Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/th2I_GTQ-wgDZrQJUm3lHITDYnU.roa
File: th2I_GTQ-wgDZrQJUm3lHITDYnU.roa (raw, json)
Hash identifier: 4hlEL/ijWAebtxH9acpXAIIxE3PzucK/54HeiiZUUeo=
Subject key identifier: B6:1D:88:FC:64:D0:FB:08:03:66:B4:09:52:6D:E5:1C:84:C3:62:75
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 0B3E8169
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/th2I_GTQ-wgDZrQJUm3lHITDYnU.roa
Signing time: Wed 08 Jun 2022 07:24:02 +0000
ROA not before: Wed 08 Jun 2022 07:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 89.116.44.0/22 maxlen: 24
89.116.63.0/24 maxlen: 24
89.116.61.0/24 maxlen: 24
89.116.60.0/24 maxlen: 24
89.116.62.0/24 maxlen: 24
89.117.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188645737 (0xb3e8169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Jun 8 07:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b61d88fc64d0fb080366b409526de51c84c36275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:88:87:fc:75:d4:9f:eb:68:5b:40:42:84:
02:b0:6d:97:fa:a3:05:73:80:8d:04:19:be:6e:a8:
75:94:8d:f7:c0:d6:c5:a8:81:e2:00:89:30:02:3f:
2e:2c:90:68:54:c9:4f:3f:61:e3:19:be:cf:26:e1:
79:e3:46:f2:43:93:92:b0:4b:a3:8a:1c:66:6b:d7:
b5:f7:3f:07:a2:71:53:37:20:f6:4e:01:fd:1f:1f:
86:78:b7:e7:fd:dd:ac:ab:57:57:c3:8d:47:52:a2:
09:c8:99:c2:c7:cf:b3:e2:e6:66:77:ef:3d:6a:12:
80:a8:e4:58:b8:76:d2:d6:15:8a:d7:2f:50:f5:bb:
86:c4:0c:3e:2a:d7:52:7e:ae:17:5d:81:d5:d5:a5:
1c:85:0c:1f:b4:89:df:6f:17:11:80:d1:f7:86:f1:
96:81:f1:7d:b2:0f:c6:a8:bd:0e:f5:d6:1d:a8:ab:
5a:98:82:4b:01:55:12:2f:0b:d4:d7:75:d5:41:b7:
25:25:89:29:d2:e4:ff:f3:1d:3d:c7:ce:0d:c5:16:
36:9c:c4:b4:6a:6e:34:1c:57:8e:98:b6:68:36:40:
41:b4:9f:35:bd:af:31:cd:76:0a:63:43:f8:3d:10:
32:db:b7:0c:a7:ec:cb:4b:da:43:0a:1b:6c:8e:aa:
7a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1D:88:FC:64:D0:FB:08:03:66:B4:09:52:6D:E5:1C:84:C3:62:75
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/th2I_GTQ-wgDZrQJUm3lHITDYnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.44.0/22
89.116.60.0/22
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:d8:45:e3:fe:f1:60:12:d9:4c:e5:07:48:aa:e5:d1:99:d7:
be:f9:82:7f:15:d5:5b:23:41:60:ee:9b:a8:06:79:82:7d:ca:
d1:48:0c:85:e2:dd:52:b8:dd:0f:5b:07:19:85:e4:7d:01:79:
05:da:20:dd:35:60:4e:14:61:9b:26:b9:c3:38:8d:71:a4:0b:
59:75:f4:01:06:78:e2:52:c0:d5:13:b7:cb:6e:ff:6e:bf:90:
04:d8:28:2f:f4:a3:5f:28:66:ac:de:2e:aa:f5:50:bf:09:26:
38:79:f2:8c:78:71:5f:c2:57:6e:5b:60:6a:17:6b:3a:0c:b3:
03:10:58:18:73:af:b9:ca:65:d6:23:b8:3e:33:7c:bf:66:67:
e3:fe:4b:20:bf:2d:5c:16:f3:b0:ab:08:97:cf:9b:f2:b7:85:
8e:f5:e4:cc:12:ad:03:02:87:e2:ec:a7:7f:33:3d:43:75:3a:
2b:c2:c7:ef:ac:f4:98:c3:71:42:40:7f:93:4e:ae:89:76:18:
61:2d:53:c3:99:bd:fe:15:c6:72:9b:ae:56:3e:d2:a4:75:91:
5b:84:f6:f6:56:23:39:05:da:8f:1c:47:d7:8d:3a:63:ff:59:
a3:4a:6f:d3:20:e4:36:7f:dd:eb:5b:a1:35:5d:87:f0:3f:0b:
68:3f:4e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:19 2023 by rpki-client on console-ams.rpki-client.org