Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/tUve3pOQFiK7mV7CACy-DAr7bdY.roa
File: tUve3pOQFiK7mV7CACy-DAr7bdY.roa (raw, json)
Hash identifier: m53HmRqF6u85FI5Hg4Yk/rVEwZYoeC8VwgXHyzz1Ogg=
Subject key identifier: B5:4B:DE:DE:93:90:16:22:BB:99:5E:C2:00:2C:BE:0C:0A:FB:6D:D6
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD510E3A5589CEF9C89A2DC77E76F76
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/tUve3pOQFiK7mV7CACy-DAr7bdY.roa
Signing time: Mon 02 Jan 2023 00:15:12 +0000
ROA not before: Mon 02 Jan 2023 00:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12325
IP address blocks: 89.46.42.0/24 maxlen: 24
94.177.28.0/24 maxlen: 24
188.213.212.0/24 maxlen: 24
188.213.216.0/24 maxlen: 24
94.176.213.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
89.40.222.0/23 maxlen: 24
92.114.54.0/24 maxlen: 24
89.35.124.0/23 maxlen: 24
89.44.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:10:e3:a5:58:9c:ef:9c:89:a2:dc:77:e7:6f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b54bdede93901622bb995ec2002cbe0c0afb6dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:15:b4:53:0c:e5:84:e7:3d:5f:80:5b:ff:ac:
72:48:74:a9:eb:80:8f:6f:80:95:21:ad:f6:e1:a0:
5c:0e:bf:51:75:47:a5:ef:5a:47:eb:b4:0c:72:fe:
94:0c:90:79:63:24:02:35:6c:f3:8c:06:bd:b1:d0:
c9:3e:e3:9c:11:34:ad:b4:98:eb:9a:5f:ce:96:d6:
af:5c:04:9f:77:2a:76:95:44:ee:cd:0d:13:6e:43:
64:64:21:38:c7:7e:fd:01:4c:d9:15:4e:da:b4:3d:
4c:b8:85:c9:9a:30:7b:c3:e6:e8:3e:cb:55:11:a8:
04:e2:71:1d:3b:98:e5:09:17:47:4a:cf:55:f5:0f:
93:15:04:c6:12:a4:7d:64:bd:89:2c:29:dd:c0:81:
ab:4e:cf:67:16:6c:bb:f0:16:b5:12:55:a7:b5:2c:
25:5d:1d:5c:43:77:22:aa:8c:5f:07:01:15:08:3c:
01:81:b5:79:81:a2:45:ba:ba:3e:f1:62:29:ee:6a:
c6:ac:36:1d:92:87:25:83:d5:07:a1:0c:bb:1e:ca:
15:12:08:51:4b:bf:d9:44:78:bd:e9:fa:02:0c:c6:
0f:d0:43:dd:41:3a:db:05:6f:0e:d4:ca:23:6b:81:
3e:c7:ba:ef:fe:bd:66:39:bd:fa:c2:12:60:dd:3a:
0a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4B:DE:DE:93:90:16:22:BB:99:5E:C2:00:2C:BE:0C:0A:FB:6D:D6
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/tUve3pOQFiK7mV7CACy-DAr7bdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.124.0/23
89.40.222.0/23
89.44.105.0/24
89.46.42.0/24
89.47.36.0/24
92.114.32.0/24
92.114.54.0/24
94.176.213.0/24
94.177.28.0/24
188.213.212.0/24
188.213.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:e9:e9:b3:07:ed:04:71:4b:12:64:81:04:26:47:cb:05:57:
94:36:13:6a:e7:20:b8:66:77:a9:b7:17:bf:da:a0:b1:f7:38:
36:c0:aa:97:aa:48:cd:8d:8b:a1:dc:1d:40:9b:94:c9:d7:c7:
05:f5:06:bf:e8:18:31:79:f4:27:77:55:5e:b3:e1:e0:a8:0e:
af:c6:de:d7:13:41:43:ca:ae:3b:82:8e:6f:b7:cb:3f:ef:03:
c8:6e:f2:4b:7e:fa:cd:3e:2e:f1:7a:0c:a3:16:6c:10:c3:b5:
e6:0c:c2:8e:57:f0:a3:4e:f9:f0:6e:d9:c3:52:3c:a5:d8:74:
13:6c:d2:c9:85:1e:2f:7b:c4:19:1b:d0:07:1b:f7:18:a1:44:
e5:0c:86:5c:81:b8:53:5d:0c:84:ef:74:03:9f:16:cd:11:5c:
fa:01:78:47:f5:d3:0b:fa:13:b3:d0:14:25:e5:a2:bf:19:2e:
ee:61:ce:cd:29:0a:d8:b1:70:e9:ed:ab:4f:1d:42:99:49:23:
6f:40:29:67:84:6c:97:ca:1f:ea:bf:86:ea:06:24:d5:a3:ea:
ab:80:db:d2:77:59:16:61:21:67:71:72:9e:5b:f1:cd:6e:7e:
10:82:85:dd:af:9f:70:cb:2a:d5:a2:71:19:ba:16:ea:e5:ae:
6a:dc:2b:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:45 2025 by rpki-client