Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/nlB5jja9ss3enTsIonhQV8zpLhc.roa
File: nlB5jja9ss3enTsIonhQV8zpLhc.roa (raw, json)
Hash identifier: 1ej9R/Voog0Pv6I7rOT0ZSdJiVJHOFLyTnQwm98CBM4=
Subject key identifier: 9E:50:79:8E:36:BD:B2:CD:DE:9D:3B:08:A2:78:50:57:CC:E9:2E:17
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0183E56BD38FF325E48B504DB54DD448BF37
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/nlB5jja9ss3enTsIonhQV8zpLhc.roa
Signing time: Mon 17 Oct 2022 10:09:52 +0000
ROA not before: Mon 17 Oct 2022 10:09:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34779
IP address blocks: 89.116.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:6b:d3:8f:f3:25:e4:8b:50:4d:b5:4d:d4:48:bf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 17 10:09:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e50798e36bdb2cdde9d3b08a2785057cce92e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:41:c1:b7:b2:49:0a:cf:7d:82:81:86:7a:d7:
4b:15:68:f8:2c:22:00:ec:f0:59:ad:7f:30:72:ae:
a7:72:bf:c1:7d:5d:49:35:3d:f2:6f:23:94:cc:9d:
00:02:f3:74:68:ca:48:77:36:28:86:52:04:17:7b:
82:ae:9e:6b:b5:86:f8:f3:d3:d7:65:56:c9:1c:64:
bf:9e:5c:91:e6:38:8b:8a:07:18:f0:df:da:56:37:
23:0b:b6:b2:6f:5c:ec:24:a8:da:54:b1:14:4d:fb:
53:25:e8:f3:db:ac:a8:4f:a7:9b:33:60:c3:82:67:
dd:17:35:44:2e:f9:e8:c2:65:33:a2:a4:86:7f:5e:
ac:11:1a:0c:b1:8b:fa:62:4b:09:95:6b:f9:7e:2d:
c4:a9:1f:7d:3e:0a:1b:84:50:90:07:70:b7:06:66:
21:5f:0f:78:11:64:c5:e5:49:8e:dc:cd:c7:fb:5d:
97:aa:73:33:88:ea:b9:b3:e0:d7:03:c8:0d:4b:e7:
6d:b8:6f:50:f2:bb:7c:f6:54:b6:0a:0a:02:ad:ce:
e2:e2:81:30:3e:07:70:8f:5e:50:a0:8b:0c:55:c6:
8b:0c:91:d4:38:d4:c1:00:90:13:52:51:e7:31:0d:
64:70:83:87:02:09:ff:41:5f:55:32:f6:ff:be:22:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:50:79:8E:36:BD:B2:CD:DE:9D:3B:08:A2:78:50:57:CC:E9:2E:17
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/nlB5jja9ss3enTsIonhQV8zpLhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.184.0/23
Signature Algorithm: sha256WithRSAEncryption
16:ad:fb:50:4c:c7:ec:c2:5e:cd:c0:2d:82:94:5e:95:aa:b7:
a2:15:c8:cf:d1:75:72:1f:fa:72:b5:5b:72:b2:d9:b9:f8:e4:
70:f0:18:fa:eb:ac:8a:54:4c:a2:14:91:61:e3:c3:99:e0:13:
eb:97:6e:41:43:3d:d5:ab:e8:af:89:81:b9:61:ed:71:e7:82:
6a:6c:5d:dc:1c:34:b8:fc:bd:26:d7:3d:80:6d:8f:b9:4e:4c:
b5:e5:09:12:6b:1b:89:74:d0:f1:b7:d0:50:14:88:4b:9e:ea:
c5:30:b4:46:94:45:41:ab:00:fd:d4:5b:88:14:1a:70:47:54:
c5:46:05:8a:e7:d5:cd:3e:39:f2:75:fc:92:ee:85:63:66:55:
38:89:b4:63:24:09:a0:f9:84:eb:df:d2:af:6c:b6:34:4e:1c:
73:17:b3:0f:08:6d:92:a4:23:88:c0:8c:b1:26:67:9a:ea:20:
38:83:c2:27:cb:e4:0c:64:a1:c4:3d:bd:5d:c1:d5:44:0c:66:
3e:a0:36:94:4c:c4:89:fe:b3:cb:4e:67:eb:06:2f:ef:d8:30:
22:9b:b6:ea:34:4b:92:c9:9f:00:46:e3:74:e4:04:db:82:cd:
27:b2:4b:89:cc:2c:3a:f9:ab:6f:1e:b5:95:3b:97:64:24:5a:
fe:a5:8d:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPla9OP8yXki1BNtU3USL83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIxMDE3MTAwOTUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTUwNzk4ZTM2YmRiMmNkZGU5ZDNiMDhhMjc4NTA1N2NjZTkyZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0HBt7JJCs99goGGetdLFWj4LCIA
7PBZrX8wcq6ncr/BfV1JNT3ybyOUzJ0AAvN0aMpIdzYohlIEF3uCrp5rtYb489PX
ZVbJHGS/nlyR5jiLigcY8N/aVjcjC7ayb1zsJKjaVLEUTftTJejz26yoT6ebM2DD
gmfdFzVELvnowmUzoqSGf16sERoMsYv6YksJlWv5fi3EqR99PgobhFCQB3C3BmYh
Xw94EWTF5UmO3M3H+12XqnMziOq5s+DXA8gNS+dtuG9Q8rt89lS2CgoCrc7i4oEw
Pgdwj15QoIsMVcaLDJHUONTBAJATUlHnMQ1kcIOHAgn/QV9VMvb/viJ9ZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ5QeY42vbLN3p07CKJ4UFfM6S4XMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvbmxCNWpqYTlzczNlblRzSW9uaFFWOHpwTGhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWXS4MA0G
CSqGSIb3DQEBCwUAA4IBAQAWrftQTMfswl7NwC2ClF6VqreiFcjP0XVyH/pytVty
stm5+ORw8Bj666yKVEyiFJFh48OZ4BPrl25BQz3Vq+iviYG5Ye1x54JqbF3cHDS4
/L0m1z2AbY+5Tky15QkSaxuJdNDxt9BQFIhLnurFMLRGlEVBqwD91FuIFBpwR1TF
RgWK59XNPjnydfyS7oVjZlU4ibRjJAmg+YTr39KvbLY0ThxzF7MPCG2SpCOIwIyx
Jmea6iA4g8Iny+QMZKHEPb1dwdVEDGY+oDaUTMSJ/rPLTmfrBi/v2DAim7bqNEuS
yZ8ARuN05ATbgs0nskuJzCw6+atvHrWVO5dkJFr+pY3W
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org