Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/a_wm6tUUOphOo4mrAvQj6wZk8m0.roa
File: a_wm6tUUOphOo4mrAvQj6wZk8m0.roa (raw, json)
Hash identifier: my+CxcNIEmKWtDF2NDdifRg/wIalHS/pu73gwSduDvY=
Subject key identifier: 6B:FC:26:EA:D5:14:3A:98:4E:A3:89:AB:02:F4:23:EB:06:64:F2:6D
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183D063C79051702E94F524C55DFE17ED61
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/a_wm6tUUOphOo4mrAvQj6wZk8m0.roa
Signing time: Thu 13 Oct 2022 08:09:03 +0000
ROA not before: Thu 13 Oct 2022 08:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 89.116.252.0/24 maxlen: 24
89.116.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:63:c7:90:51:70:2e:94:f5:24:c5:5d:fe:17:ed:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 13 08:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bfc26ead5143a984ea389ab02f423eb0664f26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:6a:19:15:d9:a6:8d:b1:b6:07:ba:a0:0f:
0d:8d:27:7f:5b:db:c2:c4:69:43:77:98:8a:78:4a:
57:de:55:ae:84:c7:5a:fa:22:55:63:2a:75:41:4a:
5c:fd:61:a6:d3:40:0f:90:f8:8d:bf:a7:fa:ee:f9:
2f:c4:20:c9:c4:51:43:35:88:f6:64:b4:77:5e:56:
04:c6:4b:db:08:e0:74:4d:8b:0e:48:ad:50:59:d4:
3a:17:5e:c1:7e:ec:b1:6a:b5:5a:9b:b7:c8:68:b1:
1b:40:0e:40:a2:ec:0e:7c:08:d5:b5:c8:b7:e4:3a:
8a:69:d0:c6:a2:2f:31:7e:11:91:ee:ea:c0:1b:7d:
aa:14:69:63:8c:1b:48:94:87:44:fb:2d:2d:3a:83:
9a:b5:e5:a1:91:a5:f3:03:ab:76:3e:1e:1a:97:53:
cf:1f:92:aa:a8:5e:2a:2f:2d:81:d4:97:3e:be:43:
f2:d0:73:00:c9:c7:9a:c9:5f:e4:d1:ef:83:38:02:
7d:1b:27:bc:dd:65:cd:00:2b:d6:19:ef:db:e5:c8:
82:51:60:2f:78:d7:5e:77:e3:aa:4b:e3:86:1b:37:
24:93:ac:11:0f:1d:b0:9b:fd:10:57:89:ba:79:54:
eb:44:f8:ec:0a:b8:48:b4:08:49:9b:36:9a:35:89:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FC:26:EA:D5:14:3A:98:4E:A3:89:AB:02:F4:23:EB:06:64:F2:6D
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/a_wm6tUUOphOo4mrAvQj6wZk8m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.56.0/24
89.116.252.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ef:59:3c:b8:f9:bb:62:5d:15:ea:06:40:29:49:5e:4a:31:
0a:a8:cf:d5:bb:cb:0d:f8:2e:8c:fc:00:18:38:f5:89:0f:53:
79:2a:a3:a9:9e:33:72:5c:51:c7:aa:7a:e4:b2:94:bb:8c:71:
d2:c3:7f:02:86:ec:3d:19:2f:94:3a:85:c0:8f:6e:e8:18:c6:
28:f9:1d:fb:c9:0a:a9:cc:36:0a:99:88:8e:85:dd:f1:91:50:
8a:20:ba:a3:fb:79:c8:eb:c4:7b:cc:87:b6:d2:5d:3d:f5:d2:
ad:e7:a8:17:97:60:6b:77:3a:31:1a:3c:39:3d:66:25:60:50:
df:11:a4:11:0a:0e:4b:d6:f8:e9:76:c6:99:18:dc:4b:ba:5b:
3b:5c:e5:e9:e6:5f:17:62:22:64:c6:33:8d:ff:14:01:67:54:
ae:9d:3a:c4:83:19:2c:64:ad:7d:49:d7:99:bf:10:72:ca:14:
a1:fd:47:5c:c9:28:f0:8f:9b:36:6c:5f:a9:2f:38:13:6b:11:
9f:9e:d7:ca:87:56:3f:6a:ac:44:d3:42:fd:43:7b:c9:f3:7d:
2e:6b:ea:0b:72:83:82:a3:32:20:91:d7:68:c9:37:df:46:33:
ef:83:f5:46:91:82:5a:65:4b:2d:9e:80:84:7f:e9:18:49:4d:
43:56:2b:fd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPQY8eQUXAulPUkxV3+F+1hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIxMDEzMDgwOTAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmZjMjZlYWQ1MTQzYTk4NGVhMzg5YWIwMmY0MjNlYjA2NjRmMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZJqGRXZpo2xtge6oA8NjSd/W9vC
xGlDd5iKeEpX3lWuhMda+iJVYyp1QUpc/WGm00APkPiNv6f67vkvxCDJxFFDNYj2
ZLR3XlYExkvbCOB0TYsOSK1QWdQ6F17BfuyxarVam7fIaLEbQA5AouwOfAjVtci3
5DqKadDGoi8xfhGR7urAG32qFGljjBtIlIdE+y0tOoOateWhkaXzA6t2Ph4al1PP
H5KqqF4qLy2B1Jc+vkPy0HMAyceayV/k0e+DOAJ9Gye83WXNACvWGe/b5ciCUWAv
eNded+OqS+OGGzckk6wRDx2wm/0QV4m6eVTrRPjsCrhItAhJmzaaNYlwoQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGv8JurVFDqYTqOJqwL0I+sGZPJtMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvYV93bTZ0VVVPcGhPbzRtckF2UWo2d1prOG0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWXQ4AwQA
WXT8MA0GCSqGSIb3DQEBCwUAA4IBAQBW71k8uPm7Yl0V6gZAKUleSjEKqM/Vu8sN
+C6M/AAYOPWJD1N5KqOpnjNyXFHHqnrkspS7jHHSw38Chuw9GS+UOoXAj27oGMYo
+R37yQqpzDYKmYiOhd3xkVCKILqj+3nI68R7zIe20l099dKt56gXl2BrdzoxGjw5
PWYlYFDfEaQRCg5L1vjpdsaZGNxLuls7XOXp5l8XYiJkxjON/xQBZ1SunTrEgxks
ZK19SdeZvxByyhSh/UdcySjwj5s2bF+pLzgTaxGfntfKh1Y/aqxE00L9Q3vJ830u
a+oLcoOCozIgkddoyTffRjPvg/VGkYJaZUstnoCEf+kYSU1DViv9
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-ams.rpki-client.org