Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/TKcivj7ajHvesQmi7XIqavvV7NQ.roa
File: TKcivj7ajHvesQmi7XIqavvV7NQ.roa (raw, json)
Hash identifier: o3XbUFfXHo0+hp3wY4x9eoWjIW4KiL/7892ARoyI6HA=
Subject key identifier: 4C:A7:22:BE:3E:DA:8C:7B:DE:B1:09:A2:ED:72:2A:6A:FB:D5:EC:D4
Certificate issuer: /CN=db810ec3ef37b842cad56138d54db97a8f6b76a8
Certificate serial: 018660B4A6E0153C93BBD863E611DC9A48BA
Authority key identifier: DB:81:0E:C3:EF:37:B8:42:CA:D5:61:38:D5:4D:B9:7A:8F:6B:76:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24EOw-83uELK1WE41U25eo9rdqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/TKcivj7ajHvesQmi7XIqavvV7NQ.roa
Signing time: Fri 17 Feb 2023 18:48:17 +0000
ROA not before: Fri 17 Feb 2023 18:48:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 79.110.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:60:b4:a6:e0:15:3c:93:bb:d8:63:e6:11:dc:9a:48:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db810ec3ef37b842cad56138d54db97a8f6b76a8
Validity
Not Before: Feb 17 18:48:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ca722be3eda8c7bdeb109a2ed722a6afbd5ecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:49:91:da:cd:e6:49:d6:06:7f:5b:0d:c6:
0a:3f:de:e1:b7:56:33:6d:f7:d7:b9:d7:4a:c5:c4:
b6:b0:eb:b1:38:75:5a:0b:57:82:f8:ca:32:e4:aa:
13:3a:6c:01:bf:c0:64:4f:42:ee:b4:ef:50:c1:3f:
5b:1d:aa:8b:de:62:2f:72:16:5a:9c:11:62:3c:67:
37:6b:aa:f8:56:5b:6f:09:0a:4b:02:56:65:61:d3:
64:b0:be:c4:27:91:95:8d:37:5c:28:ba:4d:eb:a9:
67:59:bc:cc:13:8c:70:9f:73:d5:9f:7d:c6:65:94:
07:fe:5b:d8:d3:e2:d7:73:6d:51:35:32:36:85:02:
df:17:ba:7a:f8:45:00:11:0b:54:1b:8b:9c:20:de:
f6:82:e6:23:73:97:5c:5b:9b:7a:f6:af:c7:43:3b:
fe:cf:4f:40:10:dc:8c:01:ed:b4:3e:71:39:55:20:
10:1b:e2:58:02:08:1f:d9:15:1c:fe:e9:6b:6e:61:
ac:6a:5a:ba:ae:dc:aa:85:5c:5c:01:a8:47:7d:53:
78:12:d4:dc:37:e0:ef:73:a2:24:24:f7:f4:47:19:
35:8b:a1:34:7f:5a:7d:f8:8d:5d:96:03:03:a3:40:
1b:7d:64:6c:df:01:3e:57:6c:f9:e6:a5:de:d6:e6:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A7:22:BE:3E:DA:8C:7B:DE:B1:09:A2:ED:72:2A:6A:FB:D5:EC:D4
X509v3 Authority Key Identifier:
keyid:DB:81:0E:C3:EF:37:B8:42:CA:D5:61:38:D5:4D:B9:7A:8F:6B:76:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24EOw-83uELK1WE41U25eo9rdqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/TKcivj7ajHvesQmi7XIqavvV7NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/24d458-8f77-43d7-85c5-1a9d70ed2847/1/24EOw-83uELK1WE41U25eo9rdqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.234.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d9:19:57:f0:64:c1:98:8e:b1:fc:e1:9f:d4:b4:c7:a2:27:
2c:51:a2:97:52:8e:50:7a:c3:8c:e6:00:94:d2:6e:65:15:3f:
65:31:e7:55:86:12:06:3f:2b:e7:80:c8:83:25:72:23:33:96:
7b:d8:28:63:d5:f1:27:75:43:c0:d8:9c:93:2b:48:aa:3c:37:
5d:4c:df:d8:f8:23:d2:8c:9d:9f:2e:20:51:b1:ef:68:1a:ff:
f3:10:be:3f:88:fe:17:44:2c:42:28:69:7e:66:09:db:fb:ae:
14:13:be:00:c5:1c:8c:c6:d0:df:9e:fa:5f:a1:86:26:f1:7f:
0a:2a:75:64:6c:02:dc:95:70:83:fa:f4:1d:36:a1:83:24:e5:
0c:17:e3:81:a0:bd:80:b6:b3:b7:d6:b0:53:1f:96:ce:54:06:
53:d7:bc:21:81:92:fe:ca:8b:a9:ef:a3:3b:b6:d1:cf:34:ed:
0f:a7:73:17:0b:e5:e0:48:c8:80:5b:a6:b4:bf:f7:31:4b:0d:
25:39:dd:e7:da:c3:d3:45:7b:4e:29:ff:cb:6c:57:c7:f2:1a:
c6:c6:c2:83:32:60:52:d3:cf:07:44:1d:60:10:9b:87:00:42:
d2:ce:f5:d1:62:9f:3e:94:8b:f3:ae:c5:2e:50:df:a7:1f:75:
81:6d:15:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:29:34 2023 by rpki-client on console-fra.rpki-client.org