Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Dzt8nInG9ygUNseWOcxvFUJFsvU.roa
File: Dzt8nInG9ygUNseWOcxvFUJFsvU.roa (raw, json)
Hash identifier: so7cXtA8eWgZo55H8A3FfEjM3nOrLjZRjzox2vLm4V8=
Subject key identifier: 0F:3B:7C:9C:89:C6:F7:28:14:36:C7:96:39:CC:6F:15:42:45:B2:F5
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AD0DF18
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Dzt8nInG9ygUNseWOcxvFUJFsvU.roa
Signing time: Thu 12 May 2022 10:50:02 +0000
ROA not before: Thu 12 May 2022 10:50:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 89.116.60.0/22 maxlen: 24
89.117.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181460760 (0xad0df18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 12 10:50:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f3b7c9c89c6f7281436c79639cc6f154245b2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:5b:2b:cb:27:af:d5:fa:54:d9:69:4c:22:
b4:91:ae:64:69:f3:ef:3c:3e:47:eb:14:77:04:03:
3c:48:b7:c0:19:8f:2b:c5:e5:13:dc:ce:c8:46:ec:
55:ba:5d:b8:41:01:03:78:c8:9d:bd:17:bc:e4:5e:
77:af:a1:aa:38:1a:23:60:eb:f4:ca:fa:47:c6:e4:
21:84:fb:d0:11:d9:87:75:77:09:b0:11:7f:d0:fb:
4c:fc:bb:e7:52:a0:c5:2f:33:bb:8e:a0:19:37:ee:
78:93:15:87:8d:1b:e8:79:b0:3d:0f:46:a7:3c:50:
ae:e7:55:00:6d:e8:60:8f:20:ee:77:ba:86:8e:13:
b9:b5:4f:1a:6b:ba:60:02:25:dc:aa:9b:11:11:96:
d2:14:c4:0a:8b:25:50:96:42:ce:d3:4b:0a:cc:60:
18:c7:e6:b4:4d:e2:df:bb:6f:85:1d:33:6a:53:55:
81:bc:40:e5:93:5b:06:ca:d9:e4:76:d1:f3:b6:33:
0d:30:37:5c:85:7a:9b:df:9a:4a:ac:35:ed:b9:ab:
5a:58:40:87:78:9c:54:53:e9:69:7a:7e:b6:7a:0b:
2f:eb:3c:e8:9d:c7:1d:26:15:a5:36:7b:ba:69:f8:
4d:d6:68:49:03:cc:4b:59:17:32:96:9a:40:48:97:
ba:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3B:7C:9C:89:C6:F7:28:14:36:C7:96:39:CC:6F:15:42:45:B2:F5
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Dzt8nInG9ygUNseWOcxvFUJFsvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.60.0/22
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:71:85:fe:28:22:cd:28:4e:d3:91:ef:24:35:3e:c4:dc:30:
f2:7f:d0:68:6e:40:00:1d:ee:fe:5c:6d:2c:66:b9:60:82:81:
1b:85:e2:42:b0:84:d7:f5:8c:70:fd:77:1f:f4:9a:80:57:2d:
93:25:ed:6c:5e:d2:03:b7:e5:a6:74:12:5e:c3:58:ca:f8:31:
9e:28:a7:c9:ab:d7:71:df:15:d3:88:fe:1e:80:7a:10:dc:3f:
eb:30:46:09:31:9c:5d:7a:55:1f:ef:61:93:48:68:85:43:a2:
d5:7b:50:ff:cd:36:c3:01:78:45:9d:42:88:5b:97:97:c2:f1:
4d:1a:59:c6:7c:21:44:8e:57:a4:43:73:81:45:19:aa:bf:c3:
d4:55:5c:a8:80:0b:84:c6:e7:9d:0b:b8:92:f7:fc:a2:56:ab:
8c:82:06:e1:77:90:9f:61:10:a9:57:0a:68:36:ce:e1:fb:06:
5e:a6:2a:c3:65:88:11:c9:a3:6a:ee:de:b3:76:df:18:5f:6f:
f7:88:77:84:3b:01:11:fb:79:8c:3b:63:52:2a:25:16:4e:6a:
0c:f7:0b:0d:e6:1b:fb:76:ac:9e:8b:db:58:f6:38:79:34:c3:
2e:65:09:36:81:86:ab:a0:e5:5f:6b:79:f6:ef:f7:48:04:62:
6b:53:13:77
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECtDfGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDUx
MjEwNTAwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGYzYjdjOWM4OWM2
ZjcyODE0MzZjNzk2MzljYzZmMTU0MjQ1YjJmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL1NWyvLJ6/V+lTZaUwitJGuZGnz7zw+R+sUdwQDPEi3wBmP
K8XlE9zOyEbsVbpduEEBA3jInb0XvORed6+hqjgaI2Dr9Mr6R8bkIYT70BHZh3V3
CbARf9D7TPy751KgxS8zu46gGTfueJMVh40b6HmwPQ9GpzxQrudVAG3oYI8g7ne6
ho4TubVPGmu6YAIl3KqbERGW0hTECoslUJZCztNLCsxgGMfmtE3i37tvhR0zalNV
gbxA5ZNbBsrZ5HbR87YzDTA3XIV6m9+aSqw17bmrWlhAh3icVFPpaXp+tnoLL+s8
6J3HHSYVpTZ7umn4TdZoSQPMS1kXMpaaQEiXukcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQPO3ycicb3KBQ2x5Y5zG8VQkWy9TAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L0R6dDhuSW5HOXlnVU5zZVdPY3h2RlVKRnN2VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAll0PAMEAll1mDANBgkqhkiG9w0B
AQsFAAOCAQEAC3GF/igizShO05HvJDU+xNww8n/QaG5AAB3u/lxtLGa5YIKBG4Xi
QrCE1/WMcP13H/SagFctkyXtbF7SA7flpnQSXsNYyvgxniinyavXcd8V04j+HoB6
ENw/6zBGCTGcXXpVH+9hk0hohUOi1XtQ/802wwF4RZ1CiFuXl8LxTRpZxnwhRI5X
pENzgUUZqr/D1FVcqIALhMbnnQu4kvf8olarjIIG4XeQn2EQqVcKaDbO4fsGXqYq
w2WIEcmjau7es3bfGF9v94h3hDsBEft5jDtjUiolFk5qDPcLDeYb+3asnovbWPY4
eTTDLmUJNoGGq6DlX2t59u/3SARia1MTdw==
-----END CERTIFICATE-----
Generated at Wed May 14 21:28:33 2025 by rpki-client