Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/47cdqT1oO-DgWsMmdcyNIYfGQ00.roa
File: 47cdqT1oO-DgWsMmdcyNIYfGQ00.roa (raw, json)
Hash identifier: jcUhMgYyX3rejNG9jqBHxGPsqCgpTlqP35PW03XfyhM=
Subject key identifier: E3:B7:1D:A9:3D:68:3B:E0:E0:5A:C3:26:75:CC:8D:21:87:C6:43:4D
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182EEBB3B51E23DA3E36456E5D9BB15C07A
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/47cdqT1oO-DgWsMmdcyNIYfGQ00.roa
Signing time: Tue 30 Aug 2022 12:30:24 +0000
ROA not before: Tue 30 Aug 2022 12:30:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142430
IP address blocks: 89.117.254.0/24 maxlen: 24
89.116.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:bb:3b:51:e2:3d:a3:e3:64:56:e5:d9:bb:15:c0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 30 12:30:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3b71da93d683be0e05ac32675cc8d2187c6434d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:6f:bd:25:b9:ff:67:12:d8:2b:94:2a:32:
4e:0c:79:41:04:63:e2:21:bf:a0:04:af:0f:16:1e:
af:a9:28:b8:bd:68:60:30:b4:6a:ef:42:9a:f9:32:
62:09:22:10:19:08:ec:1c:fd:91:97:d5:bb:a8:77:
c5:19:1e:03:4a:f7:9a:1c:8a:16:90:e8:14:09:0c:
ba:e2:df:55:3b:f3:9e:de:0e:ec:39:0f:e9:46:90:
db:5f:5d:18:e7:90:b5:59:47:bd:a0:c5:e7:88:0e:
13:6b:f6:18:4c:6a:0d:f1:d2:9c:03:a2:8d:5f:e8:
d0:11:27:20:fb:88:7d:23:74:f4:8a:68:12:61:29:
39:60:6f:4c:5c:83:bd:af:24:35:1a:89:74:02:ec:
3e:cc:54:2c:2a:8c:48:45:cb:47:cb:ac:6c:a4:c8:
a0:da:72:54:d8:b8:d3:a0:dc:e1:d4:8c:5a:a5:02:
15:bb:cf:1f:de:e7:e1:6d:4d:e4:6e:da:d4:f3:95:
ab:0b:7b:5e:9c:85:1b:fd:a2:bd:30:61:a6:e2:aa:
70:c0:fb:4f:e8:c3:8a:bb:a7:96:cd:1b:dd:f1:ef:
75:8c:4d:cc:8d:41:fe:ec:c2:db:72:73:65:15:04:
a2:82:56:71:e8:81:61:4a:10:c0:f8:a0:65:98:50:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B7:1D:A9:3D:68:3B:E0:E0:5A:C3:26:75:CC:8D:21:87:C6:43:4D
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/47cdqT1oO-DgWsMmdcyNIYfGQ00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.92.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
15:64:73:98:d9:98:7d:31:ac:16:49:35:ed:48:57:f1:87:bd:
28:8e:e3:fd:0c:61:a3:53:4c:1e:e9:7e:e6:95:91:93:a3:a9:
81:3b:41:fc:26:2b:ff:0e:17:47:5d:1c:59:27:b0:bc:1d:8a:
f0:0d:f1:3a:1a:58:55:73:d7:88:1c:0c:12:d1:8c:d9:76:84:
b4:f6:fa:47:46:a5:80:be:ab:65:74:9e:4b:dc:44:3c:08:00:
7c:77:c7:5a:66:6a:31:67:68:56:ec:ce:ef:ab:27:73:5e:4c:
25:82:00:20:e5:b9:0e:51:b4:40:23:1e:89:f1:ff:9d:78:5f:
eb:66:96:dc:13:04:a8:c7:83:33:32:48:65:0e:7f:3f:a8:c0:
46:0a:a0:dc:22:ea:d1:6d:c5:74:95:76:b0:28:d4:c9:1e:64:
e6:03:72:d4:df:a1:b7:74:42:01:f3:f0:b0:a9:c7:bc:97:5c:
7e:60:e3:71:93:48:02:52:30:a3:65:aa:0f:5a:3b:d1:ff:89:
2b:76:8f:64:51:01:23:45:ef:1f:6f:9a:29:ea:e8:a9:71:06:
a5:c1:45:6a:c8:03:9e:2c:3e:ca:68:e0:47:ae:2f:7a:fa:02:
4b:46:a9:cd:d1:b6:e9:0e:c3:51:59:64:d7:f1:ef:14:49:33:
10:c8:e8:60
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYLuuztR4j2j42RW5dm7FcB6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODMwMTIzMDI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2I3MWRhOTNkNjgzYmUwZTA1YWMzMjY3NWNjOGQyMTg3YzY0MzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCdvvSW5/2cS2CuUKjJODHlBBGPi
Ib+gBK8PFh6vqSi4vWhgMLRq70Ka+TJiCSIQGQjsHP2Rl9W7qHfFGR4DSveaHIoW
kOgUCQy64t9VO/Oe3g7sOQ/pRpDbX10Y55C1WUe9oMXniA4Ta/YYTGoN8dKcA6KN
X+jQEScg+4h9I3T0imgSYSk5YG9MXIO9ryQ1Gol0Auw+zFQsKoxIRctHy6xspMig
2nJU2LjToNzh1IxapQIVu88f3ufhbU3kbtrU85WrC3tenIUb/aK9MGGm4qpwwPtP
6MOKu6eWzRvd8e91jE3MjUH+7MLbcnNlFQSiglZx6IFhShDA+KBlmFCqvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOO3Hak9aDvg4FrDJnXMjSGHxkNNMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvNDdjZHFUMW9PLURnV3NNbWRjeU5JWWZHUTAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWXRcAwQA
WXX+MA0GCSqGSIb3DQEBCwUAA4IBAQAVZHOY2Zh9MawWSTXtSFfxh70ojuP9DGGj
U0we6X7mlZGTo6mBO0H8Jiv/DhdHXRxZJ7C8HYrwDfE6GlhVc9eIHAwS0YzZdoS0
9vpHRqWAvqtldJ5L3EQ8CAB8d8daZmoxZ2hW7M7vqydzXkwlggAg5bkOUbRAIx6J
8f+deF/rZpbcEwSox4MzMkhlDn8/qMBGCqDcIurRbcV0lXawKNTJHmTmA3LU36G3
dEIB8/Cwqce8l1x+YONxk0gCUjCjZaoPWjvR/4krdo9kUQEjRe8fb5op6uipcQal
wUVqyAOeLD7KaOBHri96+gJLRqnN0bbpDsNRWWTX8e8USTMQyOhg
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:31 2025 by rpki-client