Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/TelxtwA04lCsLHcf2AlKQyeUZFM.roa
File: TelxtwA04lCsLHcf2AlKQyeUZFM.roa (raw, json)
Hash identifier: zYmb3wycgP36PFNwTKbFDS+8fxXWJGh7AH9DnczNGIY=
Subject key identifier: 4D:E9:71:B7:00:34:E2:50:AC:2C:77:1F:D8:09:4A:43:27:94:64:53
Certificate issuer: /CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Certificate serial: 01837F91C140D3D59430B3FA984D304ADBD9
Authority key identifier: 12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/TelxtwA04lCsLHcf2AlKQyeUZFM.roa
Signing time: Tue 27 Sep 2022 15:30:02 +0000
ROA not before: Tue 27 Sep 2022 15:30:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203950
IP address blocks: 89.40.161.0/24 maxlen: 24
89.35.72.0/24 maxlen: 24
89.39.242.0/24 maxlen: 24
89.40.35.0/24 maxlen: 24
89.35.127.0/24 maxlen: 24
185.170.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:91:c1:40:d3:d5:94:30:b3:fa:98:4d:30:4a:db:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122b2d2fa8bcf5f836210b9f49211ee6d094d0d2
Validity
Not Before: Sep 27 15:30:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4de971b70034e250ac2c771fd8094a4327946453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:70:08:f1:54:e5:6e:e4:07:5d:36:7e:e6:e1:
97:02:87:a4:fc:1b:b1:f3:bb:f4:35:cc:f0:c6:4f:
53:08:57:df:7a:93:40:24:0a:10:49:90:2d:97:a9:
81:07:2d:8c:e0:70:71:38:3f:ba:a5:b2:0d:93:59:
ce:2d:57:ee:8b:26:d7:20:ce:dd:e0:f9:f1:85:0b:
28:28:ec:d9:28:77:36:a2:b2:96:dc:a2:9f:42:42:
38:be:6e:3d:24:ff:61:2c:8c:fe:fd:62:42:18:73:
2c:15:f4:6c:dc:bb:71:f4:b3:70:22:17:4a:9c:ac:
8c:2e:4d:a0:c4:fc:6c:e3:77:65:5e:5c:9b:44:b9:
3e:d4:0e:9e:31:2d:6e:b3:f3:4e:54:00:ca:96:c9:
30:25:16:d5:11:66:62:a1:45:3b:23:2c:7f:a6:1f:
99:6e:82:9d:d6:53:eb:5e:8f:7e:e6:f0:fc:30:b1:
3c:19:f4:e7:ac:e7:1e:ac:09:f8:93:cb:be:06:17:
60:a1:cb:cf:de:82:51:de:ac:99:4e:75:c2:2e:50:
e7:5a:e7:9e:f5:2b:06:57:bd:69:0d:26:d6:3c:03:
0e:a8:99:5b:5d:da:29:52:bc:a0:09:9f:c5:98:57:
de:71:cb:f9:77:46:8e:85:5c:27:84:3f:96:3b:20:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E9:71:B7:00:34:E2:50:AC:2C:77:1F:D8:09:4A:43:27:94:64:53
X509v3 Authority Key Identifier:
keyid:12:2B:2D:2F:A8:BC:F5:F8:36:21:0B:9F:49:21:1E:E6:D0:94:D0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EistL6i89fg2IQufSSEe5tCU0NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/TelxtwA04lCsLHcf2AlKQyeUZFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d5460e-0de1-4a74-951b-3e77d567ccc8/1/EistL6i89fg2IQufSSEe5tCU0NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.72.0/24
89.35.127.0/24
89.39.242.0/24
89.40.35.0/24
89.40.161.0/24
