Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/JLjZmEz2I3WSzf6P0G5oF1okXZw.roa
File: JLjZmEz2I3WSzf6P0G5oF1okXZw.roa (raw, json)
Hash identifier: jOIz0BUvf+IdEdUkpUcEefk68LWuNYZOie4lVvKHIWk=
Subject key identifier: 24:B8:D9:98:4C:F6:23:75:92:CD:FE:8F:D0:6E:68:17:5A:24:5D:9C
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0184065D3C99C41F364816A4372739955963
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/JLjZmEz2I3WSzf6P0G5oF1okXZw.roa
Signing time: Sun 23 Oct 2022 19:41:24 +0000
ROA not before: Sun 23 Oct 2022 19:41:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 89.116.108.0/24 maxlen: 24
89.117.188.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:06:5d:3c:99:c4:1f:36:48:16:a4:37:27:39:95:59:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 23 19:41:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24b8d9984cf6237592cdfe8fd06e68175a245d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:6e:9f:1e:11:80:b3:11:7a:bd:65:46:ec:
c7:01:02:73:7b:7d:e8:32:ad:c2:4f:b0:ad:93:1d:
0c:15:b2:08:fa:f0:d3:70:17:0e:e6:c1:97:55:dc:
7b:3e:95:dd:69:82:de:8b:9e:7f:43:3f:a5:45:21:
8b:fe:8b:10:f9:cd:98:25:ca:2e:d6:08:50:23:d5:
3a:24:a1:4c:9b:ee:3c:6f:a0:29:b0:7b:33:94:80:
0d:02:8d:1d:3b:36:2a:e5:22:ab:f7:d7:76:6e:7d:
9c:7a:4d:d5:4e:f9:b9:b1:9d:f1:9d:f1:3e:4d:65:
62:49:4a:4c:fb:67:e6:ee:f5:f7:e2:45:b4:72:8a:
8d:c7:34:47:d2:32:77:db:4a:e0:0a:13:fb:c5:11:
b6:c2:5d:c5:2e:b5:5f:ad:ce:e2:84:1c:94:85:e0:
f6:56:60:f6:ba:81:08:8c:06:ed:f6:fb:e8:99:71:
23:13:75:e5:b7:08:18:01:78:25:60:9b:6b:93:fe:
92:fb:1f:a8:8d:0b:ce:de:c5:ff:f0:6c:5d:11:b2:
39:37:04:54:dc:d8:b8:3e:26:13:6f:f3:e5:a7:0c:
30:49:9d:db:14:e5:d4:7f:cb:54:cc:c0:b8:cb:a3:
55:4e:f0:15:b8:37:65:05:eb:ac:97:85:7b:a5:48:
8a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:D9:98:4C:F6:23:75:92:CD:FE:8F:D0:6E:68:17:5A:24:5D:9C
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/JLjZmEz2I3WSzf6P0G5oF1okXZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.108.0/24
89.116.128.0/24
89.116.153.0-89.116.154.255
89.116.190.0/24
89.117.139.0/24
89.117.188.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:5c:79:01:5d:f7:7a:c1:56:36:da:0a:d8:53:00:af:54:6b:
ec:d8:bb:44:6c:95:87:87:aa:f0:55:92:1a:eb:16:e3:fa:1d:
79:10:14:ab:dc:cc:47:f9:0f:47:67:a1:82:fd:b5:66:52:d9:
5a:97:ea:58:73:12:ca:7c:6a:88:55:40:89:96:b3:7a:ae:92:
21:b4:a7:98:17:60:98:50:c2:c4:37:d6:c5:9b:34:64:4c:69:
c2:0c:63:70:be:58:53:13:f5:f5:09:da:ad:de:cf:02:b0:5c:
7a:0a:a0:66:fa:d1:1a:38:aa:2a:d4:75:93:26:f5:4f:2c:8c:
96:be:9b:8f:2a:28:69:fc:24:87:11:f3:79:42:24:0c:93:e6:
55:32:eb:dc:7f:1e:64:f8:3e:10:62:11:ea:a4:f7:1a:73:5e:
f6:89:64:9c:36:8e:ec:a7:f7:33:ed:26:87:d6:28:b1:25:96:
b0:69:1b:ca:15:fe:bd:95:ed:b0:c8:43:e0:8c:ff:66:e6:7a:
c3:94:4d:8b:24:49:c3:7e:ce:75:51:43:23:06:5a:bf:bc:10:
c1:6c:36:31:46:f7:7b:e5:55:f1:e8:40:7e:f6:3b:12:54:48:
6d:30:61:e8:ac:1b:95:b4:ac:ab:a4:65:a7:7a:85:c6:87:db:
a2:bb:02:20
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYQGXTyZxB82SBakNyc5lVljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIxMDIzMTk0MTI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGI4ZDk5ODRjZjYyMzc1OTJjZGZlOGZkMDZlNjgxNzVhMjQ1ZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7Runx4RgLMRer1lRuzHAQJze33o
Mq3CT7Ctkx0MFbII+vDTcBcO5sGXVdx7PpXdaYLei55/Qz+lRSGL/osQ+c2YJcou
1ghQI9U6JKFMm+48b6ApsHszlIANAo0dOzYq5SKr99d2bn2cek3VTvm5sZ3xnfE+
TWViSUpM+2fm7vX34kW0coqNxzRH0jJ320rgChP7xRG2wl3FLrVfrc7ihByUheD2
VmD2uoEIjAbt9vvomXEjE3XltwgYAXglYJtrk/6S+x+ojQvO3sX/8GxdEbI5NwRU
3Ni4PiYTb/PlpwwwSZ3bFOXUf8tUzMC4y6NVTvAVuDdlBeusl4V7pUiKEwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFCS42ZhM9iN1ks3+j9BuaBdaJF2cMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvSkxqWm1FejJJM1dTemY2UDBHNW9GMW9rWFp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAWXRsAwQA
WXSAMAwDBABZdJkDBABZdJoDBABZdL4DBABZdYsDBABZdbwwDQYJKoZIhvcNAQEL
BQADggEBAL9ceQFd93rBVjbaCthTAK9Ua+zYu0RslYeHqvBVkhrrFuP6HXkQFKvc
zEf5D0dnoYL9tWZS2VqX6lhzEsp8aohVQImWs3qukiG0p5gXYJhQwsQ31sWbNGRM
acIMY3C+WFMT9fUJ2q3ezwKwXHoKoGb60Ro4qirUdZMm9U8sjJa+m48qKGn8JIcR
83lCJAyT5lUy69x/HmT4PhBiEeqk9xpzXvaJZJw2juyn9zPtJofWKLEllrBpG8oV
/r2V7bDIQ+CM/2bmesOUTYskScN+znVRQyMGWr+8EMFsNjFG93vlVfHoQH72OxJU
SG0wYeisG5W0rKukZad6hcaH26K7AiA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org