Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/TJlZFDVe50b2_liAmAVayi4sniE.roa
File: TJlZFDVe50b2_liAmAVayi4sniE.roa (raw, json)
Hash identifier: 9bALbi7mxGJMWTrFpPnZUfQWumnhnfQC5TIuiFlLhJY=
Subject key identifier: 4C:99:59:14:35:5E:E7:46:F6:FE:58:80:98:05:5A:CA:2E:2C:9E:21
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019423698E99B844B8107B478EDAF53D7E20
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/TJlZFDVe50b2_liAmAVayi4sniE.roa
Signing time: Wed 01 Jan 2025 19:48:27 +0000
ROA not before: Wed 01 Jan 2025 19:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35397
IP address blocks: 86.107.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8e:99:b8:44:b8:10:7b:47:8e:da:f5:3d:7e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c995914355ee746f6fe588098055aca2e2c9e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:1c:70:6e:f4:b8:0e:e2:87:d4:49:25:11:
b6:84:4a:27:0e:16:b9:bc:76:f5:df:ef:7e:22:46:
c0:15:a4:4b:1c:f4:62:08:b1:a6:c5:ce:89:f3:0d:
f4:f4:21:44:c5:76:d4:91:38:91:63:db:95:b4:d5:
00:eb:ea:4c:92:60:39:88:c4:eb:f3:14:2f:ee:84:
bd:07:ce:f6:8a:7c:ec:db:2b:f1:bb:96:e3:dd:b8:
1b:49:af:06:cb:70:0f:48:7e:3d:00:03:b0:64:95:
ed:67:ac:58:08:80:a4:7f:e2:88:28:32:ee:9f:b3:
4f:a8:ce:80:4a:36:21:5d:7a:47:3f:7f:4c:58:08:
3a:e6:56:c2:51:0b:d3:db:46:b9:ca:dc:c2:69:08:
4c:fe:e5:4c:61:77:7e:2e:af:1b:b9:fc:db:12:53:
7f:86:50:9f:e4:61:78:36:09:4e:e2:7e:1b:f3:a9:
59:01:9c:41:1a:3b:24:b0:41:5a:b6:ba:40:6d:d0:
86:b2:ce:51:ec:1f:bc:87:30:1f:40:69:9b:46:38:
ee:98:62:f2:76:06:38:04:23:fe:b8:1a:75:ae:7e:
f6:ab:0e:53:89:a1:3a:9c:62:25:1e:06:80:be:81:
64:02:ff:0a:94:41:78:17:27:e1:59:d1:d6:36:67:
17:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:99:59:14:35:5E:E7:46:F6:FE:58:80:98:05:5A:CA:2E:2C:9E:21
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/TJlZFDVe50b2_liAmAVayi4sniE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.240.0/24
Signature Algorithm: sha256WithRSAEncryption
e3:1f:c0:40:f3:af:01:30:a8:4c:a2:02:7a:2e:4f:3e:8b:cd:
94:da:6e:9a:39:50:5b:68:df:54:06:e7:0f:70:12:aa:df:ff:
4f:db:a0:3f:81:d1:b1:2c:f4:7d:fe:3f:6a:d2:f4:5b:79:2d:
8d:3d:dd:49:eb:50:a0:97:61:43:f4:ec:26:3f:a4:ae:9d:91:
b7:2e:2b:f9:12:53:7d:6f:44:05:f7:58:1c:bf:46:75:71:c5:
e3:eb:0d:d5:6c:de:cc:bb:ae:8b:c9:67:17:3a:f1:8b:b8:aa:
70:bf:d5:1e:ef:93:db:73:80:59:0b:d1:17:73:1e:11:0f:d9:
df:d9:fe:99:75:fe:b5:7d:75:88:26:28:ef:ef:40:22:9c:53:
63:f9:ed:a5:4e:69:86:fd:f0:49:9e:e2:4b:51:50:77:be:7a:
a0:a3:24:32:0b:e8:fa:bb:6c:65:3d:a3:41:c9:29:68:87:46:
93:41:e9:de:4f:6f:19:58:ba:6d:c1:a6:2a:19:6d:c7:de:64:
33:17:78:18:37:5a:f1:54:65:82:4a:2f:ec:ea:d1:82:9f:91:
7f:b0:f5:7e:df:a2:6e:51:4a:c5:bd:04:06:89:a6:4c:f6:06:
b9:b4:31:66:f9:de:c6:14:24:56:c6:bf:32:84:57:5b:4f:04:
45:70:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:11 2025 by rpki-client