Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/We8OaMDpZO3WE_dzxEkyBVNVois.roa
File: We8OaMDpZO3WE_dzxEkyBVNVois.roa (raw, json)
Hash identifier: Hg9w1JBHHpfwZBnKE3Szj5ZA0s+aFByxa6BmqEDuHo4=
Subject key identifier: 59:EF:0E:68:C0:E9:64:ED:D6:13:F7:73:C4:49:32:05:53:55:A2:2B
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A4EA9A2
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/We8OaMDpZO3WE_dzxEkyBVNVois.roa
Signing time: Wed 13 Apr 2022 08:31:55 +0000
ROA not before: Wed 13 Apr 2022 08:31:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63213
IP address blocks: 89.116.60.0/22 maxlen: 24
86.38.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172927394 (0xa4ea9a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 13 08:31:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59ef0e68c0e964edd613f773c44932055355a22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:4e:dc:a9:58:ff:13:1a:88:f1:f0:20:da:
d6:a2:00:07:b4:9e:f9:95:a5:62:f7:f6:ee:d0:92:
57:dd:d6:8d:b9:c1:58:72:63:48:82:42:44:f6:47:
0e:48:e5:80:5a:c6:2f:e4:cd:99:ff:b6:09:8d:21:
fb:4a:79:96:7f:b2:a7:78:f6:13:82:26:a0:d9:00:
5b:f3:5f:5f:f1:4b:2a:3c:7d:a3:61:2e:3e:65:5a:
cf:25:e5:a1:2c:c2:e5:e5:71:52:1b:0d:40:78:c0:
5d:62:8f:b5:e0:80:89:5f:19:a6:4b:6f:0a:8e:2a:
f3:47:b7:a1:d1:a7:a0:7d:c0:38:79:c5:a2:9e:43:
df:18:0f:a0:8e:11:c6:0f:30:eb:86:44:05:aa:6a:
27:98:c4:af:bd:d2:02:f9:9d:e9:0a:dd:b5:5a:82:
df:7f:0b:95:6f:c9:bc:3d:5a:79:f2:41:25:b4:29:
30:db:0b:15:78:dd:67:7e:d1:e8:40:fe:a2:4f:dc:
62:4a:eb:03:c2:19:14:ba:6c:77:f0:7f:41:e0:bf:
2e:6e:7f:a7:20:e1:ea:ef:4c:b4:b1:04:8b:24:27:
b2:cf:1a:1e:b2:f7:d2:dc:ce:6e:02:f1:3e:0b:91:
2a:49:52:13:a3:83:85:45:e2:e9:98:be:fd:78:c5:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EF:0E:68:C0:E9:64:ED:D6:13:F7:73:C4:49:32:05:53:55:A2:2B
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/We8OaMDpZO3WE_dzxEkyBVNVois.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.204.0/23
89.116.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:b9:84:77:2e:64:19:0b:77:77:85:25:df:d8:f5:87:df:5c:
e8:04:32:5b:20:bb:9f:08:48:cd:2e:f9:52:3c:cd:48:87:de:
10:a1:cb:1d:49:84:ce:47:69:41:c6:2b:77:fd:5c:17:d9:af:
f8:b4:03:62:33:bb:9c:74:6a:6a:35:4a:21:2a:42:40:fa:1c:
ec:25:8a:45:1a:a0:af:be:7f:1f:59:35:99:3b:53:45:ea:ed:
99:0b:be:1a:eb:9c:30:b8:ae:74:5e:ee:20:af:79:83:ad:6a:
e4:7e:d2:fa:84:ff:26:dc:d3:05:fb:da:2f:e9:c0:34:b5:73:
dc:78:b4:40:46:8d:5a:8b:86:c2:ec:97:70:5b:02:05:24:e5:
2a:0b:99:24:b9:96:1e:3f:80:d1:37:6a:90:63:08:3b:77:81:
7a:4e:a9:e6:89:6a:0e:11:7e:6a:24:80:de:39:5a:27:ae:39:
82:92:9a:08:e0:fd:72:0c:c0:bc:fa:3d:fc:cb:7e:6d:d4:66:
52:4c:4f:72:9e:b3:7f:0f:8e:f3:a6:c1:d7:61:4c:d3:3b:8f:
1f:24:a9:76:75:a7:70:b0:14:66:2b:79:23:b8:72:88:07:9c:
d8:1b:82:22:1c:c9:9e:f1:e5:1f:b7:40:bc:9f:a8:f6:55:80:
ac:96:a7:e3
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECk6pojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDQx
MzA4MzE1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTllZjBlNjhjMGU5
NjRlZGQ2MTNmNzczYzQ0OTMyMDU1MzU1YTIyYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJaZTtypWP8TGojx8CDa1qIAB7Se+ZWlYvf27tCSV93WjbnB
WHJjSIJCRPZHDkjlgFrGL+TNmf+2CY0h+0p5ln+yp3j2E4ImoNkAW/NfX/FLKjx9
o2EuPmVazyXloSzC5eVxUhsNQHjAXWKPteCAiV8ZpktvCo4q80e3odGnoH3AOHnF
op5D3xgPoI4Rxg8w64ZEBapqJ5jEr73SAvmd6QrdtVqC338LlW/JvD1aefJBJbQp
MNsLFXjdZ37R6ED+ok/cYkrrA8IZFLpsd/B/QeC/Lm5/pyDh6u9MtLEEiyQnss8a
HrL30tzObgLxPguRKklSE6ODhUXi6Zi+/XjFHosCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRZ7w5owOlk7dYT93PESTIFU1WiKzAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L1dlOE9hTURwWk8zV0VfZHp4RWt5QlZOVm9pcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAVYmzAMEAll0PDANBgkqhkiG9w0B
AQsFAAOCAQEAs7mEdy5kGQt3d4Ul39j1h99c6AQyWyC7nwhIzS75UjzNSIfeEKHL
HUmEzkdpQcYrd/1cF9mv+LQDYjO7nHRqajVKISpCQPoc7CWKRRqgr75/H1k1mTtT
RertmQu+GuucMLiudF7uIK95g61q5H7S+oT/JtzTBfvaL+nANLVz3Hi0QEaNWouG
wuyXcFsCBSTlKguZJLmWHj+A0TdqkGMIO3eBek6p5olqDhF+aiSA3jlaJ645gpKa
COD9cgzAvPo9/Mt+bdRmUkxPcp6zfw+O86bB12FM0zuPHySpdnWncLAUZit5I7hy
iAec2BuCIhzJnvHlH7dAvJ+o9lWArJan4w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org