Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/TZzEkb_pbDry2zHr1j7xNf_vxXk.roa
File: TZzEkb_pbDry2zHr1j7xNf_vxXk.roa (raw, json)
Hash identifier: Cq8dLq6iZ3nMHrI+ZIO6VMqben3GUwZ39g6fGpW/zRo=
Subject key identifier: 4D:9C:C4:91:BF:E9:6C:3A:F2:DB:31:EB:D6:3E:F1:35:FF:EF:C5:79
Certificate issuer: /CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
Certificate serial: 018CC6B8B9BD426C4CA6FE6DF212C5049FF2
Authority key identifier: 7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/TZzEkb_pbDry2zHr1j7xNf_vxXk.roa
Signing time: Mon 01 Jan 2024 20:30:43 +0000
ROA not before: Mon 01 Jan 2024 20:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59460
IP address blocks: 91.241.32.0/22 maxlen: 22
91.241.32.0/24 maxlen: 24
91.241.33.0/24 maxlen: 24
91.241.34.0/24 maxlen: 24
91.241.35.0/24 maxlen: 24
194.146.4.0/24 maxlen: 24
194.146.4.0/22 maxlen: 22
185.135.192.0/22 maxlen: 22
185.135.192.0/24 maxlen: 24
185.135.193.0/24 maxlen: 24
185.135.194.0/24 maxlen: 24
185.135.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:b9:bd:42:6c:4c:a6:fe:6d:f2:12:c5:04:9f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe33668972dffb7ec8628ae8c3c26bede1cab9a
Validity
Not Before: Jan 1 20:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d9cc491bfe96c3af2db31ebd63ef135ffefc579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:b2:08:bf:3c:77:fb:6e:f3:8b:f9:ce:25:
77:92:aa:05:22:40:bc:b9:18:52:41:9e:fb:ad:4d:
20:de:31:90:24:4c:32:9e:7c:ab:fa:0f:28:e7:95:
f1:5d:e3:fe:d4:89:33:7a:60:b8:f3:29:b9:f4:ed:
5a:b1:ba:89:be:cc:56:5d:6a:2f:93:ef:8f:3d:64:
11:b8:62:81:b1:eb:55:f9:d8:2f:c8:6d:45:36:4c:
45:c2:f1:d4:e9:29:97:08:0b:6c:56:69:ed:a0:ce:
e0:1b:37:18:dd:5e:59:84:27:b9:4e:d2:0e:ea:26:
84:f1:db:2a:d5:52:39:7b:10:43:89:2c:17:05:32:
86:f5:db:d9:36:56:75:b7:0d:7a:fb:a0:16:71:c2:
82:49:ee:20:d9:39:3f:46:85:66:c4:3f:93:9c:1e:
8a:6e:71:3c:a6:33:d3:0a:8d:dd:e5:35:bf:2e:a9:
1f:a9:02:53:92:8b:e5:ae:85:c5:eb:0f:d5:4e:8f:
8d:89:0f:6b:65:1b:20:10:5b:48:4f:c1:2a:6d:0c:
4a:dc:e9:12:9c:d9:74:0d:92:9f:fc:9e:df:8a:60:
9f:fc:6d:31:60:2e:6e:26:5b:35:68:00:d5:26:af:
0f:ac:c1:4a:a3:48:76:e0:fb:23:ba:85:bf:a2:2d:
5f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9C:C4:91:BF:E9:6C:3A:F2:DB:31:EB:D6:3E:F1:35:FF:EF:C5:79
X509v3 Authority Key Identifier:
keyid:7F:E3:36:68:97:2D:FF:B7:EC:86:28:AE:8C:3C:26:BE:DE:1C:AB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-M2aJct_7fshiiujDwmvt4cq5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/TZzEkb_pbDry2zHr1j7xNf_vxXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9c928d-8326-42c5-8a71-73a3a40bdc30/1/f-M2aJct_7fshiiujDwmvt4cq5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.32.0/22
185.135.192.0/22
194.146.4.0/22
Signature Algorithm: sha256WithRSAEncryption
38:64:0f:4e:5b:6d:62:1e:36:15:b0:91:89:7a:79:71:08:0c:
7a:63:74:17:87:1f:23:ad:19:aa:b3:b5:4d:f3:b3:a8:e5:a5:
28:cf:00:b5:59:92:22:84:5f:3c:7f:38:30:87:7b:46:68:83:
f7:d8:a5:15:3e:ac:2a:2a:0f:22:18:35:be:12:a1:af:3c:fc:
9f:21:98:16:6f:8b:cd:5f:b0:89:f0:32:85:bb:66:2f:2d:78:
45:aa:c3:ad:10:74:7e:54:42:0e:88:0d:e7:5e:c6:79:30:1e:
f0:b5:d8:c0:5b:29:1c:e5:c4:3b:c1:b3:3e:d8:7a:42:90:ca:
1e:58:35:79:18:47:96:a3:62:b1:88:fd:89:e0:99:8a:f0:de:
bd:a6:8e:fc:3d:f1:ba:a5:81:28:18:3c:3f:20:a7:d5:54:d1:
77:21:94:da:ed:5d:63:54:15:60:1d:c6:06:a0:4c:73:a6:79:
9c:14:8d:35:68:9a:5b:f8:fa:7b:d3:1c:5b:34:b7:bd:77:5c:
a4:e8:6a:89:83:98:75:bf:6e:87:21:38:00:c9:13:59:bc:af:
0d:a1:f5:d9:04:c7:d0:df:7c:ba:85:f0:00:ef:22:ac:1d:bc:
ca:db:0d:a3:d6:61:0e:d3:29:38:8b:9d:be:be:90:e1:a9:4a:
c6:53:e6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:21 2025 by rpki-client