Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fedda6-194c-4ce2-9d1c-16072070ed30/1/Tmq3YtTKvtjFDIqFkrsooM-i7yU.roa
File: Tmq3YtTKvtjFDIqFkrsooM-i7yU.roa (raw, json)
Hash identifier: Djt9w4qS9A7SY1NeQhfLImqpxRK0b3aaTdrC06f1MrA=
Subject key identifier: 4E:6A:B7:62:D4:CA:BE:D8:C5:0C:8A:85:92:BB:28:A0:CF:A2:EF:25
Certificate issuer: /CN=f17d6c8ef0341eb96f9466a2fcc7ece7accb1843
Certificate serial: 0D7F2ED5
Authority key identifier: F1:7D:6C:8E:F0:34:1E:B9:6F:94:66:A2:FC:C7:EC:E7:AC:CB:18:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X1sjvA0HrlvlGai_Mfs56zLGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fedda6-194c-4ce2-9d1c-16072070ed30/1/Tmq3YtTKvtjFDIqFkrsooM-i7yU.roa
Signing time: Sat 01 Jan 2022 10:53:44 +0000
ROA not before: Sat 01 Jan 2022 10:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47172
IP address blocks: 185.200.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226438869 (0xd7f2ed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17d6c8ef0341eb96f9466a2fcc7ece7accb1843
Validity
Not Before: Jan 1 10:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4e6ab762d4cabed8c50c8a8592bb28a0cfa2ef25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:c8:b9:91:ce:70:c6:25:23:08:22:38:37:
ac:3c:8d:d8:28:16:52:26:44:69:5c:b6:1d:b2:25:
34:8c:77:dd:82:a9:34:4a:1d:08:08:ba:ff:84:67:
de:14:9e:6e:d6:e7:4e:94:9e:49:04:58:c1:65:3d:
89:7f:1f:7f:5f:10:9e:1b:5c:96:55:fe:22:39:5d:
8c:1a:71:b0:fe:fe:a0:57:a4:0f:75:19:b6:73:22:
af:a2:f1:f0:4e:4b:53:57:68:a4:47:6e:9e:5b:a2:
24:c1:ce:e6:9f:e1:be:25:b7:72:2b:e3:08:b8:59:
b6:9d:c6:1d:1c:f5:97:9c:7d:5e:65:15:04:51:78:
c4:bf:7f:36:51:e9:f9:7a:d9:da:f4:8a:26:67:05:
2c:ef:ae:ff:97:af:0a:5d:79:19:0a:6e:56:7d:07:
60:60:41:85:b3:cb:51:10:58:20:03:21:30:49:77:
7b:1b:3f:e0:06:54:60:de:ac:d9:e0:e9:46:54:7a:
ef:5a:d1:e2:7f:54:5b:d0:3c:36:c6:c7:2e:14:98:
d6:65:05:77:82:dd:8b:bf:3b:6f:1d:22:cb:50:ed:
0d:81:a7:76:94:26:92:cc:d8:5b:ac:50:a2:f7:84:
7d:2b:c0:f8:da:54:f2:3e:af:e8:b0:e2:18:c6:00:
fd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6A:B7:62:D4:CA:BE:D8:C5:0C:8A:85:92:BB:28:A0:CF:A2:EF:25
X509v3 Authority Key Identifier:
keyid:F1:7D:6C:8E:F0:34:1E:B9:6F:94:66:A2:FC:C7:EC:E7:AC:CB:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X1sjvA0HrlvlGai_Mfs56zLGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fedda6-194c-4ce2-9d1c-16072070ed30/1/Tmq3YtTKvtjFDIqFkrsooM-i7yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fedda6-194c-4ce2-9d1c-16072070ed30/1/8X1sjvA0HrlvlGai_Mfs56zLGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.104.0/24
Signature Algorithm: sha256WithRSAEncryption
10:33:e4:02:05:8a:e9:d4:3e:19:7f:c9:fa:cb:67:05:0a:34:
3d:95:2e:d3:ca:f7:90:dc:47:f5:a3:6f:cb:c7:01:37:79:3e:
0b:a0:f1:57:f2:fd:24:ce:9d:57:92:43:22:a2:c8:e9:6d:f4:
7a:7b:21:c1:8b:2a:a2:2a:9a:84:3a:f9:5e:b3:87:54:86:4c:
c9:a9:fe:a8:ce:01:70:90:57:55:5a:37:5e:91:95:36:3b:64:
49:00:69:8a:e6:a5:63:2f:c2:de:61:e6:40:17:0e:25:86:6a:
ed:4b:40:e2:16:03:7b:12:ff:7b:8d:d1:88:f5:4f:d9:ec:f1:
77:4e:8a:7c:27:cf:6d:8f:e6:35:b5:c4:6b:f6:fc:02:e1:4c:
6a:c6:5f:b6:d8:68:04:25:9a:d3:15:78:f1:e6:f9:9d:e8:77:
26:2a:d0:05:73:54:6d:4d:fa:6f:fc:26:ee:8d:1f:56:2a:3c:
83:35:4e:d5:33:3f:23:09:bd:4b:73:8b:96:70:5c:6f:01:32:
9e:50:52:84:1c:cd:cc:83:87:01:18:a4:ea:49:d8:d7:94:6f:
08:32:22:95:5b:50:88:60:11:d3:76:fa:f8:e4:0e:bb:47:38:
c9:5f:37:e0:88:02:37:65:04:07:03:20:e4:fb:0a:2b:34:fc:
48:cb:b0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:41 2025 by rpki-client