Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/n-NGY7ZKhvvD9Je8eTKDhawpQLk.roa
File: n-NGY7ZKhvvD9Je8eTKDhawpQLk.roa (raw, json)
Hash identifier: S3z3aWwBHHJ8hvKf3p1J+6OXcrEaxspWKEKIsWM7y4Q=
Subject key identifier: 9F:E3:46:63:B6:4A:86:FB:C3:F4:97:BC:79:32:83:85:AC:29:40:B9
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AEE0D88
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/n-NGY7ZKhvvD9Je8eTKDhawpQLk.roa
Signing time: Wed 18 May 2022 15:58:17 +0000
ROA not before: Wed 18 May 2022 15:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 89.117.72.0/21 maxlen: 24
89.116.123.0/24 maxlen: 24
89.117.88.0/22 maxlen: 24
89.117.96.0/22 maxlen: 24
89.116.140.0/24 maxlen: 24
89.117.12.0/23 maxlen: 24
89.117.24.0/23 maxlen: 24
89.116.76.0/24 maxlen: 24
86.38.216.0/22 maxlen: 24
89.116.91.0/24 maxlen: 24
86.38.232.0/24 maxlen: 24
89.116.250.0/24 maxlen: 24
89.116.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183373192 (0xaee0d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 18 15:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fe34663b64a86fbc3f497bc79328385ac2940b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:b5:6c:87:86:29:b6:96:a9:07:6f:ff:25:
fb:91:94:82:f7:15:8c:20:af:a7:cb:d5:c6:05:8e:
fa:3e:25:1c:a8:b8:17:90:9f:34:dd:41:af:8f:61:
e4:52:f7:9b:63:34:63:6b:fa:42:35:1c:9f:58:ab:
f4:c1:c4:73:bd:15:e9:1a:5c:7a:ce:9b:d7:48:df:
f6:4c:1c:4c:69:52:90:a9:c9:ca:6b:ba:e8:12:f1:
5a:2f:b0:97:0d:0b:81:7a:a8:42:39:22:68:51:35:
dd:9f:38:ba:b7:fe:a3:df:81:6d:0a:9a:ce:fa:fa:
80:af:e6:46:63:c4:78:a4:d7:28:e2:c7:3c:69:68:
45:94:e8:97:6a:a3:8d:ed:bd:5e:30:6f:9b:ae:24:
ca:bc:cd:d9:43:b9:d5:94:5e:3d:ca:ba:9d:c8:e3:
f1:6a:16:04:3f:5a:9a:ad:4f:62:fe:e9:ec:01:0d:
39:82:19:af:b6:5b:d0:ce:24:0e:f2:5f:1d:99:b0:
19:f8:6d:b5:95:42:6a:85:18:fa:e1:43:6e:db:e2:
9b:c5:10:09:56:c1:e6:e4:dd:c2:13:36:28:c1:2b:
3c:df:11:54:1a:a3:47:b7:1b:5c:ce:94:e3:e4:05:
b6:b8:33:40:25:d0:0d:d2:af:f4:d7:f6:19:3b:44:
3d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:46:63:B6:4A:86:FB:C3:F4:97:BC:79:32:83:85:AC:29:40:B9
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/n-NGY7ZKhvvD9Je8eTKDhawpQLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.216.0/22
86.38.232.0/24
89.116.76.0/24
89.116.91.0/24
89.116.123.0/24
89.116.140.0/24
89.116.202.0/24
89.116.250.0/24
89.117.12.0/23
