Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/K-lW1YYsxYwEcNBlMB3ifvlANDk.roa
File: K-lW1YYsxYwEcNBlMB3ifvlANDk.roa (raw, json)
Hash identifier: UMRKVKJ/QMbmiaLl5bHGPJn80rB9N8Qz/q29F0y206A=
Subject key identifier: 2B:E9:56:D5:86:2C:C5:8C:04:70:D0:65:30:1D:E2:7E:F9:40:34:39
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182B4F78273F2C6923B79CF3CEA24A9C96F
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/K-lW1YYsxYwEcNBlMB3ifvlANDk.roa
Signing time: Fri 19 Aug 2022 07:18:15 +0000
ROA not before: Fri 19 Aug 2022 07:18:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 89.116.252.0/24 maxlen: 24
89.117.5.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b4:f7:82:73:f2:c6:92:3b:79:cf:3c:ea:24:a9:c9:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 19 07:18:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2be956d5862cc58c0470d065301de27ef9403439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:98:0b:0f:7c:cf:bc:3e:6b:f6:73:48:d6:
c9:72:fb:ae:9e:39:b2:70:3a:40:22:5d:45:fd:90:
7a:e1:dd:64:c5:31:37:45:ef:f5:05:04:a9:68:7b:
eb:84:b8:5d:d1:d8:4c:e1:24:18:d9:1f:e0:39:7e:
97:c8:eb:fd:00:f4:1a:ef:53:68:5a:c4:5e:68:09:
a8:30:e0:b1:6f:5d:dc:c6:2f:23:01:44:ac:9c:c7:
83:0b:62:7c:db:0d:b4:d9:71:dc:c7:c7:7b:45:d6:
06:09:2d:58:f0:d7:9b:3f:c4:c3:41:2d:42:e2:ad:
e3:c0:a2:44:95:31:41:f2:9b:c9:51:1e:f0:6c:a5:
da:eb:73:a3:fe:ab:33:02:32:79:24:d9:a3:0c:23:
d3:6e:78:9d:50:12:9b:ee:8f:fd:4f:3c:09:ca:c2:
01:2f:13:e7:a1:f2:97:d5:36:d1:aa:c8:45:04:14:
2e:49:74:48:76:16:4f:be:d8:21:fc:25:ad:8f:32:
f1:09:4c:54:4e:a3:eb:8d:50:68:4b:44:b8:ee:2c:
03:b0:b6:0f:26:32:21:8e:dc:32:68:42:15:a3:d0:
ef:42:1a:df:8c:a9:e2:bc:89:ee:47:8c:46:a1:5b:
55:34:13:5f:59:79:47:76:20:66:14:14:c4:c8:4b:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E9:56:D5:86:2C:C5:8C:04:70:D0:65:30:1D:E2:7E:F9:40:34:39
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/K-lW1YYsxYwEcNBlMB3ifvlANDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.56.0/24
89.116.252.0/24
89.117.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:48:ee:08:79:43:33:bb:e2:40:20:db:63:bf:49:95:95:4c:
62:c5:17:fd:ba:64:6b:08:e5:c4:dc:7a:f5:99:fd:21:a0:b9:
2a:3e:8e:0b:7d:03:bd:22:d7:01:f9:ac:47:de:66:51:66:40:
71:d3:20:6e:ab:37:00:d9:aa:97:13:24:a2:34:ba:a2:8c:ce:
af:25:5a:2a:71:d8:b5:00:09:bc:0c:6c:72:a8:6c:09:e0:85:
f3:6b:1a:25:15:fd:1f:c5:0c:bf:43:cd:84:1c:ac:bd:9b:f5:
5e:92:e6:f2:38:0e:4a:58:a3:00:99:73:1e:38:17:72:bf:e4:
08:08:ae:39:87:35:47:5f:5a:d1:3d:07:61:79:0c:f5:27:1a:
fc:40:02:6c:f1:1c:b7:fd:f1:68:6d:42:97:9d:86:8b:fd:c7:
b9:ce:99:9d:5a:23:64:5c:bb:63:23:c2:d0:2d:b0:80:08:df:
5a:e6:77:8a:af:b8:83:26:33:03:61:b0:6b:74:f7:80:ea:1c:
12:bf:3f:57:a3:8c:24:66:8b:f3:f3:ed:10:6a:80:85:ea:3d:
6b:b5:7a:f5:b7:b7:79:c4:1b:45:a6:81:04:62:f7:c6:fe:0f:
44:18:ea:49:8b:bc:f6:bd:d4:f3:5d:5c:6d:c3:c9:06:a0:a7:
16:f8:4e:15
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYK094Jz8saSO3nPPOokqclvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODE5MDcxODE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmU5NTZkNTg2MmNjNThjMDQ3MGQwNjUzMDFkZTI3ZWY5NDAzNDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/CYCw98z7w+a/ZzSNbJcvuunjmy
cDpAIl1F/ZB64d1kxTE3Re/1BQSpaHvrhLhd0dhM4SQY2R/gOX6XyOv9APQa71No
WsReaAmoMOCxb13cxi8jAUSsnMeDC2J82w202XHcx8d7RdYGCS1Y8NebP8TDQS1C
4q3jwKJElTFB8pvJUR7wbKXa63Oj/qszAjJ5JNmjDCPTbnidUBKb7o/9TzwJysIB
LxPnofKX1TbRqshFBBQuSXRIdhZPvtgh/CWtjzLxCUxUTqPrjVBoS0S47iwDsLYP
JjIhjtwyaEIVo9DvQhrfjKnivInuR4xGoVtVNBNfWXlHdiBmFBTEyEsRUQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCvpVtWGLMWMBHDQZTAd4n75QDQ5MB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvSy1sVzFZWXN4WXdFY05CbE1CM2lmdmxBTkRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWXQ4AwQA
WXT8AwQAWXUFMA0GCSqGSIb3DQEBCwUAA4IBAQA9SO4IeUMzu+JAINtjv0mVlUxi
xRf9umRrCOXE3Hr1mf0hoLkqPo4LfQO9ItcB+axH3mZRZkBx0yBuqzcA2aqXEySi
NLqijM6vJVoqcdi1AAm8DGxyqGwJ4IXzaxolFf0fxQy/Q82EHKy9m/VekubyOA5K
WKMAmXMeOBdyv+QICK45hzVHX1rRPQdheQz1Jxr8QAJs8Ry3/fFobUKXnYaL/ce5
zpmdWiNkXLtjI8LQLbCACN9a5neKr7iDJjMDYbBrdPeA6hwSvz9Xo4wkZovz8+0Q
aoCF6j1rtXr1t7d5xBtFpoEEYvfG/g9EGOpJi7z2vdTzXVxtw8kGoKcW+E4V
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org