185.170.65.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e8:b0:41:38:35:02:80:d2:e3:66:13:c5:26:26:be:c6:9c:
12:12:15:56:17:86:0a:b2:55:8d:6b:9c:7c:cc:0b:16:47:bd:
44:7b:67:38:3f:d6:d2:0a:e6:4c:20:2c:1c:e9:35:75:35:fa:
8c:b9:f4:f0:3a:d7:3a:8a:8b:37:17:2a:ae:24:ac:e1:19:0d:
18:b2:ec:1d:22:b4:32:9b:35:1e:ea:08:70:d2:0c:da:31:22:
15:76:ca:11:ed:1e:5d:93:44:3b:4a:75:21:c2:83:50:5e:83:
24:90:1b:7a:f8:e8:e8:84:3a:78:5e:49:c2:8c:61:53:29:fc:
38:5c:bb:e3:2c:90:e5:6a:09:23:02:82:96:e1:72:b4:be:70:
99:13:ec:98:1b:52:81:f1:cd:8b:de:05:2e:e6:32:3a:90:b5:
a8:27:22:b0:85:a9:99:5a:2c:ed:fb:c0:42:0c:27:d9:ff:37:
87:27:41:49:7e:bc:15:ae:de:d9:b2:33:6e:85:ea:28:10:0f:
23:32:2c:c4:5c:6d:13:48:9c:cc:45:0a:5c:ca:98:e1:03:4a:
28:fa:45:2f:53:c4:74:1e:8f:ed:98:cd:81:eb:68:f2:17:95:
55:97:e7:b6:9f:ab:d4:a1:87:19:1e:05:bc:9c:fd:26:67:02:
d9:da:71:ca
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYN/kcFA09WUMLP6mE0wStvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMmIyZDJmYThiY2Y1ZjgzNjIxMGI5ZjQ5MjExZWU2ZDA5
NGQwZDIwHhcNMjIwOTI3MTUzMDAyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGU5NzFiNzAwMzRlMjUwYWMyYzc3MWZkODA5NGE0MzI3OTQ2NDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3AI8VTlbuQHXTZ+5uGXAoek/Bux
87v0Nczwxk9TCFffepNAJAoQSZAtl6mBBy2M4HBxOD+6pbINk1nOLVfuiybXIM7d
4PnxhQsoKOzZKHc2orKW3KKfQkI4vm49JP9hLIz+/WJCGHMsFfRs3Ltx9LNwIhdK
nKyMLk2gxPxs43dlXlybRLk+1A6eMS1us/NOVADKlskwJRbVEWZioUU7Iyx/ph+Z
boKd1lPrXo9+5vD8MLE8GfTnrOcerAn4k8u+BhdgocvP3oJR3qyZTnXCLlDnWuee
9SsGV71pDSbWPAMOqJlbXdopUrygCZ/FmFfeccv5d0aOhVwnhD+WOyCdLQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFE3pcbcANOJQrCx3H9gJSkMnlGRTMB8GA1UdIwQY
MBaAFBIrLS+ovPX4NiELn0khHubQlNDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlzdEw2aTg5ZmcySVF1ZlNTRWU1dENVME5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9kNTQ2MGUtMGRlMS00YTc0LTk1MWIt
M2U3N2Q1NjdjY2M4LzEvVGVseHR3QTA0bENzTEhjZjJBbEtReWVVWkZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9kNTQ2MGUtMGRlMS00YTc0LTk1MWItM2U3N2Q1NjdjY2M4
LzEvRWlzdEw2aTg5ZmcySVF1ZlNTRWU1dENVME5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAWSNIAwQA
WSN/AwQAWSfyAwQAWSgjAwQAWSihAwQAuapBMA0GCSqGSIb3DQEBCwUAA4IBAQCi
6LBBODUCgNLjZhPFJia+xpwSEhVWF4YKslWNa5x8zAsWR71Ee2c4P9bSCuZMICwc
6TV1NfqMufTwOtc6ios3FyquJKzhGQ0YsuwdIrQymzUe6ghw0gzaMSIVdsoR7R5d
k0Q7SnUhwoNQXoMkkBt6+OjohDp4XknCjGFTKfw4XLvjLJDlagkjAoKW4XK0vnCZ
E+yYG1KB8c2L3gUu5jI6kLWoJyKwhamZWizt+8BCDCfZ/zeHJ0FJfrwVrt7ZsjNu
heooEA8jMizEXG0TSJzMRQpcypjhA0oo+kUvU8R0Ho/tmM2B62jyF5VVl+e2n6vU
oYcZHgW8nP0mZwLZ2nHK
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:53 2023 by rpki-client on console-fra.rpki-client.org