Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/qprJ44iV2-qUkglb-TdBb3pnS7E.roa
File: qprJ44iV2-qUkglb-TdBb3pnS7E.roa (raw, json)
Hash identifier: tI7elvzyzBGrAmeevP4mY2bUntNe/fYoXmpzc/cxJAM=
Subject key identifier: AA:9A:C9:E3:88:95:DB:EA:94:92:09:5B:F9:37:41:6F:7A:67:4B:B1
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0992D935
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/qprJ44iV2-qUkglb-TdBb3pnS7E.roa
Signing time: Wed 16 Feb 2022 10:52:33 +0000
ROA not before: Wed 16 Feb 2022 10:52:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142617
IP address blocks: 89.117.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160618805 (0x992d935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Feb 16 10:52:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aa9ac9e38895dbea9492095bf937416f7a674bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0d:7d:72:17:2f:b5:60:3e:7c:bf:1c:57:2e:
c8:84:16:9e:34:c3:f5:9a:05:29:d6:2e:30:b6:1d:
1d:b6:fd:ee:97:4f:c5:f2:ee:be:71:3c:e7:0b:c8:
1b:91:49:50:fc:68:ff:49:ed:52:46:9e:2f:73:1e:
81:69:3d:c3:05:92:3e:90:d1:80:a0:bd:dd:f2:a4:
41:cf:6e:e5:f2:8b:fc:19:1c:32:df:0b:5d:34:43:
3c:d4:83:17:21:dd:e6:a4:68:b8:37:c6:f1:1d:2c:
ab:e8:2e:98:8a:01:0e:30:6b:4e:d4:6b:7e:13:73:
e2:cd:8f:00:3e:51:a3:4c:37:cd:4b:47:ad:4b:71:
a1:9c:2f:78:d4:75:82:f3:1d:69:36:f3:5e:f9:ca:
57:38:f5:04:63:01:46:9d:43:ee:e6:8d:b3:00:ee:
78:df:66:64:3e:9a:bb:e6:02:3b:7b:8a:6e:73:11:
52:be:87:9d:ef:d4:c0:c9:5f:56:7d:61:39:1f:2e:
20:3d:f0:46:c5:bd:11:e4:c8:fc:91:37:f8:b4:9a:
e7:ad:47:8d:da:77:d0:c5:62:3b:a6:40:84:43:c1:
a1:a6:eb:2e:1c:5b:ee:68:04:a7:18:db:fc:70:45:
54:d5:0c:d0:05:19:44:47:8e:2e:a7:2f:07:37:5f:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9A:C9:E3:88:95:DB:EA:94:92:09:5B:F9:37:41:6F:7A:67:4B:B1
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/qprJ44iV2-qUkglb-TdBb3pnS7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.144.0/21
Signature Algorithm: sha256WithRSAEncryption
49:9d:0c:19:48:1f:a1:0d:d3:ca:61:e8:f7:50:bf:89:85:0b:
20:21:67:03:6c:fd:92:b0:39:6a:34:02:3c:06:e6:79:25:30:
82:8d:59:dc:84:a6:66:74:85:c1:63:12:6e:cf:b2:04:9c:90:
93:e7:32:6e:01:b1:7e:63:d2:6f:90:d1:91:66:3f:c8:f5:a8:
a7:7b:57:d4:90:0f:e6:ce:29:24:85:63:3b:8d:03:94:b6:df:
a9:2b:16:97:5a:d3:1f:92:aa:5c:f5:90:19:b5:5a:7a:7d:d5:
14:2b:23:65:6f:4b:ff:2a:a9:3e:eb:ee:1d:98:73:76:63:90:
4c:50:c8:ed:66:a0:e3:60:c0:b7:21:76:02:52:8b:da:8a:cf:
c5:c2:33:bd:20:29:ac:a1:16:cd:28:38:06:79:28:84:e5:e9:
4f:f2:1d:87:1b:ae:0c:9e:04:87:7e:38:81:91:71:e5:cf:46:
6e:02:10:df:ad:57:f4:79:13:b8:39:8e:f6:a7:61:ba:e8:f9:
95:86:ea:ec:78:4c:85:d3:47:77:a8:25:eb:04:16:5d:be:fb:
17:b4:b9:a3:ba:04:53:9f:83:2b:7c:63:0a:4f:3b:d3:b2:04:
c4:4e:c2:3e:f2:78:39:80:89:5f:8c:99:12:a2:bd:3c:49:d5:
fb:5b:2d:92
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECZLZNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDIx
NjEwNTIzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWE5YWM5ZTM4ODk1
ZGJlYTk0OTIwOTViZjkzNzQxNmY3YTY3NGJiMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKwNfXIXL7VgPny/HFcuyIQWnjTD9ZoFKdYuMLYdHbb97pdP
xfLuvnE85wvIG5FJUPxo/0ntUkaeL3MegWk9wwWSPpDRgKC93fKkQc9u5fKL/Bkc
Mt8LXTRDPNSDFyHd5qRouDfG8R0sq+gumIoBDjBrTtRrfhNz4s2PAD5Ro0w3zUtH
rUtxoZwveNR1gvMdaTbzXvnKVzj1BGMBRp1D7uaNswDueN9mZD6au+YCO3uKbnMR
Ur6Hne/UwMlfVn1hOR8uID3wRsW9EeTI/JE3+LSa561Hjdp30MViO6ZAhEPBoabr
Lhxb7mgEpxjb/HBFVNUM0AUZREeOLqcvBzdfc+sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSqmsnjiJXb6pSSCVv5N0FvemdLsTAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L3Fwcko0NGlWMi1xVWtnbGItVGRCYjNwblM3RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1l1kDANBgkqhkiG9w0BAQsFAAOC
AQEASZ0MGUgfoQ3TymHo91C/iYULICFnA2z9krA5ajQCPAbmeSUwgo1Z3ISmZnSF
wWMSbs+yBJyQk+cybgGxfmPSb5DRkWY/yPWop3tX1JAP5s4pJIVjO40DlLbfqSsW
l1rTH5KqXPWQGbVaen3VFCsjZW9L/yqpPuvuHZhzdmOQTFDI7Wag42DAtyF2AlKL
2orPxcIzvSAprKEWzSg4BnkohOXpT/IdhxuuDJ4Eh344gZFx5c9GbgIQ361X9HkT
uDmO9qdhuuj5lYbq7HhMhdNHd6gl6wQWXb77F7S5o7oEU5+DK3xjCk8707IExE7C
PvJ4OYCJX4yZEqK9PEnV+1stkg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org