Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/Tmlha8QiqoF7IcgI-a0n-f2jtPk.roa
File: Tmlha8QiqoF7IcgI-a0n-f2jtPk.roa (raw, json)
Hash identifier: tNDWcUl/Q1J25UVKf/N6DxnKAyYeukXpkMmFMrtPzTU=
Subject key identifier: 4E:69:61:6B:C4:22:AA:81:7B:21:C8:08:F9:AD:27:F9:FD:A3:B4:F9
Certificate issuer: /CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Certificate serial: 018D13D7F1AC3D087E2A46562339DBB0671A
Authority key identifier: 61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/Tmlha8QiqoF7IcgI-a0n-f2jtPk.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 194.26.134.0/24 maxlen: 24
213.217.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f1:ac:3d:08:7e:2a:46:56:23:39:db:b0:67:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e69616bc422aa817b21c808f9ad27f9fda3b4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:74:50:e9:bd:4c:a5:1e:89:5e:d8:da:c7:fb:
66:f3:40:16:d0:16:1c:c4:d1:03:8b:27:11:b7:ab:
13:09:55:9d:4f:68:d2:0f:14:9c:4b:9a:ed:34:eb:
b2:57:d7:22:8b:ab:1b:0b:e0:1f:5f:46:0b:32:35:
27:ab:f0:39:cd:bc:29:96:f0:d1:d7:62:60:5e:42:
70:31:5f:b6:0d:ca:8c:f9:34:a3:c0:63:88:e9:a2:
10:ed:ea:60:3b:8f:f5:12:78:89:f9:52:6b:66:a3:
77:91:49:2f:42:3b:7b:d4:02:ef:28:4a:e1:f6:ce:
ed:0b:db:d5:06:7b:10:e1:a2:a7:4b:b5:84:23:fc:
99:fc:bf:10:b8:de:7b:52:70:d0:c2:e5:1b:b1:a3:
7d:03:7b:4a:75:d7:42:5d:fd:1e:98:a6:61:cd:ef:
09:68:c9:27:5f:a8:18:28:c5:52:29:ea:ad:e9:ca:
09:20:17:43:6e:4e:da:b0:a8:aa:f0:8d:eb:f1:03:
4f:60:ed:8e:c1:bc:a9:3e:02:68:80:ab:75:6d:f9:
98:1a:8d:51:ad:d7:bb:03:e1:24:59:ab:4c:ea:b9:
ca:ad:ad:a9:d9:e5:4a:8f:fd:a4:72:6a:f7:b0:39:
35:fe:44:da:3f:71:db:2b:87:f2:86:44:be:75:58:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:69:61:6B:C4:22:AA:81:7B:21:C8:08:F9:AD:27:F9:FD:A3:B4:F9
X509v3 Authority Key Identifier:
keyid:61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/Tmlha8QiqoF7IcgI-a0n-f2jtPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.134.0/24
213.217.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:22:48:9b:68:9f:6c:2a:60:bc:81:4d:9b:c8:75:17:17:41:
b5:2f:63:b8:c2:e3:98:7d:72:06:fe:f9:61:00:e6:75:2b:c9:
ce:40:76:e5:99:9d:d4:56:ad:54:e2:b7:e7:18:c9:29:88:7c:
46:f3:3e:c9:fb:ff:6b:49:e0:ff:05:99:45:36:75:07:1b:b0:
ef:ad:fd:a3:cc:ba:0d:e5:ca:e2:8d:d7:4b:82:de:dd:f5:05:
aa:72:2b:cd:bb:c9:05:75:94:fe:f3:bf:5a:45:ba:55:e4:f4:
89:df:55:2f:c5:40:8d:02:10:07:f0:d4:d8:45:54:50:c7:91:
2e:f6:0a:4e:7f:7f:80:ee:39:1b:0e:9d:fe:07:cc:b4:db:a5:
ce:f9:fc:c2:ae:af:06:26:6d:02:24:37:c2:7b:69:6f:b1:c9:
ac:bb:04:8b:c9:04:df:0c:8b:f4:85:c1:f9:dc:75:c7:f2:b3:
87:48:44:ff:67:42:33:67:8f:20:4a:b6:33:4d:11:9b:98:e2:
19:4c:6e:5a:1f:cb:9a:3a:59:09:a2:54:64:be:94:20:b3:b0:
56:81:01:2c:ea:16:a7:b8:ee:b3:35:2e:0e:ad:44:09:4e:97:
bc:89:4c:e7:2d:99:e2:76:8c:a2:10:4e:8d:b5:56:a2:42:e3:
d2:a3:ad:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:48 2024 by rpki-client on console-fra.rpki-client.org