Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Tp1ZVpscf2n5xzPGO056ogv0Cus.roa
File: Tp1ZVpscf2n5xzPGO056ogv0Cus.roa (raw, json)
Hash identifier: g/EvVEmXrmJD+fpj0TctaNlMECFzsx4/QzGOesNYQj4=
Subject key identifier: 4E:9D:59:56:9B:1C:7F:69:F9:C7:33:C6:3B:4E:7A:A2:0B:F4:0A:EB
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 018287B773E72F13367B8A81C8000F411C1F
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Tp1ZVpscf2n5xzPGO056ogv0Cus.roa
Signing time: Wed 10 Aug 2022 12:25:23 +0000
ROA not before: Wed 10 Aug 2022 12:25:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 89.117.96.0/22 maxlen: 24
89.116.137.0/24 maxlen: 24
89.116.44.0/22 maxlen: 24
89.116.63.0/24 maxlen: 24
89.116.61.0/24 maxlen: 24
89.117.126.0/24 maxlen: 24
89.116.60.0/24 maxlen: 24
89.116.62.0/24 maxlen: 24
89.117.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:87:b7:73:e7:2f:13:36:7b:8a:81:c8:00:0f:41:1c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Aug 10 12:25:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e9d59569b1c7f69f9c733c63b4e7aa20bf40aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:94:d8:1a:72:6b:49:49:c0:ae:03:1b:e0:
84:0d:c1:18:b0:56:c2:0d:af:68:65:f0:70:a8:96:
2a:5a:eb:9f:00:c1:c8:bd:89:1f:27:06:b3:5d:87:
4a:f6:2d:fd:07:51:cc:2d:70:31:00:00:d9:96:4a:
7f:d5:98:31:8a:15:9e:0c:00:51:08:b2:fc:c1:b1:
1f:ec:fb:cc:dc:75:e2:57:b6:58:58:e2:27:9b:ef:
73:de:ee:65:80:63:08:94:9b:72:86:94:69:eb:c1:
c6:ee:c9:ad:66:6a:9c:db:b1:02:93:e5:5f:a8:bc:
49:73:e1:7e:bd:e6:fe:9c:c7:f3:49:e7:a9:15:04:
18:5e:b6:c6:25:b2:df:c5:04:52:5c:49:d6:b2:f4:
73:2c:83:b1:85:53:4c:c8:95:f8:7a:e3:e1:1e:28:
c2:d5:51:a6:f3:0e:6f:f0:c8:d4:2b:7c:4f:a0:d2:
0f:80:0b:fc:55:e7:53:5a:d2:85:86:0c:69:3c:a4:
ca:25:c7:50:a1:e7:e0:e7:f4:ee:3c:f1:bd:fd:01:
94:de:e6:76:ec:40:30:b7:b9:1d:6c:a3:6e:2c:8d:
86:f7:9a:80:e2:f5:9c:3f:6a:d6:26:22:9e:42:43:
eb:93:ec:e9:b3:cf:95:17:ab:6d:9d:03:44:ac:95:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9D:59:56:9B:1C:7F:69:F9:C7:33:C6:3B:4E:7A:A2:0B:F4:0A:EB
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/Tp1ZVpscf2n5xzPGO056ogv0Cus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.116.44.0/22
89.116.60.0/22
89.116.137.0/24
89.117.96.0/22
89.117.126.0/24
89.117.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:02:42:0d:39:d3:df:64:2d:69:29:7d:29:a1:b6:58:fa:f9:
38:93:86:25:37:51:4e:2c:46:19:43:61:56:bf:25:38:bd:90:
be:d2:73:e7:66:2d:5e:9f:1a:59:de:dd:8b:58:c1:11:71:01:
41:7c:c4:88:fe:a1:92:64:42:27:01:05:6b:1e:3a:fd:bd:40:
10:9b:be:37:d9:51:60:17:44:7e:1a:e0:4b:f0:8e:30:3b:ac:
43:b5:11:8a:66:4c:c8:b8:63:63:0e:03:aa:e0:3c:98:a5:a3:
33:21:ba:40:d2:e1:dc:8c:a5:41:c6:f1:98:8b:7d:24:3e:bc:
bc:b5:14:ce:e8:22:17:d9:af:a5:db:93:80:9a:a4:32:ec:a1:
8a:5a:d7:83:70:05:7e:26:53:79:e3:9c:ea:b8:2e:3f:6e:bf:
2f:e3:23:55:53:1b:92:85:f0:71:cf:26:db:99:bb:3d:ff:25:
31:d6:cc:d5:b4:77:99:0f:82:fa:2a:5c:00:a7:d3:c9:f3:c9:
b7:99:bb:09:c7:50:6d:af:fa:eb:c3:c5:71:4d:c2:46:dc:b0:
ce:0e:c6:d0:ed:f5:d1:70:32:1a:25:84:fc:75:8b:84:2c:b5:
c2:41:51:31:95:b9:58:0c:21:73:4d:b6:e8:7f:49:72:9b:2f:
74:1b:26:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-fra.rpki-client.org