Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/800359-09c0-42a8-9762-ea3a2096e357/1/4tZC_K2rjcOTAcXunr5l-AvZRV0.roa
File: 4tZC_K2rjcOTAcXunr5l-AvZRV0.roa (raw, json)
Hash identifier: 1M/bvzCfmgQoBsY3TRMC7IJ9KWtoN+FqlD57uVdbKEk=
Subject key identifier: E2:D6:42:FC:AD:AB:8D:C3:93:01:C5:EE:9E:BE:65:F8:0B:D9:45:5D
Certificate issuer: /CN=653557475c0d87c665322168c45437d10d253a5e
Certificate serial: 018D41492EB9931F3AAB351E6A1301BD904F
Authority key identifier: 65:35:57:47:5C:0D:87:C6:65:32:21:68:C4:54:37:D1:0D:25:3A:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/800359-09c0-42a8-9762-ea3a2096e357/1/4tZC_K2rjcOTAcXunr5l-AvZRV0.roa
Signing time: Thu 25 Jan 2024 15:42:11 +0000
ROA not before: Thu 25 Jan 2024 15:42:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58173
IP address blocks: 134.0.80.0/21 maxlen: 21
134.0.80.0/22 maxlen: 22
134.0.84.0/22 maxlen: 22
185.205.160.0/22 maxlen: 22
185.205.160.0/23 maxlen: 23
185.205.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:49:2e:b9:93:1f:3a:ab:35:1e:6a:13:01:bd:90:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653557475c0d87c665322168c45437d10d253a5e
Validity
Not Before: Jan 25 15:42:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2d642fcadab8dc39301c5ee9ebe65f80bd9455d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:0a:21:e5:f7:85:c7:44:a0:54:0f:0b:97:
09:83:f6:14:dc:45:56:e7:a5:67:df:3f:f8:02:57:
bd:e8:e2:50:bf:57:64:cf:18:74:f7:af:07:1d:41:
4a:ac:ce:fb:59:08:77:51:e6:75:da:34:1a:60:49:
c6:c4:48:77:4b:e7:38:ab:51:98:38:58:38:86:87:
da:7f:c1:6d:ab:d1:6a:cd:50:cb:85:5d:7d:a4:92:
c2:64:5f:dc:eb:69:cd:30:af:bb:52:33:30:e2:7e:
15:a6:fe:83:d2:a8:b9:97:9a:e3:b6:d0:0c:39:43:
ed:16:2a:51:74:30:0c:59:c3:b4:72:23:55:80:8b:
7e:b0:96:fc:d0:16:98:e6:1a:73:6b:8b:c9:f5:5f:
e4:d5:4e:99:f8:de:56:e9:65:1b:25:61:9d:d0:e8:
ec:82:79:d7:b3:df:3c:ee:3a:2a:f3:55:67:87:44:
9a:93:ff:cb:d8:53:aa:86:ce:50:c7:1a:81:84:c6:
8f:1a:2a:39:d0:a3:40:c2:1c:2f:ae:05:26:dd:a7:
6d:02:b4:18:c1:4d:98:91:32:42:f8:81:78:f3:14:
ac:d1:4c:bb:96:6d:cd:62:f3:d9:9e:dd:56:9b:f2:
b3:84:54:38:83:da:f0:a1:0b:e5:db:1f:b2:c5:45:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D6:42:FC:AD:AB:8D:C3:93:01:C5:EE:9E:BE:65:F8:0B:D9:45:5D
X509v3 Authority Key Identifier:
keyid:65:35:57:47:5C:0D:87:C6:65:32:21:68:C4:54:37:D1:0D:25:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/800359-09c0-42a8-9762-ea3a2096e357/1/4tZC_K2rjcOTAcXunr5l-AvZRV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/800359-09c0-42a8-9762-ea3a2096e357/1/ZTVXR1wNh8ZlMiFoxFQ30Q0lOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.0.80.0/21
185.205.160.0/22
Signature Algorithm: sha256WithRSAEncryption
82:e5:2c:d0:9b:9f:09:8d:56:f8:1d:2d:13:1f:f4:66:eb:0d:
9d:31:a9:bc:35:54:be:1f:66:20:ef:1c:d2:1f:d6:fc:f1:7a:
28:e7:67:44:52:35:c7:2e:b2:b1:56:62:c3:e9:54:f0:cf:04:
6c:9a:82:19:23:1d:29:7a:2d:1b:2b:6e:81:49:1f:3e:aa:d4:
30:67:65:26:40:d5:ba:0b:ce:87:b6:ef:b4:b9:07:a9:e1:74:
85:3e:61:2e:5b:ab:3a:21:02:c0:e0:1c:20:8a:d9:dd:80:6d:
13:d5:46:f2:b2:3d:e5:7a:37:d9:13:17:ee:e9:eb:fe:84:c0:
55:55:cc:f2:4e:f7:fc:50:c8:04:ce:1e:3f:f6:f4:33:2f:b1:
26:4a:12:8b:d8:d4:58:e8:85:0c:d7:34:65:ec:fb:8d:ea:2a:
6f:8d:d7:ad:a1:62:1e:f4:a1:85:1a:e7:27:7f:33:25:af:50:
5a:03:4f:a7:ae:7a:46:ed:34:b4:c1:44:39:25:74:ae:50:1e:
31:bb:62:2e:71:0c:b8:23:91:0f:08:d4:20:ce:a7:15:23:ed:
c9:d3:f3:fe:d0:20:05:d3:2b:70:cc:31:31:9b:c0:cd:a4:94:
cd:21:49:d8:01:20:b6:30:71:54:14:28:84:f8:1b:b3:24:41:
51:81:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:00 2025 by rpki-client