Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/TFS45x0BBEWTcfHv8xaHnqYtGoM.roa
File: TFS45x0BBEWTcfHv8xaHnqYtGoM.roa (raw, json)
Hash identifier: VtYWOvKeSvoJIbQRhycsB/y2qxX0fGGJd1cvJ8WQnoQ=
Subject key identifier: 4C:54:B8:E7:1D:01:04:45:93:71:F1:EF:F3:16:87:9E:A6:2D:1A:83
Certificate issuer: /CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Certificate serial: 0184332D30933F8B002C7F3ECB34E2AC6B9A
Authority key identifier: FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/TFS45x0BBEWTcfHv8xaHnqYtGoM.roa
Signing time: Tue 01 Nov 2022 12:31:50 +0000
ROA not before: Tue 01 Nov 2022 12:31:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 89.117.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:2d:30:93:3f:8b:00:2c:7f:3e:cb:34:e2:ac:6b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc5b53dfa8316093c172b4315922ef17e65f051d
Validity
Not Before: Nov 1 12:31:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c54b8e71d0104459371f1eff316879ea62d1a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5e:93:88:59:7c:6f:66:32:ae:54:a9:65:88:
a6:f4:a5:47:49:02:f0:99:6f:46:a9:a3:ad:16:4f:
a4:25:fb:72:ba:e3:86:c7:27:f6:73:8e:d5:27:a2:
ad:bd:7f:10:29:71:bd:9e:51:fa:45:f5:47:01:51:
c6:b6:88:4b:5c:29:b0:24:28:97:c5:7e:c6:63:b1:
35:56:67:bd:6f:dd:22:ea:85:fc:8f:de:95:ca:15:
0f:52:7b:0d:64:82:eb:ae:77:12:74:a5:93:36:74:
c5:9a:e3:81:8f:d2:26:c4:07:df:af:39:4e:30:32:
5b:af:c4:d0:21:b4:eb:47:4e:31:8c:20:f7:9e:96:
18:2d:0b:a6:cb:04:99:5f:6f:24:e9:59:b0:d4:1c:
36:57:ca:89:a3:5b:79:3e:1f:2b:e6:1e:68:13:2a:
8e:37:5c:46:79:eb:a8:69:6a:d8:2c:b6:9f:36:3d:
df:18:38:b3:78:ba:fc:17:21:85:1f:e7:5b:19:8e:
b7:87:30:ff:1b:04:3f:50:2d:bb:c6:3b:33:87:ed:
6e:19:c3:6c:97:d3:a0:96:dc:37:03:ad:e2:6e:94:
8f:0b:e9:1d:7c:7e:30:03:55:36:d1:69:88:33:8e:
19:26:7f:d6:dd:04:e3:31:d6:db:b8:f0:e1:d2:87:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:54:B8:E7:1D:01:04:45:93:71:F1:EF:F3:16:87:9E:A6:2D:1A:83
X509v3 Authority Key Identifier:
keyid:FC:5B:53:DF:A8:31:60:93:C1:72:B4:31:59:22:EF:17:E6:5F:05:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FtT36gxYJPBcrQxWSLvF-ZfBR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/TFS45x0BBEWTcfHv8xaHnqYtGoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/5d56e5-838a-43f3-b52c-14efc982867f/1/_FtT36gxYJPBcrQxWSLvF-ZfBR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.117.88.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:c2:87:f0:f7:b5:fc:f0:c6:51:51:dc:b3:51:5c:0f:ba:a7:
a3:47:a2:74:63:d9:e0:33:3b:c9:d9:01:4e:0e:f4:79:22:2c:
20:04:4c:c8:3e:1e:ce:22:0b:c0:2b:53:4c:f3:31:e9:e0:a3:
fd:51:62:6f:81:42:a4:69:7f:ba:8b:16:03:ee:2f:9d:cb:27:
be:14:2f:9b:54:e4:42:26:58:6a:95:91:f7:10:1e:b5:ca:74:
c6:05:cf:49:f8:4d:d7:3a:03:d3:cd:fb:c7:00:e0:8c:8e:54:
74:20:bf:8a:00:ed:5e:9a:9a:19:43:a7:e3:e1:4c:30:70:5e:
09:e6:08:95:39:38:73:25:02:ec:50:69:a1:9c:87:5f:12:01:
28:2f:bc:77:b3:38:6d:dc:18:f7:c1:7a:9f:b0:70:8c:5d:ee:
dc:6f:48:41:87:b9:a9:85:61:37:71:35:bc:87:31:0f:75:df:
80:bf:da:c4:58:76:19:00:33:e1:c4:3f:0e:67:dd:63:f0:e1:
3a:f5:56:fe:21:1b:7d:56:ee:1a:43:b9:c3:61:de:24:18:1f:
14:6e:7b:cc:f2:d8:59:af:35:ad:d0:de:9d:26:2a:18:9f:5d:
e2:f6:5e:3a:59:d5:8b:36:a4:8f:08:d0:51:ee:09:62:1f:c1:
96:3f:39:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:18 2024 by rpki-client on console-ams.rpki-client.org