Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/mAMLXRs5siI3C_9DyC5OLUrAQ3E.roa
File: mAMLXRs5siI3C_9DyC5OLUrAQ3E.roa (raw, json)
Hash identifier: jR3JAvtoM6sZ5H+pqS0uagbxLT+8RqkbdGdovpFY/v4=
Subject key identifier: 98:03:0B:5D:1B:39:B2:22:37:0B:FF:43:C8:2E:4E:2D:4A:C0:43:71
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A8C415D
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/mAMLXRs5siI3C_9DyC5OLUrAQ3E.roa
Signing time: Sun 01 May 2022 07:01:15 +0000
ROA not before: Sun 01 May 2022 07:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 89.116.140.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176963933 (0xa8c415d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 1 07:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98030b5d1b39b222370bff43c82e4e2d4ac04371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:60:fe:24:a0:d2:05:ca:ae:f3:d4:25:57:
36:0b:cb:9b:cc:d4:80:26:7f:94:eb:66:30:d9:f5:
bd:69:b5:48:78:2d:28:f7:29:21:31:e0:e7:7e:38:
10:d8:5f:90:01:e8:22:f3:97:44:e0:e3:cf:81:52:
75:ff:8f:26:95:49:09:87:a9:ee:be:2e:c4:a7:e7:
b9:a8:30:01:69:99:06:a7:36:8f:2c:9c:b2:ea:73:
36:ac:5e:2a:f7:b2:bc:74:b0:ed:fe:4c:0b:3b:b5:
3c:7d:6d:ef:7e:83:3a:f6:6f:ad:6a:8f:d5:ff:3c:
6c:73:2c:8d:d4:2b:b2:98:fc:8d:76:88:99:6f:53:
c9:90:d1:1d:81:be:27:45:49:17:fe:fa:60:0a:c8:
d4:ea:15:48:ce:e8:6b:08:5d:b3:1d:80:e8:3e:82:
c4:12:84:63:db:72:e9:43:34:ac:4f:2a:13:da:24:
27:50:20:79:42:5e:13:56:73:7b:fe:92:d2:9d:34:
b6:3f:e2:53:b0:d5:aa:70:c4:b3:6d:f2:f8:63:b6:
e1:1c:86:63:54:30:dd:2c:cc:7c:20:9e:a7:db:08:
e2:2f:af:58:62:46:f5:9e:3b:03:5b:7f:c8:20:a2:
5e:40:f8:b6:0e:14:65:ee:08:3a:f2:a3:eb:55:53:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:03:0B:5D:1B:39:B2:22:37:0B:FF:43:C8:2E:4E:2D:4A:C0:43:71
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/mAMLXRs5siI3C_9DyC5OLUrAQ3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.140.0/24
89.116.202.0/24
89.116.250.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ba:9d:9e:fa:cd:f0:7a:f7:f3:25:6c:c3:4f:c3:84:40:a6:
30:ce:5a:4a:a2:04:2f:36:3d:68:a3:2d:8d:16:d7:bd:0f:89:
89:c9:6e:f2:f8:7b:ec:e0:50:36:14:fb:71:9a:e8:fa:8b:cb:
56:b7:94:cf:4a:cf:1a:11:5c:07:f9:1d:13:50:68:63:86:bd:
55:c3:a5:92:e7:fc:a1:47:b9:5a:a1:45:02:8b:8e:56:32:40:
c7:0d:1c:13:bc:ba:89:01:53:27:35:93:3a:b3:fb:9f:63:75:
4a:c5:20:08:20:1c:7e:87:8a:cb:73:36:a2:c8:6b:d8:3e:d3:
a3:6c:f2:4a:29:fc:46:b9:b2:39:f3:03:8d:46:c8:74:05:09:
f0:0a:17:c3:61:50:bd:e3:25:62:3d:d9:18:55:30:d3:40:d3:
c4:ce:d6:a0:02:10:15:8f:64:58:91:3c:8f:f7:f9:44:41:7f:
70:af:b1:86:ef:09:8f:36:f0:bf:2c:d8:76:5a:52:35:7c:e1:
63:c2:3e:db:01:50:f3:be:9e:90:ea:68:e1:de:63:2a:1e:6f:
92:c5:42:36:db:6c:fe:22:65:a8:b0:40:9c:39:a0:76:1a:a7:
1a:9e:ee:ee:e9:94:af:2e:ee:9b:62:76:4f:66:f4:c4:f8:41:
81:d3:fd:a5
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECoxBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDUw
MTA3MDExNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTgwMzBiNWQxYjM5
YjIyMjM3MGJmZjQzYzgyZTRlMmQ0YWMwNDM3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL6fYP4koNIFyq7z1CVXNgvLm8zUgCZ/lOtmMNn1vWm1SHgt
KPcpITHg5344ENhfkAHoIvOXRODjz4FSdf+PJpVJCYep7r4uxKfnuagwAWmZBqc2
jyycsupzNqxeKveyvHSw7f5MCzu1PH1t736DOvZvrWqP1f88bHMsjdQrspj8jXaI
mW9TyZDRHYG+J0VJF/76YArI1OoVSM7oawhdsx2A6D6CxBKEY9ty6UM0rE8qE9ok
J1AgeUJeE1Zze/6S0p00tj/iU7DVqnDEs23y+GO24RyGY1Qw3SzMfCCep9sI4i+v
WGJG9Z47A1t/yCCiXkD4tg4UZe4IOvKj61VTEisCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSYAwtdGzmyIjcL/0PILk4tSsBDcTAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L21BTUxYUnM1c2lJM0NfOUR5QzVPTFVyQVEzRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFl0jAMEAFl0ygMEAFl0+jANBgkq
hkiG9w0BAQsFAAOCAQEAVrqdnvrN8Hr38yVsw0/DhECmMM5aSqIELzY9aKMtjRbX
vQ+Jiclu8vh77OBQNhT7cZro+ovLVreUz0rPGhFcB/kdE1BoY4a9VcOlkuf8oUe5
WqFFAouOVjJAxw0cE7y6iQFTJzWTOrP7n2N1SsUgCCAcfoeKy3M2oshr2D7To2zy
Sin8RrmyOfMDjUbIdAUJ8AoXw2FQveMlYj3ZGFUw00DTxM7WoAIQFY9kWJE8j/f5
REF/cK+xhu8JjzbwvyzYdlpSNXzhY8I+2wFQ876ekOpo4d5jKh5vksVCNtts/iJl
qLBAnDmgdhqnGp7u7umUry7um2J2T2b0xPhBgdP9pQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:12 2025 by rpki-client