Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/QLdU3b8DRiMG02lFeJFZugVlvYw.roa
File: QLdU3b8DRiMG02lFeJFZugVlvYw.roa (raw, json)
Hash identifier: N6MqV3EU3gPLv58K69svBMj/fxjS5YXp7rI6q4yVcoE=
Subject key identifier: 40:B7:54:DD:BF:03:46:23:06:D3:69:45:78:91:59:BA:05:65:BD:8C
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0ADDF622
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/QLdU3b8DRiMG02lFeJFZugVlvYw.roa
Signing time: Mon 16 May 2022 06:46:41 +0000
ROA not before: Mon 16 May 2022 06:46:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 89.116.63.0/24 maxlen: 24
89.116.61.0/24 maxlen: 24
89.116.60.0/24 maxlen: 24
89.116.62.0/24 maxlen: 24
89.117.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182318626 (0xaddf622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: May 16 06:46:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40b754ddbf03462306d36945789159ba0565bd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bf:1e:72:2e:bb:a6:62:97:c7:8b:bf:fb:45:
ca:08:4e:00:7a:e7:8d:49:5e:cc:05:2e:2d:86:b6:
0a:ce:79:ef:3a:e5:77:6a:a4:52:f7:f0:b8:e5:9b:
8c:59:5f:46:d5:f6:f6:e2:79:8d:99:68:44:ce:49:
3d:06:0c:50:98:6b:a4:c6:7c:3e:f6:56:05:c4:f3:
86:b8:4c:3f:65:40:0d:71:62:a1:72:17:51:7f:f1:
f3:a7:30:0c:0d:b8:b5:c3:35:83:47:d1:8a:64:57:
19:b2:70:45:ba:b6:fb:3b:72:3d:e4:82:6a:f2:2e:
bd:ff:e5:e8:79:cf:66:17:9d:bc:7a:8e:fc:38:4c:
0e:b8:8e:84:b7:f2:69:76:4d:68:bb:c1:62:57:7a:
0f:d6:25:e7:b8:64:0b:96:28:cf:0e:44:3e:e4:62:
a4:d7:eb:e7:e2:bf:1d:a2:c7:33:6e:7c:9d:4e:ad:
fd:26:54:25:3a:5a:71:4c:1b:8a:b3:67:7b:e2:b5:
d9:93:e9:64:fa:12:d9:94:6c:c2:10:78:1a:f8:95:
4f:68:d1:12:9b:b5:0c:d7:12:00:3e:be:01:8e:19:
e8:12:c1:f0:aa:56:80:51:5e:5c:a8:3c:ae:78:37:
2e:09:c3:f1:93:1b:2c:a7:a6:b1:e7:a5:f8:5a:ac:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B7:54:DD:BF:03:46:23:06:D3:69:45:78:91:59:BA:05:65:BD:8C
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/QLdU3b8DRiMG02lFeJFZugVlvYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.60.0/22
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:92:b3:96:7d:ae:66:79:59:ab:c3:d7:02:ae:f9:31:f5:fe:
17:dd:f0:68:2b:5b:8a:fa:9d:92:e1:70:fe:98:ae:ad:fb:de:
06:5c:cc:9e:29:32:35:01:b2:4f:e3:d5:95:28:2a:75:c8:32:
3f:ad:d0:14:01:e2:0c:ac:06:4c:61:ff:35:24:32:6f:db:7e:
44:3d:83:3f:d9:cc:14:37:8b:fa:32:cc:46:49:41:46:3d:9a:
35:c0:74:65:72:8b:c2:b9:23:fa:56:f3:f8:ad:71:9d:02:34:
e2:e1:8e:c6:70:8e:71:dc:46:44:7e:ca:cd:b8:23:a6:72:65:
92:ab:82:a5:7d:bf:dd:07:bc:42:eb:2a:2b:29:fe:ad:b6:1a:
00:52:c0:12:36:30:39:ee:d9:ab:84:26:58:8f:8c:4a:c7:b5:
48:46:53:5f:71:d7:f2:41:a9:4b:ee:32:41:d6:35:64:49:3d:
d9:59:48:58:da:d1:63:6f:cb:52:cc:1e:9e:0b:d6:e7:6f:65:
c7:2d:ff:bd:66:0e:53:00:dc:04:58:b7:50:4d:5c:f2:46:1d:
f8:48:e7:b6:9e:af:31:1d:64:61:8d:42:a7:1a:cc:59:42:46:
d6:fb:f2:b8:13:aa:f2:ec:5e:3e:64:c5:36:4d:b2:d4:01:75:
60:c8:c6:c9
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECt32IjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NDY5ODU4NWU1ZWJkMTFjOTY5YzdlZDRhMzIwZWRhZmM5ZDE3ODIyMB4XDTIyMDUx
NjA2NDY0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDBiNzU0ZGRiZjAz
NDYyMzA2ZDM2OTQ1Nzg5MTU5YmEwNTY1YmQ4YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIO/HnIuu6Zil8eLv/tFyghOAHrnjUlezAUuLYa2Cs557zrl
d2qkUvfwuOWbjFlfRtX29uJ5jZloRM5JPQYMUJhrpMZ8PvZWBcTzhrhMP2VADXFi
oXIXUX/x86cwDA24tcM1g0fRimRXGbJwRbq2+ztyPeSCavIuvf/l6HnPZhedvHqO
/DhMDriOhLfyaXZNaLvBYld6D9Yl57hkC5Yozw5EPuRipNfr5+K/HaLHM258nU6t
/SZUJTpacUwbirNne+K12ZPpZPoS2ZRswhB4GviVT2jREpu1DNcSAD6+AY4Z6BLB
8KpWgFFeXKg8rng3LgnD8ZMbLKemseel+FqssLsCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRAt1TdvwNGIwbTaUV4kVm6BWW9jDAfBgNVHSMEGDAWgBTEaYWF5evRHJac
ftSjIO2vydF4IjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hHbUZoZVhyMFJ5V25IN1VveUR0cjhuUmVDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjEvNTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8x
L1FMZFUzYjhEUmlNRzAybEZlSkZadWdWbHZZdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEv
NTMxMGRhLTY4MjEtNDY3My05ZTk4LTlkNjAwMWY3OGE3MC8xL3hHbUZoZVhyMFJ5
V25IN1VveUR0cjhuUmVDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAll0PAMEAll1mDANBgkqhkiG9w0B
AQsFAAOCAQEAXZKzln2uZnlZq8PXAq75MfX+F93waCtbivqdkuFw/piurfveBlzM
nikyNQGyT+PVlSgqdcgyP63QFAHiDKwGTGH/NSQyb9t+RD2DP9nMFDeL+jLMRklB
Rj2aNcB0ZXKLwrkj+lbz+K1xnQI04uGOxnCOcdxGRH7KzbgjpnJlkquCpX2/3Qe8
QusqKyn+rbYaAFLAEjYwOe7Zq4QmWI+MSse1SEZTX3HX8kGpS+4yQdY1ZEk92VlI
WNrRY2/LUswengvW529lxy3/vWYOUwDcBFi3UE1c8kYd+Ejntp6vMR1kYY1CpxrM
WUJG1vvyuBOq8uxePmTFNk2y1AF1YMjGyQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:24 2023 by rpki-client on console-fra.rpki-client.org