Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/TjneqLbiEztdbPbccCMpZOaBKv8.roa
File: TjneqLbiEztdbPbccCMpZOaBKv8.roa (raw, json)
Hash identifier: kw27Ry4MDv8Z16ggBfpTQZ/Pi1TY7CRiazU2d9THuno=
Subject key identifier: 4E:39:DE:A8:B6:E2:13:3B:5D:6C:F6:DC:70:23:29:64:E6:81:2A:FF
Certificate issuer: /CN=62c4300ec34d6c8df50b18196e6fca58b1393126
Certificate serial: 8D63CA
Authority key identifier: 62:C4:30:0E:C3:4D:6C:8D:F5:0B:18:19:6E:6F:CA:58:B1:39:31:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsQwDsNNbI31CxgZbm_KWLE5MSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/TjneqLbiEztdbPbccCMpZOaBKv8.roa
Signing time: Sat 01 Jan 2022 05:05:40 +0000
ROA not before: Sat 01 Jan 2022 05:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 393398
IP address blocks: 85.208.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9266122 (0x8d63ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4300ec34d6c8df50b18196e6fca58b1393126
Validity
Not Before: Jan 1 05:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e39dea8b6e2133b5d6cf6dc70232964e6812aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:48:53:70:61:f5:6d:43:1c:7c:92:d8:4a:
3e:2e:96:e9:68:90:c5:9e:90:58:f3:ce:cb:d6:f6:
c8:34:1b:46:ea:ac:d8:bd:69:32:8d:9d:1f:70:80:
46:a9:56:5d:9c:9c:ed:69:5e:a9:c7:9a:ec:30:66:
63:40:69:f4:da:f8:54:7e:57:3f:b2:ff:2f:a8:43:
3c:f1:e6:00:38:d9:d0:03:c4:34:02:b0:4c:95:50:
49:80:da:8a:8f:c1:be:09:e0:94:ac:50:8e:85:91:
df:71:da:e3:3d:c5:1e:1e:ff:4f:70:da:72:b7:17:
63:c5:39:50:f2:b8:0e:3d:67:be:d8:57:32:bc:a2:
11:b6:b4:f0:63:a2:13:0a:32:4f:48:bc:59:20:4b:
2c:27:2a:7c:af:06:c7:f6:be:f5:71:75:97:b0:2e:
7a:e6:9a:a5:f5:b6:a4:a3:1f:2d:62:56:72:d8:0a:
f1:fb:49:9e:d8:8e:5e:d7:5f:29:15:ec:b5:97:f5:
8d:4f:dc:76:db:6a:b8:34:59:a2:28:58:a0:b1:2e:
48:31:5b:8f:34:97:53:17:07:d9:ea:e7:72:6a:74:
29:98:41:46:dc:99:79:ac:5c:68:57:37:28:71:2d:
eb:4a:1e:b7:1c:ca:6e:11:43:5d:ad:62:f8:6c:90:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:39:DE:A8:B6:E2:13:3B:5D:6C:F6:DC:70:23:29:64:E6:81:2A:FF
X509v3 Authority Key Identifier:
keyid:62:C4:30:0E:C3:4D:6C:8D:F5:0B:18:19:6E:6F:CA:58:B1:39:31:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsQwDsNNbI31CxgZbm_KWLE5MSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/TjneqLbiEztdbPbccCMpZOaBKv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/YsQwDsNNbI31CxgZbm_KWLE5MSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.136.0/22
Signature Algorithm: sha256WithRSAEncryption
27:f8:f1:bb:d5:b0:93:65:ab:df:c1:cd:ff:20:c4:19:c9:5e:
cf:c4:70:15:e4:93:29:54:4b:dd:95:10:d5:a3:c0:31:48:7f:
d7:45:14:8a:0a:e0:40:c5:88:77:eb:cc:b5:a7:cb:0c:99:c8:
9c:8c:bc:0e:78:2b:d8:1d:10:7f:91:42:dc:8f:90:7a:13:fa:
7e:82:73:38:60:78:a5:47:cb:cd:e2:d9:81:fe:71:17:7e:82:
f3:39:41:bf:c1:e6:ce:ac:e6:86:2d:73:6b:cf:44:9d:81:ba:
c7:33:cd:e8:22:10:ab:58:47:fe:6e:c4:ea:6a:11:81:67:0b:
9b:64:3e:3f:61:d0:0b:e8:d8:a5:bc:d6:0e:82:35:81:dd:ba:
17:d9:89:be:e0:16:0f:df:2d:ed:91:ac:cb:8c:7b:6b:64:20:
93:77:0e:37:0d:1c:b9:9c:dd:57:d8:3a:10:5d:e6:16:7f:19:
8e:e7:18:5f:d2:fb:25:0c:49:19:d7:e1:c5:69:83:ff:44:5a:
a4:4b:f3:99:ad:29:7e:a9:2f:b1:5a:a4:f1:e2:16:76:47:cb:
87:ec:9c:47:16:73:e8:89:89:75:64:10:71:00:48:7b:d9:7e:
16:19:6e:3b:9f:ae:dd:88:a6:63:a0:09:61:07:72:29:a7:53:
a6:8a:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:08 2025 by rpki-client