Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wVYMjoiZpMfz77h3iKptDGLEgts.roa
File: wVYMjoiZpMfz77h3iKptDGLEgts.roa (raw, json)
Hash identifier: TWjpsbekSuJDzxQMU7u5BbaET+fL8Azpua/q8DQRcuQ=
Subject key identifier: C1:56:0C:8E:88:99:A4:C7:F3:EF:B8:77:88:AA:6D:0C:62:C4:82:DB
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01841103CDB3EA3EAC5924DF9E90EDFF31C9
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wVYMjoiZpMfz77h3iKptDGLEgts.roa
Signing time: Tue 25 Oct 2022 21:19:32 +0000
ROA not before: Tue 25 Oct 2022 21:19:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 89.116.108.0/24 maxlen: 24
89.117.188.0/24 maxlen: 24
89.116.128.0/24 maxlen: 24
89.116.237.0/24 maxlen: 24
89.116.153.0/24 maxlen: 24
89.116.154.0/24 maxlen: 24
89.117.139.0/24 maxlen: 24
89.116.190.0/24 maxlen: 24
89.117.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:11:03:cd:b3:ea:3e:ac:59:24:df:9e:90:ed:ff:31:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Oct 25 21:19:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1560c8e8899a4c7f3efb87788aa6d0c62c482db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:d7:28:63:1d:5b:c2:d4:45:a6:b2:91:3a:
a3:ee:9b:8e:b7:00:2f:91:a7:1e:a9:44:b9:66:2f:
c7:ca:55:7c:df:00:19:fb:ff:a6:f8:3f:dc:08:e3:
ae:db:82:67:90:e3:84:5e:39:e0:d7:8b:bd:1f:c2:
b1:93:a3:16:32:f1:1e:31:e9:c4:59:0b:1a:0d:7d:
e9:46:d7:22:8b:df:ee:9b:6e:3e:3a:29:e4:d7:8d:
b2:d5:ef:fe:d6:51:ad:25:f8:1c:86:db:7a:68:26:
f3:4d:51:0d:35:8b:95:7a:7c:9e:14:4c:a4:c5:3b:
9e:ef:f2:54:3b:9e:13:81:98:02:66:f8:8b:d2:78:
8e:7d:f8:8c:2f:23:76:81:36:08:99:48:3e:6d:cb:
4f:02:2f:b0:e8:91:c8:d5:38:70:f0:e6:9f:1f:1b:
9e:f9:56:85:c1:ea:9c:6a:43:5c:92:da:bd:c4:fa:
95:d5:8b:03:11:13:c6:f1:e7:4e:61:09:35:c8:b8:
04:1b:7e:75:a3:bf:10:4b:38:26:d1:1c:a9:8f:61:
b5:48:47:cb:89:cf:16:8c:13:5b:ff:8f:85:96:62:
05:88:a2:48:68:fa:8a:27:65:ec:07:83:48:9c:e5:
b1:05:88:c4:11:8f:50:c2:90:4e:95:4d:3b:5f:0f:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:56:0C:8E:88:99:A4:C7:F3:EF:B8:77:88:AA:6D:0C:62:C4:82:DB
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/wVYMjoiZpMfz77h3iKptDGLEgts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.108.0/24
89.116.128.0/24
89.116.153.0-89.116.154.255
89.116.190.0/24
89.116.237.0/24
89.117.139.0/24
89.117.157.0/24
89.117.188.0/24
Signature Algorithm: sha256WithRSAEncryption
47:96:4b:69:52:e5:1b:cd:7f:ff:4a:e2:f4:1d:56:f2:87:77:
