Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VLGnJg5frJxE5RYJHX02FO-doDU.roa
File: VLGnJg5frJxE5RYJHX02FO-doDU.roa (raw, json)
Hash identifier: cJ7BrgnCBi4mgoxbbtCwS5Fm5kR+FmZKjL8ciwS2RGk=
Subject key identifier: 54:B1:A7:26:0E:5F:AC:9C:44:E5:16:09:1D:7D:36:14:EF:9D:A0:35
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B3AC021
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VLGnJg5frJxE5RYJHX02FO-doDU.roa
Signing time: Tue 07 Jun 2022 10:02:03 +0000
ROA not before: Tue 07 Jun 2022 10:02:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 89.117.130.0/24 maxlen: 24
89.117.126.0/24 maxlen: 24
89.117.245.0/24 maxlen: 24
89.116.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188399649 (0xb3ac021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 7 10:02:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54b1a7260e5fac9c44e516091d7d3614ef9da035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ce:e8:84:63:0b:6a:74:8c:92:41:10:7c:6b:
d4:32:79:68:22:e6:a1:0b:e5:ff:64:42:43:38:93:
92:ae:13:7f:7e:fb:3e:75:2b:67:50:ce:d0:b7:fc:
d6:9f:05:9a:99:e2:7f:47:a4:86:ea:b7:53:f3:31:
f5:a9:cf:f5:5b:ec:8d:2a:1e:55:70:27:00:33:f7:
e7:41:00:8b:b1:3c:a1:ac:28:c3:f2:43:1f:9f:00:
f4:d9:cc:f7:5d:0c:20:d7:9e:00:61:6f:7a:dc:7b:
a9:41:21:4a:81:d1:2b:9b:81:e4:c0:1f:04:a4:94:
bd:4e:2a:24:88:01:72:ce:fb:3c:e0:00:c9:9e:5f:
da:94:30:1f:b6:4a:9a:58:08:76:a9:60:70:bc:9d:
5e:82:fa:30:74:d1:09:fa:07:dd:62:42:5a:2f:37:
50:fa:03:a8:9f:b1:9a:8f:d0:bc:34:f1:32:39:78:
13:17:e6:06:7b:26:a4:fd:d1:c5:94:1a:57:08:fb:
35:0a:ce:70:3a:e8:e1:27:53:1e:df:6f:f2:03:cf:
4d:78:ea:50:f8:25:59:66:42:24:d9:53:46:66:02:
bb:9b:b3:18:7c:c8:a1:93:bb:b5:57:bd:3d:33:b9:
83:2c:99:ae:91:30:41:38:c4:01:f0:22:7e:f8:21:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B1:A7:26:0E:5F:AC:9C:44:E5:16:09:1D:7D:36:14:EF:9D:A0:35
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/VLGnJg5frJxE5RYJHX02FO-doDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.203.0/24
89.117.126.0/24
89.117.130.0/24
89.117.245.0/24
Signature Algorithm: sha256WithRSAEncryption
40:5b:c4:9b:00:30:ee:1d:47:f1:82:75:87:e2:da:fc:e1:0f:
62:b9:67:98:8b:3f:84:5f:dd:09:47:e4:d8:2c:98:a1:07:b7:
e0:7f:de:38:61:79:18:a4:ae:89:29:d1:c9:c0:13:15:91:62:
39:f1:d7:b1:76:cc:5f:3d:64:5a:7f:3d:64:a5:1c:3d:32:22:
b8:3e:3d:f8:58:10:02:bd:6c:fe:39:72:0b:74:f2:83:4b:ff:
5a:04:2b:98:69:b6:fd:21:e2:37:25:16:bb:28:f3:6c:a3:2d:
66:ce:b3:ba:b1:a0:63:9c:d1:9c:b9:48:45:76:b1:fa:35:44:
00:6e:bf:0c:52:b8:16:e2:cb:40:f7:d1:3c:a2:f7:31:33:d1:
8d:2e:0e:da:8d:4f:24:8d:c0:92:05:3a:eb:0c:16:6a:12:b0:
24:e3:fe:19:7c:e8:aa:96:f8:9d:dc:77:57:e4:98:41:9a:1a:
b3:55:d8:3d:d6:a3:cc:d4:c3:53:58:91:11:4b:11:4f:2e:d0:
86:f1:9a:a8:ba:db:cd:96:7d:d4:38:6c:9c:dd:7e:46:af:97:
3e:a8:18:49:c2:29:80:6d:76:8d:88:75:df:b6:4b:49:29:b8:
5e:3d:a6:7e:02:b6:fc:0d:7c:7c:48:43:73:99:16:97:57:6a:
75:70:e4:ad
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECzrAITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDYw
NzEwMDIwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTRiMWE3MjYwZTVm
YWM5YzQ0ZTUxNjA5MWQ3ZDM2MTRlZjlkYTAzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOjO6IRjC2p0jJJBEHxr1DJ5aCLmoQvl/2RCQziTkq4Tf377
PnUrZ1DO0Lf81p8Fmpnif0ekhuq3U/Mx9anP9VvsjSoeVXAnADP350EAi7E8oawo
w/JDH58A9NnM910MINeeAGFvetx7qUEhSoHRK5uB5MAfBKSUvU4qJIgBcs77POAA
yZ5f2pQwH7ZKmlgIdqlgcLydXoL6MHTRCfoH3WJCWi83UPoDqJ+xmo/QvDTxMjl4
ExfmBnsmpP3RxZQaVwj7NQrOcDro4SdTHt9v8gPPTXjqUPglWWZCJNlTRmYCu5uz
GHzIoZO7tVe9PTO5gyyZrpEwQTjEAfAifvghK68CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRUsacmDl+snETlFgkdfTYU752gNTAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L1ZMR25KZzVmckp4RTVSWUpIWDAyRk8tZG9EVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFl0ywMEAFl1fgMEAFl1ggMEAFl1
9TANBgkqhkiG9w0BAQsFAAOCAQEAQFvEmwAw7h1H8YJ1h+La/OEPYrlnmIs/hF/d
CUfk2CyYoQe34H/eOGF5GKSuiSnRycATFZFiOfHXsXbMXz1kWn89ZKUcPTIiuD49
+FgQAr1s/jlyC3Tyg0v/WgQrmGm2/SHiNyUWuyjzbKMtZs6zurGgY5zRnLlIRXax
+jVEAG6/DFK4FuLLQPfRPKL3MTPRjS4O2o1PJI3AkgU66wwWahKwJOP+GXzoqpb4
ndx3V+SYQZoas1XYPdajzNTDU1iREUsRTy7QhvGaqLrbzZZ91DhsnN1+Rq+XPqgY
ScIpgG12jYh137ZLSSm4Xj2mfgK2/A18fEhDc5kWl1dqdXDkrQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org