Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/S9jOC7NqF3K1jHXEx2c8-i9JRBk.roa
File: S9jOC7NqF3K1jHXEx2c8-i9JRBk.roa (raw, json)
Hash identifier: lS9kKK3L2xN5Bwy4X+WkZMcVOOZf99KKHgLG3eL2MlE=
Subject key identifier: 4B:D8:CE:0B:B3:6A:17:72:B5:8C:75:C4:C7:67:3C:FA:2F:49:44:19
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 09BC38B3
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/S9jOC7NqF3K1jHXEx2c8-i9JRBk.roa
Signing time: Wed 23 Feb 2022 11:02:11 +0000
ROA not before: Wed 23 Feb 2022 11:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 89.116.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163330227 (0x9bc38b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 23 11:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bd8ce0bb36a1772b58c75c4c7673cfa2f494419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:7b:13:66:25:2f:56:da:5c:97:e0:ad:e5:
d7:16:6d:dd:5e:8d:20:08:e5:fe:f4:e7:d0:56:06:
04:e1:8d:ee:a2:74:a7:14:50:a0:fa:91:c8:bb:9a:
da:da:4f:e3:ab:29:a8:4b:57:d8:13:ab:a9:d8:8e:
cf:df:4a:74:87:ae:a2:5b:1a:51:87:53:d3:c6:6c:
23:8f:9b:1f:ab:8d:9b:36:1e:e3:13:22:d7:ac:83:
84:45:d4:73:36:36:a4:57:ac:f8:31:ed:91:f9:6e:
bd:3b:13:91:bc:80:1b:b3:19:e0:e7:c1:03:07:d3:
01:19:d1:f8:ca:b4:ea:06:c0:d6:5e:a0:4d:2e:58:
44:7a:57:f9:a3:0e:df:c0:16:a9:e6:e1:72:2a:1c:
e9:81:52:94:62:95:5d:e1:1c:53:46:35:e2:0c:5a:
7d:0b:e3:dd:42:6a:78:35:2a:17:01:86:e8:1f:1a:
99:c1:28:4f:df:66:a6:66:fa:4b:9b:c8:92:5f:22:
55:b1:05:46:7d:15:be:6b:df:a5:aa:6f:6a:28:58:
f6:6e:cd:fb:ad:96:af:40:0a:a4:0a:fe:ce:64:87:
95:ee:e2:be:43:0a:2d:4d:37:55:58:3e:bd:88:3b:
31:9d:ad:53:5e:a8:a4:9f:ba:3b:b0:3b:5f:2a:55:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D8:CE:0B:B3:6A:17:72:B5:8C:75:C4:C7:67:3C:FA:2F:49:44:19
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/S9jOC7NqF3K1jHXEx2c8-i9JRBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.169.0/24
Signature Algorithm: sha256WithRSAEncryption
72:2d:57:aa:99:e3:7f:c8:f2:cb:50:d6:b9:19:bd:86:86:46:
ce:55:b9:01:f2:a7:02:85:9d:f8:c8:6e:65:8d:dc:dd:4b:ad:
e6:c3:2e:22:8d:8e:0b:2b:41:2a:b3:c1:b7:99:d9:4c:22:76:
91:c3:75:29:18:47:85:65:da:59:8e:45:27:91:51:d9:48:a6:
f4:ad:78:cb:5d:3a:89:55:94:23:23:a9:1e:ea:29:5c:de:20:
4f:9c:1d:40:97:f7:84:b3:8a:c3:f0:52:d3:ba:9c:ad:ff:08:
eb:84:a2:87:29:bc:96:4c:a9:0a:36:de:ec:37:4a:25:01:ea:
5b:88:bf:7b:03:4c:33:33:aa:44:bc:8e:fc:c7:c9:ec:a7:de:
d8:4f:40:8d:ca:02:56:e0:9c:cc:2e:b0:ac:84:8d:84:07:0e:
ac:81:08:34:61:35:dd:7f:1b:01:57:b6:bb:0c:f4:5f:9b:4f:
6b:1e:e1:16:00:dd:3d:2a:4b:eb:69:89:83:f5:16:0f:ea:40:
19:53:b5:e6:61:ce:5f:fd:d0:ac:ba:54:12:2b:13:1c:f3:1d:
98:7e:44:66:b4:1e:b6:43:a0:57:83:c3:27:db:2a:da:e4:a8:
7c:09:33:4b:4a:b6:f6:ba:35:da:fc:b9:64:78:ba:5b:17:6b:
72:97:2b:36
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECbw4szANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDIy
MzExMDIxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGJkOGNlMGJiMzZh
MTc3MmI1OGM3NWM0Yzc2NzNjZmEyZjQ5NDQxOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAML8exNmJS9W2lyX4K3l1xZt3V6NIAjl/vTn0FYGBOGN7qJ0
pxRQoPqRyLua2tpP46spqEtX2BOrqdiOz99KdIeuolsaUYdT08ZsI4+bH6uNmzYe
4xMi16yDhEXUczY2pFes+DHtkfluvTsTkbyAG7MZ4OfBAwfTARnR+Mq06gbA1l6g
TS5YRHpX+aMO38AWqebhcioc6YFSlGKVXeEcU0Y14gxafQvj3UJqeDUqFwGG6B8a
mcEoT99mpmb6S5vIkl8iVbEFRn0VvmvfpapvaihY9m7N+62Wr0AKpAr+zmSHle7i
vkMKLU03VVg+vYg7MZ2tU16opJ+6O7A7XypVwDcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRL2M4Ls2oXcrWMdcTHZzz6L0lEGTAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L1M5ak9DN05xRjNLMWpIWEV4MmM4LWk5SlJCay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0qTANBgkqhkiG9w0BAQsFAAOC
AQEAci1Xqpnjf8jyy1DWuRm9hoZGzlW5AfKnAoWd+MhuZY3c3Uut5sMuIo2OCytB
KrPBt5nZTCJ2kcN1KRhHhWXaWY5FJ5FR2Uim9K14y106iVWUIyOpHuopXN4gT5wd
QJf3hLOKw/BS07qcrf8I64Sihym8lkypCjbe7DdKJQHqW4i/ewNMMzOqRLyO/MfJ
7Kfe2E9AjcoCVuCczC6wrISNhAcOrIEINGE13X8bAVe2uwz0X5tPax7hFgDdPSpL
62mJg/UWD+pAGVO15mHOX/3QrLpUEisTHPMdmH5EZrQetkOgV4PDJ9sq2uSofAkz
S0q29ro12vy5ZHi6WxdrcpcrNg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org