Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/r3rCrlvcwF_cjYXHWkOcUH1eZRE.roa
File: r3rCrlvcwF_cjYXHWkOcUH1eZRE.roa (raw, json)
Hash identifier: bQ2PJFGEDmGlh30GBf+EAlA77q4MYXpdvbSHbo4V/X8=
Subject key identifier: AF:7A:C2:AE:5B:DC:C0:5F:DC:8D:85:C7:5A:43:9C:50:7D:5E:65:11
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0A418BC0
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/r3rCrlvcwF_cjYXHWkOcUH1eZRE.roa
Signing time: Sun 10 Apr 2022 17:45:42 +0000
ROA not before: Sun 10 Apr 2022 17:45:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19120
IP address blocks: 89.117.104.0/22 maxlen: 24
89.116.180.0/22 maxlen: 24
89.116.72.0/22 maxlen: 24
89.116.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172067776 (0xa418bc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Apr 10 17:45:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af7ac2ae5bdcc05fdc8d85c75a439c507d5e6511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ff:2f:cd:f0:a9:e0:06:2e:43:47:0a:fa:c1:
ab:76:50:a9:a1:70:5d:53:f8:74:77:6f:35:bb:99:
c9:0a:cf:8e:cd:a0:2c:45:ad:13:5d:6a:bd:53:81:
55:a2:b0:c3:f0:56:aa:ad:10:fc:be:fc:24:67:95:
44:31:ae:50:ad:ec:65:26:86:2f:67:fe:ff:1e:c0:
ab:98:12:ce:19:54:2f:27:0d:7b:57:b9:3b:8a:ef:
08:ff:6e:e6:a3:90:46:3a:6a:e1:6a:49:68:b9:fb:
e2:ee:a8:46:f9:70:3d:1e:1c:f7:97:7c:5c:a9:40:
a9:3d:09:b8:46:2a:fc:48:18:90:9a:7d:44:ce:06:
fd:31:e6:07:d7:be:62:6f:09:d9:a7:b1:7b:2f:63:
b5:67:66:4b:a0:bf:7d:e4:08:4d:9c:cc:32:12:eb:
c1:06:80:07:d7:64:d8:c8:8a:1c:bd:43:bf:39:f1:
3b:b3:2c:a3:0a:0b:bb:6b:a1:22:cd:29:37:e9:cf:
08:29:4e:e5:35:45:08:c8:15:7b:9c:fe:1c:98:14:
98:96:f8:6e:9d:4e:93:07:56:29:89:e6:92:17:40:
3e:87:4e:29:e5:86:9f:e8:b5:91:56:00:1f:cc:08:
47:b0:da:47:3e:f4:8b:2f:cd:3a:18:ad:03:6b:aa:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7A:C2:AE:5B:DC:C0:5F:DC:8D:85:C7:5A:43:9C:50:7D:5E:65:11
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/r3rCrlvcwF_cjYXHWkOcUH1eZRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.72.0/22
89.116.180.0/22
89.116.212.0/22
89.117.104.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:fd:e7:c7:43:2c:69:cc:4e:f1:ab:9e:93:88:c2:7c:35:6b:
4b:22:6c:22:07:f0:4f:15:bc:15:53:45:cd:47:37:2b:eb:e0:
96:47:c0:6d:fd:07:f7:bc:24:65:37:1e:61:db:2f:6d:a6:22:
cd:83:99:d0:22:47:01:e9:f0:34:c5:6e:9e:30:a6:6c:81:f1:
ea:c0:73:04:20:22:e3:3c:f6:63:f6:ee:a7:ce:1f:fd:b9:86:
47:4e:3f:3c:84:a9:6b:75:f3:0e:ff:f8:e3:b2:3f:31:00:12:
fd:2f:8d:69:19:82:cd:84:14:34:2e:a2:d6:fe:92:16:a7:d7:
c3:fe:62:2f:71:cf:d0:ec:6e:97:d0:66:d8:82:7b:da:2a:5d:
78:db:b1:e7:9a:b5:80:b9:d7:1c:82:f4:82:0f:e1:67:86:2f:
f2:fa:eb:20:93:8f:f1:7b:5e:bd:1f:cb:7a:62:97:94:c3:c1:
2d:90:90:b7:53:6b:d5:b3:39:a8:a3:c1:fd:ee:06:00:7a:ae:
25:55:9a:e3:f6:b2:c1:21:e1:aa:82:ae:57:99:e1:45:40:05:
95:75:4c:e2:19:e7:07:6d:2f:5f:10:a9:34:a8:52:08:de:7a:
10:09:96:8e:e0:f4:4f:fc:f3:7b:4f:c8:4e:d3:bf:44:14:45:
ef:b2:34:28
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECkGLwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDQx
MDE3NDU0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWY3YWMyYWU1YmRj
YzA1ZmRjOGQ4NWM3NWE0MzljNTA3ZDVlNjUxMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMz/L83wqeAGLkNHCvrBq3ZQqaFwXVP4dHdvNbuZyQrPjs2g
LEWtE11qvVOBVaKww/BWqq0Q/L78JGeVRDGuUK3sZSaGL2f+/x7Aq5gSzhlULycN
e1e5O4rvCP9u5qOQRjpq4WpJaLn74u6oRvlwPR4c95d8XKlAqT0JuEYq/EgYkJp9
RM4G/THmB9e+Ym8J2aexey9jtWdmS6C/feQITZzMMhLrwQaAB9dk2MiKHL1Dvznx
O7MsowoLu2uhIs0pN+nPCClO5TVFCMgVe5z+HJgUmJb4bp1OkwdWKYnmkhdAPodO
KeWGn+i1kVYAH8wIR7DaRz70iy/NOhitA2uqbrMCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSvesKuW9zAX9yNhcdaQ5xQfV5lETAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L3IzckNybHZjd0ZfY2pZWEhXa09jVUgxZVpSRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAll0SAMEAll0tAMEAll01AMEAll1
aDANBgkqhkiG9w0BAQsFAAOCAQEAb/3nx0MsacxO8auek4jCfDVrSyJsIgfwTxW8
FVNFzUc3K+vglkfAbf0H97wkZTceYdsvbaYizYOZ0CJHAenwNMVunjCmbIHx6sBz
BCAi4zz2Y/bup84f/bmGR04/PISpa3XzDv/447I/MQAS/S+NaRmCzYQUNC6i1v6S
FqfXw/5iL3HP0Oxul9Bm2IJ72ipdeNux55q1gLnXHIL0gg/hZ4Yv8vrrIJOP8Xte
vR/LemKXlMPBLZCQt1Nr1bM5qKPB/e4GAHquJVWa4/aywSHhqoKuV5nhRUAFlXVM
4hnnB20vXxCpNKhSCN56EAmWjuD0T/zze0/ITtO/RBRF77I0KA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org