Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/SedwGpT-OhH_TSf_aBl-ztkPaEY.roa
File: SedwGpT-OhH_TSf_aBl-ztkPaEY.roa (raw, json)
Hash identifier: yew7yJoHJSqBOwlSAiJ26xD7YuQmrm/+hSVSpnOPdDI=
Subject key identifier: 49:E7:70:1A:94:FE:3A:11:FF:4D:27:FF:68:19:7E:CE:D9:0F:68:46
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182D4A51B54FDDF4DBD265C0503D27FEBAD
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/SedwGpT-OhH_TSf_aBl-ztkPaEY.roa
Signing time: Thu 25 Aug 2022 10:56:06 +0000
ROA not before: Thu 25 Aug 2022 10:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 89.117.70.0/23 maxlen: 24
89.116.130.0/23 maxlen: 24
86.38.182.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:a5:1b:54:fd:df:4d:bd:26:5c:05:03:d2:7f:eb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 25 10:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49e7701a94fe3a11ff4d27ff68197eced90f6846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cc:d3:19:61:bf:90:a2:fd:8b:10:60:e3:06:
53:cf:9a:66:ce:17:02:01:17:70:09:26:d3:3e:a8:
50:3b:56:85:c6:51:14:67:50:8b:49:b7:7f:07:17:
bd:ad:f5:42:a9:08:bb:ea:8c:67:72:ef:84:22:d7:
f5:d9:af:74:4f:83:79:d6:9a:ee:31:2c:03:3e:a5:
93:fa:4b:64:5d:fe:33:39:8a:d4:39:cf:66:f2:85:
b4:57:ff:fc:d2:fb:c8:61:f1:9c:90:59:0d:0e:a6:
15:a2:e7:c1:a6:4a:51:1d:70:8f:a3:0e:cd:64:12:
3a:be:f7:de:ab:19:c9:14:11:88:f6:5f:12:7a:97:
3c:c0:0a:6e:4e:24:04:c5:6f:71:8f:4c:ce:67:71:
c6:10:dd:c8:00:75:cd:99:0f:bd:df:c0:37:3e:9d:
37:17:0c:57:28:9b:38:51:70:8f:d2:1f:e4:1f:4b:
bd:bc:1e:3a:0c:9a:e8:59:41:06:1e:1a:9b:59:2d:
96:7f:6a:6f:da:c2:52:ad:ce:e1:8b:ab:d1:0d:8c:
86:1f:c0:8a:65:e0:15:b6:c2:7c:18:5c:59:b7:85:
e5:e4:60:0b:ea:96:83:24:76:22:dd:ab:25:fd:71:
71:ff:7c:e0:1d:5c:a9:14:b9:c0:96:b3:a3:c5:49:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E7:70:1A:94:FE:3A:11:FF:4D:27:FF:68:19:7E:CE:D9:0F:68:46
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/SedwGpT-OhH_TSf_aBl-ztkPaEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.182.0/23
89.116.130.0/23
89.117.24.0/23
89.117.70.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:7b:75:d8:81:91:fc:42:39:dc:92:23:8b:e8:f4:e9:6c:2b:
56:bc:01:4a:4e:a6:c0:ab:19:e9:2d:14:6a:0e:f9:3c:55:3e:
eb:0e:78:9b:3c:40:c8:61:b5:1d:82:d1:4a:c2:81:2f:23:9d:
62:76:c1:32:78:e3:b8:67:4b:30:18:42:a1:3e:97:b5:1c:1f:
55:9e:8c:de:11:77:8d:4a:f5:90:ee:b0:20:d0:09:07:ae:75:
42:42:83:0d:3d:66:58:33:c2:eb:ab:99:95:27:69:f3:50:3a:
55:12:3d:34:8b:a1:a4:fd:9d:34:04:e1:cf:77:f6:11:03:51:
67:ad:e1:61:67:e5:51:fe:13:cb:05:f8:65:d5:f5:19:56:8a:
b2:57:26:ea:9a:8e:d9:d5:fc:16:f0:91:c1:36:02:7a:f7:33:
7c:42:1c:bf:cd:d1:46:07:1c:80:07:95:f7:1b:d4:05:2d:88:
a6:a5:2a:b8:88:a2:8c:3a:d1:52:3e:82:db:78:83:8b:40:aa:
52:7f:7c:3c:68:89:fc:82:53:b6:2c:ff:14:35:bd:1d:d4:db:
94:71:7f:6f:4e:84:22:98:31:47:0a:d3:09:bd:1b:62:09:98:
9f:99:bf:bb:f5:f5:6c:49:20:f7:05:aa:a9:41:a5:06:4f:ff:
27:10:c2:99
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYLUpRtU/d9NvSZcBQPSf+utMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODI1MTA1NjA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWU3NzAxYTk0ZmUzYTExZmY0ZDI3ZmY2ODE5N2VjZWQ5MGY2ODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8zTGWG/kKL9ixBg4wZTz5pmzhcC
ARdwCSbTPqhQO1aFxlEUZ1CLSbd/Bxe9rfVCqQi76oxncu+EItf12a90T4N51pru
MSwDPqWT+ktkXf4zOYrUOc9m8oW0V//80vvIYfGckFkNDqYVoufBpkpRHXCPow7N
ZBI6vvfeqxnJFBGI9l8Sepc8wApuTiQExW9xj0zOZ3HGEN3IAHXNmQ+938A3Pp03
FwxXKJs4UXCP0h/kH0u9vB46DJroWUEGHhqbWS2Wf2pv2sJSrc7hi6vRDYyGH8CK
ZeAVtsJ8GFxZt4Xl5GAL6paDJHYi3asl/XFx/3zgHVypFLnAlrOjxUlIHQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEnncBqU/joR/00n/2gZfs7ZD2hGMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvU2Vkd0dwVC1PaEhfVFNmX2FCbC16dGtQYUVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBVia2AwQB
WXSCAwQBWXUYAwQBWXVGMA0GCSqGSIb3DQEBCwUAA4IBAQC3e3XYgZH8QjnckiOL
6PTpbCtWvAFKTqbAqxnpLRRqDvk8VT7rDnibPEDIYbUdgtFKwoEvI51idsEyeOO4
Z0swGEKhPpe1HB9VnozeEXeNSvWQ7rAg0AkHrnVCQoMNPWZYM8Lrq5mVJ2nzUDpV
Ej00i6Gk/Z00BOHPd/YRA1FnreFhZ+VR/hPLBfhl1fUZVoqyVybqmo7Z1fwW8JHB
NgJ69zN8Qhy/zdFGBxyAB5X3G9QFLYimpSq4iKKMOtFSPoLbeIOLQKpSf3w8aIn8
glO2LP8UNb0d1NuUcX9vToQimDFHCtMJvRtiCZifmb+79fVsSSD3BaqpQaUGT/8n
EMKZ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org