Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/2mwNh_Uo5Idh5uHoe6PVzkn9YYI.roa
File: 2mwNh_Uo5Idh5uHoe6PVzkn9YYI.roa (raw, json)
Hash identifier: AuSoXHegAxb0lX5pqPOpLsmXuK63eqwiE9AMzdjJ+2s=
Subject key identifier: DA:6C:0D:87:F5:28:E4:87:61:E6:E1:E8:7B:A3:D5:CE:49:FD:61:82
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0AB9CF44
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/2mwNh_Uo5Idh5uHoe6PVzkn9YYI.roa
Signing time: Tue 10 May 2022 07:06:42 +0000
ROA not before: Tue 10 May 2022 07:06:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 89.116.60.0/22 maxlen: 24
89.117.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179949380 (0xab9cf44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 10 07:06:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da6c0d87f528e48761e6e1e87ba3d5ce49fd6182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:de:11:65:22:db:3c:2d:da:75:f6:bf:d3:ae:
e1:72:84:a1:ab:db:58:f3:84:ac:c0:8d:1d:08:60:
a4:58:c3:64:5c:59:dd:8d:3b:6f:8a:7f:bc:5f:7a:
d6:c6:8d:78:55:5a:bb:02:ca:fc:2d:1b:9f:19:f4:
97:dd:d2:ae:2c:2d:b6:ae:57:84:6c:67:8c:e0:cd:
94:e7:da:fb:ca:c5:d7:2f:30:ce:87:1a:67:55:0c:
29:83:05:0e:da:cf:ba:46:80:6e:f6:e9:0c:f7:81:
90:3b:da:7f:e9:48:7a:bb:1e:a9:7c:a0:e6:0d:b9:
dc:bf:38:5f:f9:3e:0c:2f:5d:2c:9d:04:bd:25:45:
45:c9:d2:98:0e:57:f6:37:71:04:7d:08:d2:7f:ef:
e1:4f:00:b3:46:46:fb:0f:1c:89:a6:6e:0b:42:07:
a3:ff:c1:c3:df:49:4d:07:8c:78:3e:af:88:6f:cd:
82:5b:bf:c7:82:22:e5:72:3a:b2:2c:0e:1a:22:d4:
39:8c:b7:b0:be:4e:63:68:a9:4f:ac:20:62:d9:ac:
29:a1:da:26:57:84:84:58:8c:74:8b:63:fe:e1:06:
50:3c:1f:e1:c3:ec:3c:65:c5:50:1a:e6:2e:56:be:
84:a6:d5:b9:a3:de:30:37:57:fc:ff:fe:a6:0d:1c:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6C:0D:87:F5:28:E4:87:61:E6:E1:E8:7B:A3:D5:CE:49:FD:61:82
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/2mwNh_Uo5Idh5uHoe6PVzkn9YYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.60.0/22
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:6f:a3:6f:6c:37:68:0b:c6:ee:67:81:d2:8e:62:d9:bd:b6:
8b:c2:55:fe:66:f5:d3:b0:d8:d8:56:e8:15:42:3c:49:6e:5f:
11:a0:0f:3c:d8:73:e2:0a:7f:69:83:0b:20:6f:5e:9d:5f:08:
8c:2d:94:06:76:e2:84:aa:f3:9c:c4:6e:37:f5:9e:55:09:ff:
51:22:d9:50:d4:23:25:3b:50:65:ef:87:95:55:f0:0c:b1:53:
bb:c1:30:3a:cf:d2:c1:1d:c2:f5:52:e0:f2:e1:04:c8:ea:c6:
2c:db:a5:9b:22:d2:cd:20:f4:58:f7:7a:22:cd:8d:ad:28:d9:
46:3f:be:90:73:f5:63:92:96:3f:5d:7e:a4:60:5b:66:a9:59:
a0:ca:94:65:5c:52:58:33:a5:4f:0f:4f:76:1e:c2:85:a6:7a:
e3:43:40:90:64:30:97:43:52:d0:ce:b6:68:1f:c5:d3:87:94:
07:7a:51:42:33:87:03:b9:06:33:25:6b:eb:9e:96:56:13:2c:
cc:26:fc:54:3d:82:e0:eb:a0:93:8f:59:61:64:a5:d2:48:e5:
76:14:66:ef:6d:2f:97:fa:bb:65:15:2d:94:4f:48:a3:63:b4:
40:58:57:f8:52:1d:25:bf:bb:63:7a:bc:1f:47:3a:cf:da:ae:
ca:9c:b5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org