Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/TdcFTIjoDGUibsRlO4tq0mIXztM.roa
File: TdcFTIjoDGUibsRlO4tq0mIXztM.roa (raw, json)
Hash identifier: XwFKn+PabB3NSaxY7VtwGTpLzC7tgq+CTc/7+DpqZ9g=
Subject key identifier: 4D:D7:05:4C:88:E8:0C:65:22:6E:C4:65:3B:8B:6A:D2:62:17:CE:D3
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 018C8BD5DE4B2AA04748AE32FD14D271457A
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/TdcFTIjoDGUibsRlO4tq0mIXztM.roa
Signing time: Thu 21 Dec 2023 10:04:58 +0000
ROA not before: Thu 21 Dec 2023 10:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 89.249.192.0/21 maxlen: 24
185.21.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:d5:de:4b:2a:a0:47:48:ae:32:fd:14:d2:71:45:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Dec 21 10:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dd7054c88e80c65226ec4653b8b6ad26217ced3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:ca:52:01:f7:e4:d5:00:d0:c7:78:67:8c:
fd:fe:38:7b:eb:8d:b6:23:a9:ef:63:b8:fc:47:6c:
a9:03:e7:74:b6:69:9d:1d:40:a0:f1:c2:94:d9:e4:
65:51:4a:2e:eb:69:93:3f:f7:ff:6a:66:27:27:ff:
02:f6:15:c4:74:80:db:d0:8c:9c:1f:f9:b4:9d:b2:
8f:b2:38:6d:4f:88:dc:a3:3e:8d:dd:cb:50:c2:1d:
13:fa:86:ab:69:a6:f6:8b:e8:19:b0:ae:af:32:a4:
c6:e4:65:d5:5a:69:d1:03:6a:07:13:18:1e:e6:61:
6c:67:73:f6:cb:09:41:bf:62:6b:ed:11:b2:4d:b3:
b9:0c:22:3e:e9:5a:67:c3:4c:d2:51:41:ba:2d:a6:
2c:c7:d2:93:6e:63:31:a5:b9:58:4d:69:4e:17:b2:
5b:7e:54:a8:90:9d:b6:96:c3:3d:83:30:9c:78:c5:
35:53:f9:24:6f:7e:5d:11:ad:c4:10:74:e2:bd:bb:
72:0c:85:7d:e7:38:69:62:24:9b:b2:79:15:56:2a:
74:5e:1e:68:8b:08:9a:15:90:28:cb:d0:ea:cc:5c:
96:7d:47:16:6f:73:b9:3b:1e:f5:81:09:4f:6b:73:
52:6f:e1:bb:83:4c:73:4b:da:61:5c:03:c1:f1:ac:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D7:05:4C:88:E8:0C:65:22:6E:C4:65:3B:8B:6A:D2:62:17:CE:D3
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/TdcFTIjoDGUibsRlO4tq0mIXztM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.192.0/21
185.21.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:61:c9:9c:b5:34:c9:43:3a:80:56:78:c8:4a:71:52:40:86:
7a:a0:df:9e:48:d9:4a:a1:5f:e5:72:55:aa:37:5c:6c:fa:58:
04:3d:60:97:77:9c:6e:6c:8a:c5:4e:c4:32:1a:ea:a1:1e:3b:
4c:69:fb:5e:09:49:19:d7:77:00:44:9a:24:43:5b:f1:bd:f4:
54:9d:f7:3d:89:23:33:d1:81:68:5b:1b:de:e9:cf:49:7c:93:
84:4b:eb:1a:98:91:b5:db:c2:03:dd:5e:db:a4:6a:23:41:81:
01:23:d4:77:9a:0e:15:86:ff:c1:3e:2c:3b:a5:9f:3a:45:5d:
f0:77:bd:55:f4:bf:6f:93:b5:08:11:ab:23:e9:84:37:ad:f7:
03:26:92:5c:7a:d2:35:c3:9a:af:e0:37:3f:04:01:07:43:70:
25:58:80:e1:28:60:49:2f:ba:11:b5:9b:0e:5a:9d:3a:63:0a:
8a:be:5e:60:42:18:72:a8:dd:8a:bf:ac:d4:bd:10:b3:b8:51:
af:a6:82:65:9d:3c:78:9b:bf:c4:ed:91:bf:65:f2:5b:c5:96:
82:be:91:c0:0b:1c:f4:c5:b1:b3:cc:8e:cd:ac:7b:38:b6:97:
42:bd:08:65:a7:a0:29:1b:4a:81:c7:5f:71:ba:22:b8:a2:c3:
1f:a5:39:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:17 2025 by rpki-client