Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/akKCauA_wbu7c0K99s_jrgbW9as.roa
File: akKCauA_wbu7c0K99s_jrgbW9as.roa (raw, json)
Hash identifier: hWY3unFMkaXE01gUWC3UJT7xwEnyavlRfkAPyzewFsU=
Subject key identifier: 6A:42:82:6A:E0:3F:C1:BB:BB:73:42:BD:F6:CF:E3:AE:06:D6:F5:AB
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0985FFDF
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/akKCauA_wbu7c0K99s_jrgbW9as.roa
Signing time: Sun 13 Feb 2022 14:37:44 +0000
ROA not before: Sun 13 Feb 2022 14:37:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 89.116.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159776735 (0x985ffdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 13 14:37:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a42826ae03fc1bbbb7342bdf6cfe3ae06d6f5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:bf:d6:df:f3:b4:76:7a:c4:8b:cc:1e:c8:
1b:b0:5b:81:23:c3:c0:fa:30:e4:f4:78:f9:12:84:
86:fa:24:58:87:fb:b1:dc:e5:c6:ec:ee:cc:d2:34:
2b:25:e7:e5:89:3c:26:18:da:20:f0:58:6e:2a:08:
6a:01:3a:5c:b3:81:79:65:4a:00:6b:e3:15:9e:28:
64:82:48:73:c0:f5:c9:01:a4:13:55:b5:f0:c5:ff:
30:17:b2:d0:6b:cd:9a:5c:1b:9a:27:5c:df:36:eb:
f0:97:47:5a:da:49:10:ea:0e:75:4c:8f:f6:02:7d:
02:e1:81:4b:4a:e1:2d:96:bc:29:04:30:f9:d8:19:
9d:25:d8:e6:54:35:6a:fd:23:15:06:2e:ad:12:8e:
e2:b5:6b:40:36:83:a2:48:8f:f1:57:a8:60:c4:cf:
98:f4:15:6a:02:e4:23:e9:89:eb:44:d9:41:4e:99:
ff:0e:e7:4b:bf:1e:bb:7c:16:65:e6:08:7d:e8:73:
46:32:f5:3a:3a:06:6f:da:a0:68:e1:a3:07:fc:48:
15:70:95:3e:c0:01:53:db:82:d7:ce:b6:f6:43:28:
3f:0e:4f:13:dd:c3:49:61:1c:16:80:e4:2a:98:5f:
33:d5:7f:a9:0a:60:9b:f5:be:8e:d7:b1:53:70:c7:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:82:6A:E0:3F:C1:BB:BB:73:42:BD:F6:CF:E3:AE:06:D6:F5:AB
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/akKCauA_wbu7c0K99s_jrgbW9as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.102.0/24
Signature Algorithm: sha256WithRSAEncryption
01:93:b6:ee:0a:e5:ab:67:3f:bb:d5:5c:7a:08:c3:aa:88:f0:
c6:df:08:f5:59:a4:c3:3b:e8:a9:ae:28:0b:0f:84:d7:f9:40:
97:2c:00:ac:e2:6f:43:f3:98:0c:36:85:90:43:f9:8f:d5:93:
21:3c:1c:6a:7b:d0:91:5c:3e:1d:2c:e5:f0:25:71:de:c1:a4:
5c:e6:34:9a:19:15:af:c0:9a:c4:1a:d6:bc:52:9c:ef:dd:ea:
56:e1:84:c5:14:57:db:89:43:e5:62:67:90:1c:a5:79:87:a2:
31:ca:e1:a3:bd:e7:ea:fb:b0:2e:d6:c7:a5:e6:44:20:5c:8d:
93:a1:62:e9:fc:e1:4f:6f:b5:b8:6f:99:22:ca:30:83:84:02:
37:10:54:05:88:12:7b:69:ed:6f:23:a4:cc:00:4a:41:44:cb:
86:95:0e:b0:06:74:9b:11:fc:e1:1c:00:fc:17:63:94:8f:55:
47:b3:00:8f:9e:2f:9f:1a:02:a4:a7:07:8d:38:ea:b7:44:16:
b0:94:6c:02:1e:0e:ac:93:df:be:72:60:56:e2:2c:c2:37:8a:
44:e5:18:fe:7a:e9:8b:4a:85:a4:cb:50:d1:f5:c7:96:4a:c8:
ed:ad:f4:e5:22:15:36:a4:5b:43:a3:bd:b2:c1:d4:b6:13:72:
9c:e0:cd:33
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECYX/3zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDIx
MzE0Mzc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmE0MjgyNmFlMDNm
YzFiYmJiNzM0MmJkZjZjZmUzYWUwNmQ2ZjVhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM8ev9bf87R2esSLzB7IG7BbgSPDwPow5PR4+RKEhvokWIf7
sdzlxuzuzNI0KyXn5Yk8JhjaIPBYbioIagE6XLOBeWVKAGvjFZ4oZIJIc8D1yQGk
E1W18MX/MBey0GvNmlwbmidc3zbr8JdHWtpJEOoOdUyP9gJ9AuGBS0rhLZa8KQQw
+dgZnSXY5lQ1av0jFQYurRKO4rVrQDaDokiP8VeoYMTPmPQVagLkI+mJ60TZQU6Z
/w7nS78eu3wWZeYIfehzRjL1OjoGb9qgaOGjB/xIFXCVPsABU9uC18629kMoPw5P
E93DSWEcFoDkKphfM9V/qQpgm/W+jtexU3DHvVUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRqQoJq4D/Bu7tzQr32z+OuBtb1qzAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L2FrS0NhdUFfd2J1N2MwSzk5c19qcmdiVzlhcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFl0ZjANBgkqhkiG9w0BAQsFAAOC
AQEAAZO27grlq2c/u9VcegjDqojwxt8I9Vmkwzvoqa4oCw+E1/lAlywArOJvQ/OY
DDaFkEP5j9WTITwcanvQkVw+HSzl8CVx3sGkXOY0mhkVr8CaxBrWvFKc793qVuGE
xRRX24lD5WJnkByleYeiMcrho73n6vuwLtbHpeZEIFyNk6Fi6fzhT2+1uG+ZIsow
g4QCNxBUBYgSe2ntbyOkzABKQUTLhpUOsAZ0mxH84RwA/BdjlI9VR7MAj54vnxoC
pKcHjTjqt0QWsJRsAh4OrJPfvnJgVuIswjeKROUY/nrpi0qFpMtQ0fXHlkrI7a30
5SIVNqRbQ6O9ssHUthNynODNMw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org