGc5asOvm4qE799ejjoNUXfRBgc8WTT84ABT0qaJq5fAIfWCg8E
Bt8wQjkhG7sK7CsJysmQBszZI+z7rzKNSCRMMuX/2hIsI6FSWKwptQteyDDxCr21
kP7JyKbEQCXAlwzOUCpR2MQYZMqCqUosOBZ6sazzxJSh4fQOqEVM0gvSo/UNuvEY
XRBv5U8ZudaCJekR8sGNUKCoyopsMOOQ8fntJ7MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTb/MP3+GLkJ/yGNHoWEPnQutyVWjAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
LzJfekQ5X2hpNUNmOGhqUjZGaEQ1MExyY2xWby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0yDANBgkqhkiG9w0BAQsFAAOC
AQEAwePB5/ZWPYE9JJPFiq7Hs4/PobGXfNcVxCVwpvAvScpTUE63YePw1X2mcwB1
+VXtcoLGfLkRnD6udVNy0WRo8XjkYuaeSc+ylBdJr0RmAOwNW8JAAxhZPkzJ6U2y
+o/YQk0bReHoyUk2lk3cONVvCEOJwUGCGOR5aZuWv2dsqLrPhe4oPtDf/Yx6EDBt
T/zhcq7ZJ1o8ZnAC/PUupgHJe7+sURv/rIX63ZM/bbAPCv4s5C9SMFhnx4y57ahF
CfByHMgl0ymsrP577TiMq0tAWdqvWtxHJf7s6SDPaF8Rt1l3T6sgtYs3L11W1EfQ
CFeZndsYa0vQVooi0oGnoG/reg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org