Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TQSd1CRgHIyBQp_TiwspHFQUUVM.roa
File: TQSd1CRgHIyBQp_TiwspHFQUUVM.roa (raw, json)
Hash identifier: 0m8JduMuxlXA6XXqtORHTfK/qFNF/vidLSZ9pQRJn+0=
Subject key identifier: 4D:04:9D:D4:24:60:1C:8C:81:42:9F:D3:8B:0B:29:1C:54:14:51:53
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01856D8AD8AFD9A5BD5745C913DC6DA7761B
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TQSd1CRgHIyBQp_TiwspHFQUUVM.roa
Signing time: Sun 01 Jan 2023 13:34:54 +0000
ROA not before: Sun 01 Jan 2023 13:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 37.128.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:d8:af:d9:a5:bd:57:45:c9:13:dc:6d:a7:76:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jan 1 13:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d049dd424601c8c81429fd38b0b291c54145153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:c6:5f:ae:fe:6d:3f:93:6d:29:97:49:26:
2e:3c:e7:1d:9d:05:21:73:de:fa:7a:22:8d:92:ec:
16:b1:d6:b9:76:f5:31:9e:93:45:b9:67:d5:de:2c:
0e:47:84:a8:28:d1:79:90:44:fb:fa:6b:c3:34:95:
fe:7e:d2:6c:b9:5f:18:52:db:e5:32:51:3e:62:c0:
8a:4e:ca:32:ac:41:2a:01:3d:6b:16:b3:94:49:0e:
dc:9a:aa:2f:55:b7:e7:03:f8:12:9d:23:90:71:34:
c8:4e:7d:2f:78:40:4b:90:7c:2d:bf:da:12:c5:14:
d2:6c:ab:76:d2:0a:be:62:69:07:06:2e:5c:e9:9b:
37:f1:44:5b:6a:d5:e9:fa:af:23:82:68:0c:5b:35:
9a:35:f8:fb:86:07:54:13:6f:76:0d:44:d5:62:24:
2c:5b:5d:34:39:09:8b:c4:36:57:86:ac:93:9b:0f:
c0:ea:9e:07:ee:fa:e0:32:7f:66:88:80:66:17:6c:
10:d5:47:68:2b:24:ad:9d:8a:fb:87:fe:62:b4:0a:
b1:99:b8:1e:36:81:87:e8:a2:25:6d:a6:c9:73:07:
99:08:5b:d3:12:78:6b:8b:8c:61:26:e1:88:14:db:
98:c9:e8:66:cf:ec:59:17:09:3d:26:e0:97:55:cc:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:04:9D:D4:24:60:1C:8C:81:42:9F:D3:8B:0B:29:1C:54:14:51:53
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TQSd1CRgHIyBQp_TiwspHFQUUVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.252.0/22
Signature Algorithm: sha256WithRSAEncryption
73:a9:be:f6:88:0d:cc:ee:05:9c:e8:a7:b6:fe:6f:20:8e:db:
f1:6b:5a:ef:89:02:96:19:55:8d:5e:e2:0f:fc:a7:21:13:f2:
fd:9b:44:d1:12:b2:40:f7:90:9a:8c:f8:28:92:90:e8:90:cd:
3d:33:b4:85:0a:03:d8:bb:b0:69:72:6c:73:24:bf:b8:16:85:
36:06:03:b2:ab:d4:f2:c2:3c:1b:c8:6f:92:50:5c:19:4a:cf:
49:09:1c:76:91:5c:25:d1:f5:5b:c9:90:07:d8:91:20:da:ae:
9b:82:8c:ff:ad:17:83:68:8d:60:29:d9:3e:36:93:6d:aa:43:
86:43:bd:3c:11:64:5b:e0:56:e4:f8:63:08:96:ab:71:7e:6c:
6a:88:b9:02:1c:da:6d:30:34:c8:7b:06:57:28:bd:23:ba:ca:
14:5f:56:8d:7a:64:89:90:42:f0:c8:ea:60:c8:64:00:c4:33:
7c:d9:ab:a8:47:cc:bd:8b:19:b4:1a:22:15:76:f1:57:06:2b:
a0:6c:bf:dd:1e:96:c9:64:d3:c2:42:49:1f:3d:a5:d3:70:3b:
e9:d7:d5:db:92:94:de:19:5b:dc:59:a7:e4:89:a0:38:3f:c5:
1c:8c:70:69:35:d5:c4:fb:60:12:76:a0:fc:29:6b:6b:d8:73:
cc:4c:62:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:33 2025 by rpki-client