Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af36e2-8318-45dd-a1b8-9a89f0afc9d9/1/TJmR_QEw51IABI67NkPyqOKJbrs.roa
File: TJmR_QEw51IABI67NkPyqOKJbrs.roa (raw, json)
Hash identifier: xGX4jlXCGcrlRChaSWZDmO6YDxPyqPs/niLBIj6IDJM=
Subject key identifier: 4C:99:91:FD:01:30:E7:52:00:04:8E:BB:36:43:F2:A8:E2:89:6E:BB
Certificate issuer: /CN=1e86ef507ce1d76650297a15ce47e8baded46bb6
Certificate serial: 01856FF0655922F9636D3C2836D52DDBEFEF
Authority key identifier: 1E:86:EF:50:7C:E1:D7:66:50:29:7A:15:CE:47:E8:BA:DE:D4:6B:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HobvUHzh12ZQKXoVzkfout7Ua7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af36e2-8318-45dd-a1b8-9a89f0afc9d9/1/TJmR_QEw51IABI67NkPyqOKJbrs.roa
Signing time: Mon 02 Jan 2023 00:45:03 +0000
ROA not before: Mon 02 Jan 2023 00:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34191
IP address blocks: 194.145.239.0/24 maxlen: 24
185.213.34.0/24 maxlen: 24
185.213.33.0/24 maxlen: 24
185.213.32.0/24 maxlen: 24
185.213.32.0/22 maxlen: 22
185.213.35.0/24 maxlen: 24
2a0c:ed80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:65:59:22:f9:63:6d:3c:28:36:d5:2d:db:ef:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e86ef507ce1d76650297a15ce47e8baded46bb6
Validity
Not Before: Jan 2 00:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c9991fd0130e75200048ebb3643f2a8e2896ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:5c:7f:c4:0a:f8:55:20:b7:16:47:1b:a5:
c8:b1:af:55:6a:d3:86:9e:d3:7c:dc:4f:8f:9b:39:
50:d6:5d:81:53:fb:bf:e6:22:f1:ef:ae:c9:99:af:
74:f9:93:15:99:ad:fd:da:28:ef:ca:0d:0a:47:d3:
69:b7:4a:08:2d:be:bb:58:69:55:cf:1b:34:ae:84:
18:1d:af:9c:35:0a:2c:98:f7:74:62:fb:4a:f5:89:
bd:bf:a2:5a:cc:32:c0:ed:78:f5:fb:6b:53:8d:80:
a4:9b:41:f3:b7:fa:c0:c7:71:7c:93:a6:bb:24:4f:
34:57:38:fb:b7:5f:e7:dc:22:df:51:a2:d2:78:db:
e9:41:bf:01:7f:fa:2f:6d:e6:a1:98:33:0a:ce:60:
0a:06:f4:b2:f8:44:82:ac:cf:c3:3f:3d:db:40:03:
b4:fe:d0:72:6a:45:0e:18:9e:e6:33:a3:53:96:9e:
12:2a:1d:ae:ae:7d:2f:5a:3f:f8:63:d8:3a:8f:c6:
5c:9f:b6:fd:6a:23:f0:fc:a3:92:1b:67:5e:8e:d6:
b7:d5:8f:e3:6e:b8:c0:27:60:c6:61:5e:cd:f7:9d:
7f:33:eb:b1:fc:7b:4c:83:3d:22:7c:f9:c0:cb:40:
57:6f:93:86:45:13:b0:31:e2:ab:a1:ce:99:23:02:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:99:91:FD:01:30:E7:52:00:04:8E:BB:36:43:F2:A8:E2:89:6E:BB
X509v3 Authority Key Identifier:
keyid:1E:86:EF:50:7C:E1:D7:66:50:29:7A:15:CE:47:E8:BA:DE:D4:6B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HobvUHzh12ZQKXoVzkfout7Ua7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af36e2-8318-45dd-a1b8-9a89f0afc9d9/1/TJmR_QEw51IABI67NkPyqOKJbrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af36e2-8318-45dd-a1b8-9a89f0afc9d9/1/HobvUHzh12ZQKXoVzkfout7Ua7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.32.0/22
