Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/TxLeKZSE6HU-UBz-3k8wSgJyHec.roa
File: TxLeKZSE6HU-UBz-3k8wSgJyHec.roa (raw, json)
Hash identifier: OThJc2pHcezqPXcPeFt7UQFpAe54ciK86nuP/fzpbrk=
Subject key identifier: 4F:12:DE:29:94:84:E8:75:3E:50:1C:FE:DE:4F:30:4A:02:72:1D:E7
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0194236A57C1BB52FFB49705160DC8A11F76
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/TxLeKZSE6HU-UBz-3k8wSgJyHec.roa
Signing time: Wed 01 Jan 2025 19:49:19 +0000
ROA not before: Wed 01 Jan 2025 19:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1136
IP address blocks: 145.4.224.0/20 maxlen: 20
145.15.108.0/22 maxlen: 22
145.15.108.0/24 maxlen: 24
145.15.109.0/24 maxlen: 24
145.15.110.0/24 maxlen: 24
145.15.111.0/24 maxlen: 24
145.15.114.0/24 maxlen: 24
145.15.115.0/24 maxlen: 24
145.15.208.0/21 maxlen: 21
145.78.0.0/16 maxlen: 16
145.119.0.0/18 maxlen: 18
145.119.64.0/18 maxlen: 18
145.119.64.0/19 maxlen: 19
145.119.128.0/18 maxlen: 18
145.119.160.0/19 maxlen: 19
145.119.192.0/18 maxlen: 18
145.119.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:57:c1:bb:52:ff:b4:97:05:16:0d:c8:a1:1f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 19:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f12de299484e8753e501cfede4f304a02721de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:d1:53:59:ae:c0:35:e4:ae:e4:00:75:7e:
8e:b9:29:91:7c:2c:ff:30:fd:77:de:ef:de:0c:76:
e9:17:0b:d6:b8:b2:4d:09:11:a2:e8:3e:97:54:c4:
99:86:11:9f:ef:6e:08:6b:9a:14:c6:40:ae:47:ab:
98:4d:64:c3:bc:6c:75:10:34:e9:86:54:15:07:44:
5e:bf:b8:0d:67:c7:0e:91:91:c3:dc:8d:23:e4:33:
93:f8:73:fb:d9:be:76:e6:2c:dc:2a:d8:7f:55:89:
f8:f6:d8:c8:0e:8c:e2:2e:2a:9c:7a:53:a4:25:06:
3b:22:1f:c4:ab:52:b1:01:0c:22:0c:6d:6e:4a:b3:
8f:c2:c2:d3:c5:29:da:65:a2:a4:c5:86:95:90:e8:
d8:82:f1:f8:ba:4d:56:44:48:73:a6:b0:5e:8a:5a:
bc:54:16:2c:6a:7a:56:96:c1:2d:19:7e:42:fd:a8:
65:a3:23:03:3e:ce:3a:1c:b0:82:85:b4:9e:50:ff:
35:b2:2e:e5:a5:77:29:9f:4d:40:de:63:2a:19:f9:
58:dd:fd:2b:83:3b:24:90:2d:23:22:1c:30:54:0d:
6e:5d:cc:87:42:27:50:5e:28:76:71:9d:a7:fe:3a:
8e:16:cc:91:6d:78:f7:df:28:54:6f:51:86:3e:fe:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:12:DE:29:94:84:E8:75:3E:50:1C:FE:DE:4F:30:4A:02:72:1D:E7
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/TxLeKZSE6HU-UBz-3k8wSgJyHec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.4.224.0/20
145.15.108.0/22
145.15.114.0/23
145.15.208.0/21
145.78.0.0/16
145.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:88:f7:f2:4a:2d:ae:13:4d:d1:0d:e3:50:ba:0e:22:a1:36:
8c:30:02:f1:89:c4:d3:69:80:05:24:e3:e7:59:d9:81:3c:4e:
e7:72:cc:51:b8:8f:7d:9e:61:2f:a1:c2:a7:63:2c:8e:b9:8e:
9d:33:1d:29:22:57:75:45:2e:ee:18:66:2e:69:4c:db:97:18:
f3:85:f8:57:e2:a8:56:ef:db:c1:89:c8:a6:9d:7e:7e:79:6f:
0f:8f:bd:6c:9d:eb:8a:2a:8b:f9:19:2f:c0:52:87:ff:21:97:
a3:1d:10:1e:c0:73:3e:53:ba:eb:38:8b:50:31:99:c4:a8:70:
77:31:10:04:bb:f3:d6:cd:0b:c3:24:00:22:d0:f6:fe:c2:00:
9a:21:2f:f5:bd:25:c8:07:82:ba:44:08:bd:da:98:2b:87:6d:
01:56:85:71:16:ef:7f:4d:d3:8d:f6:22:92:d6:a6:98:57:4c:
e2:2d:d7:24:ad:9d:84:83:8c:7d:e2:19:ef:2c:3b:3d:6d:04:
b6:4d:fd:73:f1:81:cf:7b:fb:03:8f:83:d3:4d:da:9a:a2:35:
75:4e:8b:e1:73:5a:2b:85:52:fc:ab:ce:f6:c1:31:51:76:4e:
7a:2b:82:33:43:e9:f7:97:99:bb:a2:88:0f:e5:f7:be:da:d8:
b8:ca:5f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:18:33 2025 by rpki-client