9b:06:81:fa:07:44:2e:ae:1a:80:f6:26:51:88:f0:53:3a:6d:
d4:bb:7c:20:78:e8:18:e6:b3:75:cb:ae:58:ee:94:af:45:e8:
dc:a0:3b:08:65:2f:56:0b:7e:41:dc:fc:a2:ba:a4:d9:d1:49:
bd:dd:01:ca:9f:77:6c:ff:49:8d:a1:0a:84:ba:e2:54:55:fd:
b5:d4:fa:7e:80:8a:8b:37:75:ea:03:dc:aa:0f:a8:12:95:80:
e7:07:44:30:66:2a:14:69:f8:36:37:16:ce:1c:0d:bb:3f:20:
92:85:6f:e5:45:ac:bd:9a:fc:ac:45:9e:d3:67:58:13:4d:ea:
5f:01:ce:97:e9:b0:1c:d1:c9:73:93:e0:cb:18:6f:7e:eb:41:
5e:c0:0c:ad:b3:b9:11:2e:09:29:06:fe:b2:f3:02:32:bc:94:
ad:b5:34:c8:e3:aa:3f:ed:fe:b8:46:7d:79:4b:bc:8e:0c:a1:
49:92:d0:70:82:60:5d:9d:07:c2:e9:93:1d:ff:38:72:3c:08:
8e:0d:ba:5d:bf:69:ce:03:aa:44:41:e4:b0:c9:99:29:36:df:
22:a2:af:74:4a:f0:46:a5:b8:8c:df:f1:9a:e8:2d:bc:cd:9d:
dc:6d:98:ba
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYQRA82z6j6sWSTfnpDt/zHJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Njk4NTg1ZTVlYmQxMWM5NjljN2VkNGEzMjBlZGFmYzlk
MTc4MjIwHhcNMjIxMDI1MjExOTMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTU2MGM4ZTg4OTlhNGM3ZjNlZmI4Nzc4OGFhNmQwYzYyYzQ4MmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvXXKGMdW8LURaaykTqj7puOtwAv
kaceqUS5Zi/HylV83wAZ+/+m+D/cCOOu24JnkOOEXjng14u9H8Kxk6MWMvEeMenE
WQsaDX3pRtcii9/um24+Oink142y1e/+1lGtJfgchtt6aCbzTVENNYuVenyeFEyk
xTue7/JUO54TgZgCZviL0niOffiMLyN2gTYImUg+bctPAi+w6JHI1Thw8OafHxue
+VaFweqcakNcktq9xPqV1YsDERPG8edOYQk1yLgEG351o78QSzgm0Rypj2G1SEfL
ic8WjBNb/4+FlmIFiKJIaPqKJ2XsB4NInOWxBYjEEY9QwpBOlU07Xw/9cQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFMFWDI6ImaTH8++4d4iqbQxixILbMB8GA1UdIwQY
MBaAFMRphYXl69Eclpx+1KMg7a/J0XgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgt
OWQ2MDAxZjc4YTcwLzEvd1ZZTWpvaVpwTWZ6NzdoM2lLcHRER0xFZ3RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS81MzEwZGEtNjgyMS00NjczLTllOTgtOWQ2MDAxZjc4YTcw
LzEveEdtRmhlWHIwUnlXbkg3VW95RHRyOG5SZUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAWXRsAwQA
WXSAMAwDBABZdJkDBABZdJoDBABZdL4DBABZdO0DBABZdYsDBABZdZ0DBABZdbww
DQYJKoZIhvcNAQELBQADggEBAEeWS2lS5RvNf/9K4vQdVvKHd5sGgfoHRC6uGoD2
JlGI8FM6bdS7fCB46Bjms3XLrljulK9F6NygOwhlL1YLfkHc/KK6pNnRSb3dAcqf
d2z/SY2hCoS64lRV/bXU+n6Aios3deoD3KoPqBKVgOcHRDBmKhRp+DY3Fs4cDbs/
IJKFb+VFrL2a/KxFntNnWBNN6l8BzpfpsBzRyXOT4MsYb37rQV7ADK2zuREuCSkG
/rLzAjK8lK21NMjjqj/t/rhGfXlLvI4MoUmS0HCCYF2dB8Lpkx3/OHI8CI4Nul2/
ac4DqkRB5LDJmSk23yKir3RK8EaluIzf8ZroLbzNndxtmLo=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org