Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/i5fJ8G1spKKv0ZBQKm91IAPsX5k.roa
File: i5fJ8G1spKKv0ZBQKm91IAPsX5k.roa (raw, json)
Hash identifier: l3BhPpD3kjbUpdiQkkl2KYN35DyCTGy97aMKtEgILrk=
Subject key identifier: 8B:97:C9:F0:6D:6C:A4:A2:AF:D1:90:50:2A:6F:75:20:03:EC:5F:99
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0182F819048287E087A4DDCFE446DEED70E6
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/i5fJ8G1spKKv0ZBQKm91IAPsX5k.roa
Signing time: Thu 01 Sep 2022 08:09:25 +0000
ROA not before: Thu 01 Sep 2022 08:09:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 89.116.58.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f8:19:04:82:87:e0:87:a4:dd:cf:e4:46:de:ed:70:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 1 08:09:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b97c9f06d6ca4a2afd190502a6f752003ec5f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:31:52:ca:1a:f7:20:97:93:6d:72:04:f4:
d9:6e:c2:57:9e:48:a6:09:1b:ba:a5:5e:64:a6:d7:
15:ee:54:f4:1c:29:36:4b:34:d6:ce:dd:30:4b:22:
74:98:a4:98:ac:3e:9d:a5:d2:ea:c1:7d:b9:bf:d2:
96:9b:50:1e:d7:18:f1:0a:34:03:a8:fd:d5:7e:71:
a7:b7:d9:bc:dc:55:08:ee:52:15:d1:71:ea:dd:79:
3d:25:df:86:d1:5a:16:2e:98:5b:12:96:40:5b:dd:
fa:0b:0f:d4:9f:96:e5:54:5c:d5:c5:9c:5f:91:6c:
0d:89:3b:5a:19:de:ff:44:67:a0:0f:2f:dd:42:51:
63:1d:7c:49:82:5b:fc:02:4f:46:b1:6b:d5:94:f3:
3b:79:dc:58:7f:85:31:e6:e5:88:30:7f:75:a8:10:
2d:d3:7b:8d:b1:53:d8:11:64:c1:b0:72:05:b1:1a:
ba:7a:19:d8:c4:50:64:ac:4f:8b:d2:f5:be:6d:27:
70:a9:7d:28:c5:02:e1:65:b9:e7:02:ba:f2:7f:44:
ca:da:08:c5:4c:99:44:3e:21:07:c1:10:17:69:a9:
ee:3e:e4:f2:39:29:95:c9:7f:a7:07:40:6e:04:93:
13:13:7b:f1:9b:23:9b:b3:1c:8b:92:a5:88:5a:49:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:97:C9:F0:6D:6C:A4:A2:AF:D1:90:50:2A:6F:75:20:03:EC:5F:99
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/i5fJ8G1spKKv0ZBQKm91IAPsX5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.58.0/23
Signature Algorithm: sha256WithRSAEncryption
55:fe:1f:e8:7e:18:a6:96:ee:67:07:09:f0:fb:66:a6:0a:54:
d3:a0:99:82:4b:fc:8d:a8:b5:f8:a8:83:21:cc:f5:9a:04:ab:
79:b6:4d:cc:8a:eb:20:ef:13:9c:30:f9:00:91:93:a9:6b:fc:
01:e4:8e:b1:fa:ee:7c:32:f7:18:b2:9c:20:10:3b:22:a9:09:
1a:87:f8:a1:1c:81:0b:74:3a:a3:e3:2d:38:b0:f8:a8:2d:b3:
de:60:14:a2:29:a6:67:36:e2:1b:2a:23:bc:fd:5a:7e:8d:1e:
1a:5b:cd:88:54:cf:4a:fd:58:8f:6f:ba:f2:35:d2:99:46:8f:
35:8f:b7:14:c9:a3:e0:68:ee:87:ce:a1:44:69:71:17:d8:b2:
88:07:70:54:4b:65:6d:84:8a:bb:d9:18:03:ac:36:59:6c:2b:
28:52:b9:e8:cf:ee:2f:92:69:05:93:a7:88:74:35:d3:10:b5:
8d:35:6e:30:b3:81:8c:b0:e4:38:e1:a8:bb:ec:69:fe:f7:df:
10:a3:1d:fb:ab:89:06:59:66:ed:ae:b4:a8:52:af:33:8d:ed:
97:80:ab:d8:f4:2e:fe:00:d0:04:d2:c8:3f:af:e6:dc:5a:63:
e0:f0:fc:0d:06:ff:9c:a4:5a:c3:86:9e:65:07:b9:05:9c:ff:
9d:a6:03:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYL4GQSCh+CHpN3P5Ebe7XDmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIwOTAxMDgwOTI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yjk3YzlmMDZkNmNhNGEyYWZkMTkwNTAyYTZmNzUyMDAzZWM1Zjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzAxUsoa9yCXk21yBPTZbsJXnkim
CRu6pV5kptcV7lT0HCk2SzTWzt0wSyJ0mKSYrD6dpdLqwX25v9KWm1Ae1xjxCjQD
qP3VfnGnt9m83FUI7lIV0XHq3Xk9Jd+G0VoWLphbEpZAW936Cw/Un5blVFzVxZxf
kWwNiTtaGd7/RGegDy/dQlFjHXxJglv8Ak9GsWvVlPM7edxYf4Ux5uWIMH91qBAt
03uNsVPYEWTBsHIFsRq6ehnYxFBkrE+L0vW+bSdwqX0oxQLhZbnnArryf0TK2gjF
TJlEPiEHwRAXaanuPuTyOSmVyX+nB0BuBJMTE3vxmyObsxyLkqWIWkl++wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIuXyfBtbKSir9GQUCpvdSAD7F+ZMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvaTVmSjhHMXNwS0t2MFpCUUttOTFJQVBzWDVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWXQ6MA0G
CSqGSIb3DQEBCwUAA4IBAQBV/h/ofhimlu5nBwnw+2amClTToJmCS/yNqLX4qIMh
zPWaBKt5tk3Miusg7xOcMPkAkZOpa/wB5I6x+u58MvcYspwgEDsiqQkah/ihHIEL
dDqj4y04sPioLbPeYBSiKaZnNuIbKiO8/Vp+jR4aW82IVM9K/ViPb7ryNdKZRo81
j7cUyaPgaO6HzqFEaXEX2LKIB3BUS2VthIq72RgDrDZZbCsoUrnoz+4vkmkFk6eI
dDXTELWNNW4ws4GMsOQ44ai77Gn+998Qox37q4kGWWbtrrSoUq8zje2XgKvY9C7+
ANAE0sg/r+bcWmPg8PwNBv+cpFrDhp5lB7kFnP+dpgPl
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org