Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/56671d-1b0e-481b-aea3-5a09965b711d/1/Tt4j9MLQSBs4itiQ400g4-wjz48.roa
File: Tt4j9MLQSBs4itiQ400g4-wjz48.roa (raw, json)
Hash identifier: OPBeWBiMFgBrGfsVzSL+KLJw6KWPGiGQFWRbwjnqPv0=
Subject key identifier: 4E:DE:23:F4:C2:D0:48:1B:38:8A:D8:90:E3:4D:20:E3:EC:23:CF:8F
Certificate issuer: /CN=1b9f214c8802f95a84ba6a7fcad04612cc5b5785
Certificate serial: 01856BDC7F500AC47A6B6C680B069A28D8CD
Authority key identifier: 1B:9F:21:4C:88:02:F9:5A:84:BA:6A:7F:CA:D0:46:12:CC:5B:57:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hTIgC-VqEump_ytBGEsxbV4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/56671d-1b0e-481b-aea3-5a09965b711d/1/Tt4j9MLQSBs4itiQ400g4-wjz48.roa
Signing time: Sun 01 Jan 2023 05:44:50 +0000
ROA not before: Sun 01 Jan 2023 05:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40987
IP address blocks: 185.223.44.0/24 maxlen: 24
185.223.45.0/24 maxlen: 24
185.223.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:7f:50:0a:c4:7a:6b:6c:68:0b:06:9a:28:d8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f214c8802f95a84ba6a7fcad04612cc5b5785
Validity
Not Before: Jan 1 05:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ede23f4c2d0481b388ad890e34d20e3ec23cf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4d:1c:13:4d:46:5d:be:a6:db:65:ce:e8:ef:
fe:a5:29:3a:d4:c8:c3:ad:09:94:df:95:46:1f:5e:
6d:ba:f7:52:41:72:5c:c4:4c:d0:5c:57:b8:37:f5:
4a:46:2e:ac:66:3e:11:c8:81:bc:9e:43:e5:90:5d:
43:3e:42:91:18:cf:b2:c2:3d:c4:70:29:5d:6b:d9:
75:3c:f4:f0:5e:bb:da:27:df:93:f1:7b:9d:71:1e:
b1:d8:f5:4b:af:33:6f:b0:2b:66:ca:b6:58:e0:3d:
5b:77:2b:8a:bf:97:18:3e:76:ac:80:b6:3f:83:09:
0d:ff:5b:93:b1:1f:57:59:61:66:db:45:fd:cc:d0:
d6:d7:19:fd:6c:71:a3:a9:a8:1f:e3:ad:02:e8:81:
cf:93:4d:94:80:aa:31:94:42:41:67:1b:6e:c3:71:
d0:cd:9c:a5:6e:dd:d2:2a:3b:ff:97:77:43:7f:f0:
c5:e4:5e:ac:bd:8d:6d:72:5d:bc:19:6b:14:a4:e5:
5f:53:f0:2c:41:33:9a:bc:23:f4:6b:f5:6d:b4:be:
99:a4:95:b6:c5:12:26:84:1c:3f:21:05:a3:ba:f1:
92:e2:5b:75:f2:7d:fa:5f:48:0e:85:2f:51:0d:c7:
e2:d9:70:fa:0e:58:cd:fd:bb:1c:6f:25:5d:f1:8d:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DE:23:F4:C2:D0:48:1B:38:8A:D8:90:E3:4D:20:E3:EC:23:CF:8F
X509v3 Authority Key Identifier:
keyid:1B:9F:21:4C:88:02:F9:5A:84:BA:6A:7F:CA:D0:46:12:CC:5B:57:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hTIgC-VqEump_ytBGEsxbV4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/56671d-1b0e-481b-aea3-5a09965b711d/1/Tt4j9MLQSBs4itiQ400g4-wjz48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/56671d-1b0e-481b-aea3-5a09965b711d/1/G58hTIgC-VqEump_ytBGEsxbV4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.44.0-185.223.46.255
Signature Algorithm: sha256WithRSAEncryption
75:07:ad:41:a7:3b:53:ba:98:12:bd:9d:9d:23:eb:cf:fe:72:
e5:c2:6c:1e:3d:e7:72:09:19:bc:71:a9:0d:5d:f2:2f:cb:a0:
62:f7:0b:25:7f:dc:ff:71:9c:c4:02:47:5b:72:cf:85:88:c2:
35:55:08:ac:6b:e3:35:ba:ea:f6:c3:21:06:f1:c6:b5:4d:dd:
08:69:7c:13:b0:5a:28:0f:1b:e8:1c:9a:b1:93:6c:65:51:2a:
b2:eb:6e:8f:27:8a:e7:2d:66:c1:7b:13:23:7b:39:a6:75:2d:
1f:b7:a5:eb:f9:4d:ac:4c:8f:89:1a:74:74:58:b0:fb:54:8d:
91:31:81:62:26:76:58:57:8b:50:ff:da:7f:33:c8:9b:59:af:
fb:d9:e8:80:3c:41:4f:4a:10:16:bc:d3:16:23:e0:7a:22:43:
fb:d6:94:e8:f4:ad:e8:94:1a:1f:ba:2a:e6:06:71:66:bb:a9:
f0:0d:7b:b7:d1:38:27:c6:e8:4d:9a:dd:a5:bf:27:66:ed:50:
ce:11:fe:ff:25:f7:ce:86:27:86:ad:66:7e:a0:6f:f8:e2:f5:
2b:03:96:05:26:0c:1a:93:14:de:e5:0d:44:45:9f:0e:e9:49:
12:5f:1d:c5:0b:0c:f3:4b:f2:22:19:a5:51:d4:00:4b:c1:7d:
e2:f7:66:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:40 2023 by rpki-client on console-fra.rpki-client.org