Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pvG3K7AOIOwLRase7wlcn_X1Dko.roa
File: pvG3K7AOIOwLRase7wlcn_X1Dko.roa (raw, json)
Hash identifier: kEQ4j5V8xsw5vE1aLH0TAIsRXLMUuX6GgwJ9/t+DGX4=
Subject key identifier: A6:F1:B7:2B:B0:0E:20:EC:0B:45:AB:1E:EF:09:5C:9F:F5:F5:0E:4A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 099B9962
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pvG3K7AOIOwLRase7wlcn_X1Dko.roa
Signing time: Thu 17 Feb 2022 12:46:12 +0000
ROA not before: Thu 17 Feb 2022 12:46:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 89.116.224.0/21 maxlen: 24
89.117.16.0/21 maxlen: 24
89.116.80.0/21 maxlen: 24
84.46.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161192290 (0x99b9962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 17 12:46:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6f1b72bb00e20ec0b45ab1eef095c9ff5f50e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:71:c4:fb:08:a7:ee:ee:31:4d:ac:2b:7e:
96:87:ff:0d:53:d1:69:08:6f:21:22:dd:9b:ee:72:
c3:ae:f1:ab:d8:4a:02:21:60:7f:4c:86:b3:ea:87:
85:90:12:27:9e:10:f2:1a:76:9d:9e:de:58:0a:4d:
28:42:65:10:55:29:30:1c:f0:51:c3:6b:d4:08:35:
81:fe:dd:87:e4:4e:04:c4:8f:a5:d6:e7:c7:93:e4:
7a:f9:42:25:68:67:a4:af:ce:06:b5:53:33:e7:3a:
ae:5e:6d:8c:51:68:55:9e:f5:b0:67:a6:91:12:a1:
85:44:52:eb:de:a3:81:3f:c5:dd:14:83:45:47:8c:
bd:7f:26:fc:49:37:66:44:c6:b4:89:b5:cf:92:6e:
6d:b1:73:73:0f:c5:f4:c5:29:01:a8:e1:94:e8:89:
49:d0:01:22:5b:21:66:24:b8:bd:52:b2:b1:42:b6:
ba:cb:0a:45:fd:0c:af:76:af:19:4f:87:92:7b:22:
86:68:c8:b9:06:7d:83:20:0d:4c:56:69:16:51:33:
f5:b3:5f:3a:4d:80:99:b5:a0:f1:a7:c9:13:a6:b9:
d6:5a:c7:9e:1e:9a:dc:9d:cd:0c:c1:41:b1:b3:81:
f9:4c:f8:01:4e:6b:52:36:36:6c:05:d0:6f:fb:44:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F1:B7:2B:B0:0E:20:EC:0B:45:AB:1E:EF:09:5C:9F:F5:F5:0E:4A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/pvG3K7AOIOwLRase7wlcn_X1Dko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.236.0/22
89.116.80.0/21
89.116.224.0/21
89.117.16.0/21
Signature Algorithm: sha256WithRSAEncryption
35:90:79:bd:b5:1f:37:3c:d0:8d:a6:96:ea:af:f5:e5:93:fb:
19:e9:08:b6:58:8c:5a:83:41:31:84:78:12:f0:35:1c:4d:25:
2b:7f:ec:72:7e:59:5a:fa:16:33:e6:2d:b3:78:52:b2:18:84:
a8:95:49:14:b7:2f:d2:d3:b7:5b:e4:37:f0:5d:c8:6a:ca:25:
dd:1e:8a:a6:6c:99:25:fa:d2:1f:b0:4c:a2:56:58:54:4d:de:
7b:8b:82:ea:c8:1d:2a:10:cb:24:57:6c:3b:61:6c:24:88:48:
1a:63:2c:bf:a9:16:2f:4a:70:fb:c9:9c:66:6d:be:9d:ca:b5:
e5:3c:20:61:c9:86:9e:7e:00:71:7a:c2:56:a0:ec:cc:1a:d4:
df:68:2c:58:c3:da:a6:a3:72:66:5f:d6:42:0e:f9:c5:aa:96:
b7:ae:8c:1f:83:d3:78:cb:8d:11:bc:a7:33:62:47:5f:fd:45:
24:02:5c:70:9b:9f:ce:20:84:64:04:f7:bf:ef:b9:94:38:38:
01:a2:c3:83:f9:ec:27:68:b2:d8:31:2d:d9:40:76:70:46:ff:
30:96:00:05:6a:71:25:a1:51:78:ff:be:6e:d9:4f:ce:8d:b2:
74:45:2f:99:ec:4b:c9:6d:49:d4:37:77:70:39:f5:6f:37:b3:
29:17:9c:8f
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECZuZYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDIx
NzEyNDYxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTZmMWI3MmJiMDBl
MjBlYzBiNDVhYjFlZWYwOTVjOWZmNWY1MGU0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANW7ccT7CKfu7jFNrCt+lof/DVPRaQhvISLdm+5yw67xq9hK
AiFgf0yGs+qHhZASJ54Q8hp2nZ7eWApNKEJlEFUpMBzwUcNr1Ag1gf7dh+ROBMSP
pdbnx5PkevlCJWhnpK/OBrVTM+c6rl5tjFFoVZ71sGemkRKhhURS696jgT/F3RSD
RUeMvX8m/Ek3ZkTGtIm1z5JubbFzcw/F9MUpAajhlOiJSdABIlshZiS4vVKysUK2
ussKRf0Mr3avGU+HknsihmjIuQZ9gyANTFZpFlEz9bNfOk2AmbWg8afJE6a51lrH
nh6a3J3NDMFBsbOB+Uz4AU5rUjY2bAXQb/tEn3cCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSm8bcrsA4g7AtFqx7vCVyf9fUOSjAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L3B2RzNLN0FPSU93TFJhc2U3d2xjbl9YMURrby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAlQu7AMEA1l0UAMEA1l04AMEA1l1
EDANBgkqhkiG9w0BAQsFAAOCAQEANZB5vbUfNzzQjaaW6q/15ZP7GekItliMWoNB
MYR4EvA1HE0lK3/scn5ZWvoWM+Yts3hSshiEqJVJFLcv0tO3W+Q38F3Iasol3R6K
pmyZJfrSH7BMolZYVE3ee4uC6sgdKhDLJFdsO2FsJIhIGmMsv6kWL0pw+8mcZm2+
ncq15TwgYcmGnn4AcXrCVqDszBrU32gsWMPapqNyZl/WQg75xaqWt66MH4PTeMuN
EbynM2JHX/1FJAJccJufziCEZAT3v++5lDg4AaLDg/nsJ2iy2DEt2UB2cEb/MJYA
BWpxJaFReP++btlPzo2ydEUvmexLyW1J1Dd3cDn1bzezKRecjw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org