194.145.239.0/24
IPv6:
2a0c:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
2b:89:7d:0d:e6:ce:61:e8:e4:6d:16:54:ab:2a:54:f1:fc:3c:
93:e6:00:3d:56:1f:15:7c:6b:8b:7c:12:10:8c:b0:74:6c:64:
26:5c:f1:fe:6d:c4:90:b1:62:d6:a4:8f:71:16:42:54:ed:f0:
d9:45:72:8f:0b:65:23:38:f4:ab:9f:a5:20:7d:17:07:ed:1a:
38:51:da:46:c1:a4:12:dc:a2:c6:a4:ab:d0:da:22:57:ed:07:
12:3d:00:13:d5:d6:91:0a:c8:35:66:c8:5d:81:80:b1:65:c1:
cb:09:f3:c1:55:3d:4c:ad:c0:46:0c:ce:fc:d7:6b:69:0d:0c:
39:de:7a:33:d0:ea:6d:89:3c:a0:eb:03:5d:9b:09:78:13:68:
26:4f:ec:11:32:63:77:66:aa:cb:d6:00:aa:59:4b:e4:2c:b0:
ef:85:ee:67:39:95:58:e6:68:87:2e:f9:12:93:a6:f3:3c:08:
4e:6a:b8:7f:33:90:24:1a:96:44:2c:71:69:af:8c:46:06:0a:
80:bf:60:a5:bc:57:bb:76:ff:d3:14:aa:70:bc:0f:8f:cc:98:
d9:e6:84:ca:14:2d:7b:0b:f6:8b:81:55:71:f1:2f:dc:ce:75:
3e:d2:6a:32:90:bb:01:a3:ea:7d:5e:1a:14:9f:76:80:34:f1:
d8:4a:57:0e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVv8GVZIvljbTwoNtUt2+/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlODZlZjUwN2NlMWQ3NjY1MDI5N2ExNWNlNDdlOGJhZGVk
NDZiYjYwHhcNMjMwMTAyMDA0NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yzk5OTFmZDAxMzBlNzUyMDAwNDhlYmIzNjQzZjJhOGUyODk2ZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq5cf8QK+FUgtxZHG6XIsa9VatOG
ntN83E+PmzlQ1l2BU/u/5iLx767Jma90+ZMVma392ijvyg0KR9Npt0oILb67WGlV
zxs0roQYHa+cNQosmPd0YvtK9Ym9v6JazDLA7Xj1+2tTjYCkm0Hzt/rAx3F8k6a7
JE80Vzj7t1/n3CLfUaLSeNvpQb8Bf/ovbeahmDMKzmAKBvSy+ESCrM/DPz3bQAO0
/tByakUOGJ7mM6NTlp4SKh2urn0vWj/4Y9g6j8Zcn7b9aiPw/KOSG2dejta31Y/j
brjAJ2DGYV7N951/M+ux/HtMgz0ifPnAy0BXb5OGRROwMeKroc6ZIwLLIwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFEyZkf0BMOdSAASOuzZD8qjiiW67MB8GA1UdIwQY
MBaAFB6G71B84ddmUCl6Fc5H6Lre1Gu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG9idlVIemgxMlpRS1hvVnprZm91dDdVYTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9hZjM2ZTItODMxOC00NWRkLWExYjgt
OWE4OWYwYWZjOWQ5LzEvVEptUl9RRXc1MUlBQkk2N05rUHlxT0tKYnJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9hZjM2ZTItODMxOC00NWRkLWExYjgtOWE4OWYwYWZjOWQ5
LzEvSG9idlVIemgxMlpRS1hvVnprZm91dDdVYTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCudUgAwQA
wpHvMA0EAgACMAcDBQMqDO2AMA0GCSqGSIb3DQEBCwUAA4IBAQAriX0N5s5h6ORt
FlSrKlTx/DyT5gA9Vh8VfGuLfBIQjLB0bGQmXPH+bcSQsWLWpI9xFkJU7fDZRXKP
C2UjOPSrn6UgfRcH7Ro4UdpGwaQS3KLGpKvQ2iJX7QcSPQAT1daRCsg1ZshdgYCx
ZcHLCfPBVT1MrcBGDM7812tpDQw53noz0OptiTyg6wNdmwl4E2gmT+wRMmN3ZqrL
1gCqWUvkLLDvhe5nOZVY5miHLvkSk6bzPAhOarh/M5AkGpZELHFpr4xGBgqAv2Cl
vFe7dv/TFKpwvA+PzJjZ5oTKFC17C/aLgVVx8S/cznU+0moykLsBo+p9XhoUn3aA
NPHYSlcO
-----END CERTIFICATE-----
Generated at Mon Dec 4 12:25:39 2023 by rpki-client on console-ams.rpki-client.org