Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/TXgp7AXj2OaiBNoWYEktLlEW72o.roa
File: TXgp7AXj2OaiBNoWYEktLlEW72o.roa (raw, json)
Hash identifier: A1dxbu5coXjg0o4RtliT5Zpcy5Zoab9V2ovg4klkL0A=
Subject key identifier: 4D:78:29:EC:05:E3:D8:E6:A2:04:DA:16:60:49:2D:2E:51:16:EF:6A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0181DA6641EC0791FC15C153B9CB1D27D644
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/TXgp7AXj2OaiBNoWYEktLlEW72o.roa
Signing time: Thu 07 Jul 2022 20:42:23 +0000
ROA not before: Thu 07 Jul 2022 20:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 86.38.242.0/23 maxlen: 24
89.116.68.0/23 maxlen: 24
89.117.142.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:66:41:ec:07:91:fc:15:c1:53:b9:cb:1d:27:d6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jul 7 20:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d7829ec05e3d8e6a204da1660492d2e5116ef6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:de:1e:ce:cf:50:4e:e4:71:18:f1:a6:82:24:
5b:b4:83:00:59:4a:45:d7:5d:b7:cc:de:9c:a1:dd:
58:9a:0b:d3:17:02:2f:5f:4c:be:d1:b8:27:8f:b0:
18:de:66:d0:f7:97:3a:ec:13:2b:77:1f:c5:86:90:
cf:b4:5e:f4:49:0a:f5:33:59:a4:95:68:19:0f:6b:
3c:47:94:52:9d:18:b0:56:bc:3a:37:5c:b1:63:2e:
2f:a7:1d:ad:92:69:1c:80:33:47:d8:b7:ea:f5:93:
30:08:b7:35:17:ea:5c:18:eb:18:4c:88:02:6c:5f:
e1:36:d1:3f:7e:c5:ac:10:b0:b7:51:78:10:46:26:
58:1f:a3:82:8b:b8:56:45:b7:84:4f:54:d5:7b:83:
68:f5:d1:bc:6b:10:80:bb:1a:96:82:d3:e2:91:c3:
b2:0c:55:84:33:df:0c:75:fc:0f:65:41:5f:e4:d7:
2a:42:b3:c4:30:8f:0a:9d:ac:55:92:12:09:95:da:
9f:62:c3:32:c0:4a:5c:5e:8b:14:8c:48:02:c4:30:
38:00:09:bc:6f:92:d7:05:0e:24:28:6a:62:10:2f:
04:64:15:00:24:65:9e:b5:85:29:f3:84:fe:b9:bd:
ba:d1:4f:8c:0c:23:0f:7b:92:8e:fe:82:77:28:91:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:78:29:EC:05:E3:D8:E6:A2:04:DA:16:60:49:2D:2E:51:16:EF:6A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/TXgp7AXj2OaiBNoWYEktLlEW72o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.242.0/23
89.116.68.0/23
89.117.142.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:4e:3e:fe:34:9b:30:4f:22:27:fd:41:2e:63:3c:cf:76:54:
d3:8a:f1:40:f5:77:2b:5e:2a:c0:4b:b7:23:49:d4:4a:27:76:
a1:11:1d:73:bb:67:f0:4d:f5:df:8e:0e:1d:8a:23:79:24:2c:
18:7e:25:b9:d1:5a:55:2f:e3:3d:4c:e6:28:80:4c:94:26:7c:
9a:bf:be:87:6d:a1:31:b1:4a:9d:44:d3:05:39:68:48:24:6b:
26:c2:13:d7:33:f2:57:3f:a5:61:65:a6:40:a0:d9:12:44:d1:
55:42:6c:c9:ba:8e:30:0d:36:4b:1a:77:2a:45:63:86:3a:67:
c1:2c:84:43:5d:a0:6f:ce:36:7e:c2:07:11:37:81:a4:79:a5:
02:f0:40:de:70:48:0a:4e:3a:e1:df:aa:81:47:d7:31:78:d9:
d3:fc:c0:f6:25:49:40:b6:00:1f:1e:b1:99:f5:29:d9:e3:92:
5e:7f:e5:f6:dd:f1:9b:86:90:20:96:9a:4d:66:3e:dc:5b:6b:
a5:b3:48:a7:b3:9b:83:86:72:1e:d5:68:7e:52:b1:d1:de:51:
ff:a5:3c:ce:88:c9:8d:3a:f7:bc:7f:4a:fa:cb:d2:6b:a5:4e:
48:89:d7:a2:a5:18:00:9e:1b:09:a0:ba:b0:6e:a8:86:21:c4:
96:4d:0e:d2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYHaZkHsB5H8FcFTucsdJ9ZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwNzA3MjA0MjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDc4MjllYzA1ZTNkOGU2YTIwNGRhMTY2MDQ5MmQyZTUxMTZlZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd4ezs9QTuRxGPGmgiRbtIMAWUpF
1123zN6cod1YmgvTFwIvX0y+0bgnj7AY3mbQ95c67BMrdx/FhpDPtF70SQr1M1mk
lWgZD2s8R5RSnRiwVrw6N1yxYy4vpx2tkmkcgDNH2Lfq9ZMwCLc1F+pcGOsYTIgC
bF/hNtE/fsWsELC3UXgQRiZYH6OCi7hWRbeET1TVe4No9dG8axCAuxqWgtPikcOy
DFWEM98MdfwPZUFf5NcqQrPEMI8KnaxVkhIJldqfYsMywEpcXosUjEgCxDA4AAm8
b5LXBQ4kKGpiEC8EZBUAJGWetYUp84T+ub260U+MDCMPe5KO/oJ3KJEfJwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE14KewF49jmogTaFmBJLS5RFu9qMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvVFhncDdBWGoyT2FpQk5vV1lFa3RMbEVXNzJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVibyAwQB
WXREAwQBWXWOMA0GCSqGSIb3DQEBCwUAA4IBAQAMTj7+NJswTyIn/UEuYzzPdlTT
ivFA9XcrXirAS7cjSdRKJ3ahER1zu2fwTfXfjg4diiN5JCwYfiW50VpVL+M9TOYo
gEyUJnyav76HbaExsUqdRNMFOWhIJGsmwhPXM/JXP6VhZaZAoNkSRNFVQmzJuo4w
DTZLGncqRWOGOmfBLIRDXaBvzjZ+wgcRN4GkeaUC8EDecEgKTjrh36qBR9cxeNnT
/MD2JUlAtgAfHrGZ9SnZ45Jef+X23fGbhpAglppNZj7cW2uls0ins5uDhnIe1Wh+
UrHR3lH/pTzOiMmNOve8f0r6y9JrpU5IideipRgAnhsJoLqwbqiGIcSWTQ7S
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org