Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/DI3fEzywvtYhBr1GbMmlrsCr0nQ.roa
File: DI3fEzywvtYhBr1GbMmlrsCr0nQ.roa (raw, json)
Hash identifier: iMmRLqHaHYB+dDV+FeJ3ra7GQwyfvobb5u/33xEizIk=
Subject key identifier: 0C:8D:DF:13:3C:B0:BE:D6:21:06:BD:46:6C:C9:A5:AE:C0:AB:D2:74
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01835AD8F2A9C668E6A7251E0D1EC18644A7
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/DI3fEzywvtYhBr1GbMmlrsCr0nQ.roa
Signing time: Tue 20 Sep 2022 12:21:50 +0000
ROA not before: Tue 20 Sep 2022 12:21:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 89.116.172.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5a:d8:f2:a9:c6:68:e6:a7:25:1e:0d:1e:c1:86:44:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 20 12:21:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c8ddf133cb0bed62106bd466cc9a5aec0abd274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:bc:a7:9f:b5:d7:66:fd:e8:8a:56:e5:c2:
5a:ee:40:3d:05:39:d4:16:a8:3a:f9:f0:ed:2f:35:
70:e5:24:ae:e6:24:8d:bd:b7:81:80:26:e0:1a:0b:
e4:69:b7:78:bc:9a:53:49:52:0d:ee:98:dc:85:2c:
76:c5:5a:26:7c:57:3a:8f:ce:fd:51:39:5e:a3:89:
39:23:54:cb:33:1f:e0:d4:ae:0b:34:c0:8c:79:fe:
21:56:c0:8c:e6:23:ef:22:00:1b:29:c9:49:63:46:
cb:ef:9c:63:54:cc:c0:36:0e:ac:59:c2:bf:ba:09:
36:f8:13:b6:18:b4:93:51:a7:63:05:fb:e0:ec:16:
82:6d:82:d5:91:b4:e2:cb:ff:28:60:f9:5e:2f:63:
ee:84:94:20:93:19:1c:fa:9c:e1:64:64:77:d7:a3:
57:19:ff:5b:49:b2:95:bb:38:55:6a:86:2d:76:8e:
0c:35:f4:ee:de:29:52:51:4d:dc:1f:a1:77:80:fa:
26:d7:74:d0:7c:9d:57:b4:a0:64:80:86:72:26:75:
36:e1:12:54:f0:99:36:f5:fa:5b:1b:9c:47:47:64:
46:a8:b2:f7:0f:26:a2:bb:94:80:91:a3:b2:43:70:
76:a2:73:d8:70:08:59:2e:3a:eb:78:a5:21:86:df:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8D:DF:13:3C:B0:BE:D6:21:06:BD:46:6C:C9:A5:AE:C0:AB:D2:74
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/DI3fEzywvtYhBr1GbMmlrsCr0nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.172.0/23
Signature Algorithm: sha256WithRSAEncryption
c6:55:1a:f1:d1:8a:01:58:cc:94:8c:1d:73:04:2a:27:11:6c:
06:08:72:bd:06:24:be:f3:7f:55:ed:44:3c:b6:45:1b:f4:12:
3b:2d:2c:be:21:0e:5a:84:ba:10:15:20:79:15:28:fb:0c:eb:
8a:9e:84:ca:3f:ed:f5:99:47:6c:b7:72:89:a5:1f:a9:53:1c:
a5:e2:08:d4:69:8f:96:1c:e1:22:86:ef:46:46:ed:b8:6b:34:
32:4d:b3:8a:86:4e:50:49:74:c2:3b:0d:cb:29:b5:19:7d:bb:
f8:8d:79:c3:67:21:a0:9a:64:bd:ac:f3:ef:fa:d3:43:b2:a6:
d0:54:8a:0e:56:06:fd:11:5c:14:fb:81:30:5f:92:fa:fb:74:
0f:25:23:3c:fc:ac:df:02:4a:8c:14:64:19:fc:40:ae:51:26:
f8:c7:15:95:65:4d:e8:87:4a:95:cf:cc:e9:21:85:4b:fb:3e:
9e:0d:fc:2f:24:2c:06:cc:c6:6f:af:b4:6b:0d:2f:15:69:98:
3c:7a:56:fe:82:b0:e6:95:1b:08:ea:a4:d0:5f:5f:95:5b:59:
06:cc:95:e5:2d:54:fa:b1:46:ae:80:92:8f:fe:29:93:39:cf:
fa:f5:e6:62:48:e6:22:da:17:b6:72:b1:56:e4:f7:b2:4b:6d:
77:a3:3e:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNa2PKpxmjmpyUeDR7BhkSnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwOTIwMTIyMTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzhkZGYxMzNjYjBiZWQ2MjEwNmJkNDY2Y2M5YTVhZWMwYWJkMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1e8p5+112b96IpW5cJa7kA9BTnU
Fqg6+fDtLzVw5SSu5iSNvbeBgCbgGgvkabd4vJpTSVIN7pjchSx2xVomfFc6j879
UTleo4k5I1TLMx/g1K4LNMCMef4hVsCM5iPvIgAbKclJY0bL75xjVMzANg6sWcK/
ugk2+BO2GLSTUadjBfvg7BaCbYLVkbTiy/8oYPleL2PuhJQgkxkc+pzhZGR316NX
Gf9bSbKVuzhVaoYtdo4MNfTu3ilSUU3cH6F3gPom13TQfJ1XtKBkgIZyJnU24RJU
8Jk29fpbG5xHR2RGqLL3Dyaiu5SAkaOyQ3B2onPYcAhZLjrreKUhht/9xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAyN3xM8sL7WIQa9RmzJpa7Aq9J0MB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvREkzZkV6eXd2dFloQnIxR2JNbWxyc0NyMG5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWXSsMA0G
CSqGSIb3DQEBCwUAA4IBAQDGVRrx0YoBWMyUjB1zBConEWwGCHK9BiS+839V7UQ8
tkUb9BI7LSy+IQ5ahLoQFSB5FSj7DOuKnoTKP+31mUdst3KJpR+pUxyl4gjUaY+W
HOEihu9GRu24azQyTbOKhk5QSXTCOw3LKbUZfbv4jXnDZyGgmmS9rPPv+tNDsqbQ
VIoOVgb9EVwU+4EwX5L6+3QPJSM8/KzfAkqMFGQZ/ECuUSb4xxWVZU3oh0qVz8zp
IYVL+z6eDfwvJCwGzMZvr7RrDS8VaZg8elb+grDmlRsI6qTQX1+VW1kGzJXlLVT6
sUaugJKP/imTOc/69eZiSOYi2he2crFW5PeyS213oz7h
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:58 2025 by rpki-client