Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0bb6c1-9c16-4446-a9a9-c8087cdc8631/1/Tc3LS0wqVum75YmS3xCqsMbFvAg.roa
File: Tc3LS0wqVum75YmS3xCqsMbFvAg.roa (raw, json)
Hash identifier: ifxOiVAni9nx/VQlSEYt+aWjf/2dDCQcQIK9V2Xbtvk=
Subject key identifier: 4D:CD:CB:4B:4C:2A:56:E9:BB:E5:89:92:DF:10:AA:B0:C6:C5:BC:08
Certificate issuer: /CN=4fa0f6a5aee15e8454a284847fa6dd1aebc23932
Certificate serial: 01856F8BA69363CBBE81CB7A2B886D4A9021
Authority key identifier: 4F:A0:F6:A5:AE:E1:5E:84:54:A2:84:84:7F:A6:DD:1A:EB:C2:39:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6D2pa7hXoRUooSEf6bdGuvCOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/0bb6c1-9c16-4446-a9a9-c8087cdc8631/1/Tc3LS0wqVum75YmS3xCqsMbFvAg.roa
Signing time: Sun 01 Jan 2023 22:55:01 +0000
ROA not before: Sun 01 Jan 2023 22:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45012
IP address blocks: 46.243.88.0/21 maxlen: 24
109.237.128.0/20 maxlen: 24
185.3.232.0/22 maxlen: 24
2a02:2b80::/32 maxlen: 48
2a02:2b80::/48 maxlen: 48
2a02:2b80:393::/48 maxlen: 48
2a02:2b80:1::/48 maxlen: 48
2a02:2b80:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:a6:93:63:cb:be:81:cb:7a:2b:88:6d:4a:90:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa0f6a5aee15e8454a284847fa6dd1aebc23932
Validity
Not Before: Jan 1 22:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dcdcb4b4c2a56e9bbe58992df10aab0c6c5bc08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5b:a9:21:45:b4:09:4e:d8:1f:38:35:a0:fa:
f7:1b:14:df:a4:15:38:39:98:96:bc:41:21:c1:1e:
e3:7f:82:77:0d:2d:8c:3e:83:34:1b:54:4a:d9:a9:
e5:21:f6:d2:f0:21:47:3e:40:68:15:e9:d2:11:10:
b7:de:45:2a:fa:f7:7c:88:20:f3:df:9a:f4:c9:2f:
0d:ad:e8:d5:7d:6c:fd:e3:90:bd:4f:63:01:15:f4:
95:25:a4:ed:a2:63:6d:b6:05:de:1f:59:17:e8:d7:
15:50:b9:ad:d0:b0:f2:1f:22:0a:53:b3:e6:7a:5d:
ec:a9:a7:96:11:6a:c5:23:20:83:3f:9c:4f:04:59:
dc:f3:89:52:1b:29:58:78:3c:a7:c4:aa:68:bd:34:
f4:eb:97:23:3c:44:1f:f8:fb:8f:1b:67:e5:7d:bf:
04:e9:c9:7c:d5:90:c1:08:67:c2:a2:ef:1c:03:a7:
af:f5:43:de:32:29:90:6f:26:0f:19:55:5b:4a:68:
62:68:7b:ec:6a:dc:2a:f4:f4:cf:6c:33:9d:b9:13:
42:e1:b9:90:69:1a:83:70:90:bd:9d:54:2e:cc:8c:
35:07:b9:3d:c6:b3:c8:f5:20:4b:34:eb:14:b8:39:
51:3c:d6:54:22:c2:b5:9e:14:83:02:1e:c5:6f:50:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:CB:4B:4C:2A:56:E9:BB:E5:89:92:DF:10:AA:B0:C6:C5:BC:08
X509v3 Authority Key Identifier:
keyid:4F:A0:F6:A5:AE:E1:5E:84:54:A2:84:84:7F:A6:DD:1A:EB:C2:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6D2pa7hXoRUooSEf6bdGuvCOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0bb6c1-9c16-4446-a9a9-c8087cdc8631/1/Tc3LS0wqVum75YmS3xCqsMbFvAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0bb6c1-9c16-4446-a9a9-c8087cdc8631/1/T6D2pa7hXoRUooSEf6bdGuvCOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.88.0/21
109.237.128.0/20
185.3.232.0/22
IPv6:
2a02:2b80::/32
Signature Algorithm: sha256WithRSAEncryption
31:56:75:5e:db:55:14:c9:7c:15:c3:7a:38:e9:2a:33:40:c4:
a0:65:14:4b:ab:0c:40:60:d2:b7:3b:cf:c0:64:30:82:bb:d3:
01:19:e8:32:10:57:4b:ab:ab:ab:92:ed:8d:36:2a:67:d5:41:
ee:9e:d3:bd:ca:5e:88:66:e2:97:4a:e2:e0:7f:df:11:2a:56:
90:67:a8:fd:1f:e3:2e:55:0f:78:13:17:bb:f1:10:d4:5e:a7:
49:4d:ab:d8:b7:26:a7:1a:ea:0d:44:73:f9:0a:a3:80:83:4f:
8c:5a:b2:21:d0:6e:af:af:07:18:45:f1:9e:a2:79:55:6e:c2:
18:33:06:cc:75:6a:aa:dc:a0:e5:50:8a:71:12:d0:a9:9e:cb:
f7:34:0a:dc:0d:86:5a:85:9a:d5:71:38:2d:19:6b:ed:99:d6:
63:7b:c8:8a:9b:ad:bf:52:e9:cf:f8:94:98:92:c4:0b:56:1a:
83:16:da:4b:1d:c1:6a:fd:a8:7a:5d:43:c2:78:64:53:19:25:
18:b2:f5:a9:7e:94:d0:44:22:2e:24:9a:e4:23:56:81:75:4c:
ae:1a:0d:89:b0:7f:ef:0f:43:2a:24:08:5b:2f:8d:1d:44:50:
be:f0:f5:85:9a:e9:a4:66:f1:63:f8:4c:64:1d:94:e6:53:d2:
b6:60:5a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:27 2024 by rpki-client on console-ams.rpki-client.org