Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/bhL52EDWlV0VJL1fQKyrpMOYSAY.roa
File: bhL52EDWlV0VJL1fQKyrpMOYSAY.roa (raw, json)
Hash identifier: Vj+7DBdhTsvZoXzrK/T9M8CmHLhohd57OqMU2byrcQs=
Subject key identifier: 6E:12:F9:D8:40:D6:95:5D:15:24:BD:5F:40:AC:AB:A4:C3:98:48:06
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182B110AAD9006B0C1C5A2BF9A944F8DA6B
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/bhL52EDWlV0VJL1fQKyrpMOYSAY.roa
Signing time: Thu 18 Aug 2022 13:07:15 +0000
ROA not before: Thu 18 Aug 2022 13:07:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139660
IP address blocks: 89.116.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:10:aa:d9:00:6b:0c:1c:5a:2b:f9:a9:44:f8:da:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 18 13:07:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e12f9d840d6955d1524bd5f40acaba4c3984806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8f:73:02:a3:c1:aa:9c:f4:89:c0:41:a8:60:
cc:6d:41:ad:68:84:bf:5a:0e:6d:b4:38:5c:b6:02:
85:df:42:c1:c3:05:a0:9b:5a:c1:17:34:6d:10:11:
55:05:5c:a2:01:66:df:62:ca:7c:f1:03:dc:0c:66:
f5:99:cc:ed:f0:66:01:54:42:ed:f5:f9:42:eb:a4:
3a:fa:31:75:f7:40:de:2b:e2:3b:c0:d6:93:4a:47:
9f:3e:b9:1c:5c:1a:15:75:35:20:55:d8:a4:8f:67:
bf:30:c9:0f:08:02:18:cc:fe:45:82:a6:4e:09:2a:
f1:67:a8:4b:b4:f1:71:61:bc:6a:17:ca:fe:6b:b9:
7b:2a:f8:ec:ad:ac:5a:95:a0:d2:e7:c2:f9:4c:e6:
bf:c6:fa:f5:2b:5e:3b:28:f4:c2:b5:ef:2f:16:7f:
5e:01:66:f6:8c:45:37:4d:19:41:9f:1d:b4:df:6e:
97:a5:4c:c9:22:48:0a:55:27:ea:22:31:6c:32:f5:
38:0e:b9:84:d4:5e:e1:df:dc:8f:2d:3d:38:e8:c1:
8b:a4:21:a8:e4:2e:30:61:54:6e:a3:47:f1:60:bc:
55:b6:97:67:12:e2:58:38:c4:df:14:3c:b5:d2:bc:
3b:3a:50:b1:e8:f3:24:93:50:2b:76:4d:d7:80:b4:
31:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:12:F9:D8:40:D6:95:5D:15:24:BD:5F:40:AC:AB:A4:C3:98:48:06
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/bhL52EDWlV0VJL1fQKyrpMOYSAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.218.0/24
Signature Algorithm: sha256WithRSAEncryption
85:57:f8:5a:33:e6:28:62:ab:21:15:f0:82:7d:63:05:18:aa:
5c:27:d6:80:22:fe:c0:8d:77:33:f7:90:af:1f:a2:27:db:b9:
3f:57:b8:05:dc:2e:93:66:42:f5:d7:30:24:85:a4:32:28:ca:
5c:89:03:62:ec:fa:be:f7:7f:6b:7c:16:d6:48:ad:9c:bf:ad:
83:0f:84:8c:a0:32:39:2f:0b:f3:d4:71:5b:c6:4a:21:51:e7:
78:1a:5f:bf:c2:35:f2:ca:76:9b:44:1f:39:2a:26:bc:82:e2:
46:09:a4:2e:3d:5d:ab:da:7d:eb:fa:b0:41:41:53:f9:2f:0e:
c7:84:60:d0:53:e3:7c:30:d4:1d:9d:86:a3:d4:22:9d:e4:86:
c7:f4:cb:9e:f1:38:d4:4d:3a:e0:ee:1b:05:52:f7:30:9f:5f:
1e:b2:a6:a5:69:56:47:ab:4f:eb:00:94:70:5f:ff:f8:18:09:
b1:19:3a:72:5e:bf:44:e1:b4:f8:f7:75:16:d4:58:09:7c:5c:
8e:42:1a:ca:4c:f2:99:b5:ef:af:92:a3:1d:a4:fb:5b:fe:6a:
e0:3b:d1:ac:cf:48:0a:ec:44:47:bf:7c:2a:cc:88:39:3d:4e:
cf:04:99:0d:32:45:73:ee:76:e8:27:26:24:f8:0f:7a:ec:4c:
91:3b:61:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKxEKrZAGsMHFor+alE+NprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwODE4MTMwNzE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTEyZjlkODQwZDY5NTVkMTUyNGJkNWY0MGFjYWJhNGMzOTg0ODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI9zAqPBqpz0icBBqGDMbUGtaIS/
Wg5ttDhctgKF30LBwwWgm1rBFzRtEBFVBVyiAWbfYsp88QPcDGb1mczt8GYBVELt
9flC66Q6+jF190DeK+I7wNaTSkefPrkcXBoVdTUgVdikj2e/MMkPCAIYzP5FgqZO
CSrxZ6hLtPFxYbxqF8r+a7l7KvjsraxalaDS58L5TOa/xvr1K147KPTCte8vFn9e
AWb2jEU3TRlBnx20326XpUzJIkgKVSfqIjFsMvU4DrmE1F7h39yPLT046MGLpCGo
5C4wYVRuo0fxYLxVtpdnEuJYOMTfFDy10rw7OlCx6PMkk1Ardk3XgLQxUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG4S+dhA1pVdFSS9X0Csq6TDmEgGMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvYmhMNTJFRFdsVjBWSkwxZlFLeXJwTU9ZU0FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXTaMA0G
CSqGSIb3DQEBCwUAA4IBAQCFV/haM+YoYqshFfCCfWMFGKpcJ9aAIv7AjXcz95Cv
H6In27k/V7gF3C6TZkL11zAkhaQyKMpciQNi7Pq+939rfBbWSK2cv62DD4SMoDI5
Lwvz1HFbxkohUed4Gl+/wjXyynabRB85Kia8guJGCaQuPV2r2n3r+rBBQVP5Lw7H
hGDQU+N8MNQdnYaj1CKd5IbH9Mue8TjUTTrg7hsFUvcwn18esqalaVZHq0/rAJRw
X//4GAmxGTpyXr9E4bT493UW1FgJfFyOQhrKTPKZte+vkqMdpPtb/mrgO9Gsz0gK
7ERHv3wqzIg5PU7PBJkNMkVz7nboJyYk+A967EyRO2F0
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:50:43 2025 by rpki-client