89.117.24.0/23
89.117.72.0/21
89.117.88.0/22
89.117.96.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:54:eb:31:11:0e:93:da:fc:09:88:28:cf:6e:d6:66:97:c1:
47:8c:b0:dd:76:3e:88:8b:7f:d3:3a:4c:e6:87:b2:c7:f6:c7:
3b:78:d8:b1:46:68:3d:1d:3c:f9:ff:55:97:c1:4a:a8:19:c8:
4d:7c:b3:1c:37:da:4f:fe:31:82:05:26:18:d4:19:3d:85:7f:
cc:ed:a9:89:30:d8:ff:cc:8e:0a:db:10:0f:63:49:5f:d4:93:
48:9e:bb:84:43:a1:86:56:93:9d:b4:b0:ec:cb:81:78:fb:79:
43:74:2d:3b:45:6b:c9:9f:05:8a:68:03:d5:7f:a3:cf:50:38:
95:f8:be:b2:2b:3f:56:34:d5:9f:70:45:1a:92:9e:81:c7:41:
4c:33:28:5f:39:50:72:50:5f:08:63:d2:3a:94:66:98:9b:20:
40:02:14:28:92:1a:f7:96:97:14:c1:3e:8a:6e:64:2a:c9:28:
be:08:07:cc:2c:77:8f:5a:91:0f:5f:cb:d8:63:d3:42:83:08:
35:07:9b:4e:1a:f7:63:ba:53:c9:ab:a8:f8:29:d0:11:6a:2d:
a0:7c:86:8d:69:2c:ab:48:73:14:ee:f9:0b:6a:0f:f3:8a:21:
56:f0:1d:f2:06:c1:38:a4:78:f0:25:a9:9e:12:19:1e:fb:61:
08:a1:64:5d
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIECu4NiDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDUx
ODE1NTgxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWZlMzQ2NjNiNjRh
ODZmYmMzZjQ5N2JjNzkzMjgzODVhYzI5NDBiOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMT9tWyHhim2lqkHb/8l+5GUgvcVjCCvp8vVxgWO+j4lHKi4
F5CfNN1Br49h5FL3m2M0Y2v6QjUcn1ir9MHEc70V6Rpces6b10jf9kwcTGlSkKnJ
ymu66BLxWi+wlw0LgXqoQjkiaFE13Z84urf+o9+BbQqazvr6gK/mRmPEeKTXKOLH
PGloRZTol2qjje29XjBvm64kyrzN2UO51ZRePcq6ncjj8WoWBD9amq1PYv7p7AEN
OYIZr7Zb0M4kDvJfHZmwGfhttZVCaoUY+uFDbtvim8UQCVbB5uTdwhM2KMErPN8R
VBqjR7cbXM6U4+QFtrgzQCXQDdKv9Nf2GTtEPeUCAwEAAaOCAlEwggJNMB0GA1Ud
DgQWBBSf40ZjtkqG+8P0l7x5MoOFrClAuTAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L24tTkdZN1pLaHZ2RDlKZThlVEtEaGF3cFFMay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBn
BggrBgEFBQcBBwEB/wRYMFYwVAQCAAEwTgMEAlYm2AMEAFYm6AMEAFl0TAMEAFl0
WwMEAFl0ewMEAFl0jAMEAFl0ygMEAFl0+gMEAVl1DAMEAVl1GAMEA1l1SAMEAll1
WAMEAll1YDANBgkqhkiG9w0BAQsFAAOCAQEApFTrMREOk9r8CYgoz27WZpfBR4yw
3XY+iIt/0zpM5oeyx/bHO3jYsUZoPR08+f9Vl8FKqBnITXyzHDfaT/4xggUmGNQZ
PYV/zO2piTDY/8yOCtsQD2NJX9STSJ67hEOhhlaTnbSw7MuBePt5Q3QtO0VryZ8F
imgD1X+jz1A4lfi+sis/VjTVn3BFGpKegcdBTDMoXzlQclBfCGPSOpRmmJsgQAIU
KJIa95aXFME+im5kKskovggHzCx3j1qRD1/L2GPTQoMINQebThr3Y7pTyauo+CnQ
EWotoHyGjWksq0hzFO75C2oP84ohVvAd8gbBOKR48CWpnhIZHvthCKFkXQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org