Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/sTTymR01F6RDoynC8TSKvkamGWE.roa
File: sTTymR01F6RDoynC8TSKvkamGWE.roa (raw, json)
Hash identifier: Q6Klebt7/VfO16Ve7IU7cVobaORhn/KAvxjY4XLaEeQ=
Subject key identifier: B1:34:F2:99:1D:35:17:A4:43:A3:29:C2:F1:34:8A:BE:46:A6:19:61
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01941FFA08539B06A5FAD5E884AFB46815DF
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/sTTymR01F6RDoynC8TSKvkamGWE.roa
Signing time: Wed 01 Jan 2025 03:47:47 +0000
ROA not before: Wed 01 Jan 2025 03:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 91.184.240.0/22 maxlen: 24
91.184.254.0/23 maxlen: 24
109.172.94.0/23 maxlen: 24
185.197.74.0/24 maxlen: 24
185.230.143.0/24 maxlen: 24
193.188.20.0/24 maxlen: 24
193.188.21.0/24 maxlen: 24
193.188.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:08:53:9b:06:a5:fa:d5:e8:84:af:b4:68:15:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b134f2991d3517a443a329c2f1348abe46a61961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:cf:75:98:a7:b6:31:3c:dc:05:59:81:e8:
61:28:18:ad:3f:53:31:5b:23:4b:fd:2f:1a:5c:7b:
00:49:b1:28:f8:14:28:98:7c:9a:8e:1c:10:1f:82:
6d:7e:42:68:6c:d5:c5:93:82:b1:61:07:88:36:99:
38:e3:c7:55:56:65:60:20:d4:42:f0:79:ef:fa:c9:
d7:22:88:ef:19:9f:95:c7:15:42:0a:4c:84:c1:24:
c1:91:26:8d:6d:1b:7b:f1:ce:79:13:39:32:dd:dd:
d3:77:64:02:3e:65:e4:5c:07:bc:dd:13:e8:b5:21:
88:48:25:80:8b:84:c2:58:6a:32:b2:2c:a5:37:43:
43:b4:59:81:23:bb:4a:00:b2:e2:0b:dc:dd:2e:c2:
49:42:0c:73:e2:f8:3b:73:68:58:c6:80:8d:c9:c3:
13:08:4f:e0:c6:3e:d3:08:ad:69:a6:11:1d:2d:15:
59:ca:d0:6e:64:fd:50:1d:2e:f3:c6:69:02:b0:10:
49:72:27:02:9f:02:7c:c1:02:de:db:09:ad:03:b5:
b1:99:6c:67:93:97:6a:f0:9f:1a:57:9e:03:53:ee:
8e:27:8a:65:d8:87:09:5e:e4:6b:e7:fb:ae:a4:65:
53:4c:5d:7f:55:8d:c9:9f:63:b6:27:38:da:df:47:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:34:F2:99:1D:35:17:A4:43:A3:29:C2:F1:34:8A:BE:46:A6:19:61
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/sTTymR01F6RDoynC8TSKvkamGWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.184.240.0/22
91.184.254.0/23
109.172.94.0/23
185.197.74.0/24
185.230.143.0/24
193.188.20.0-193.188.22.255
Signature Algorithm: sha256WithRSAEncryption
69:e8:b1:4f:ec:b0:52:8c:05:26:75:06:d5:12:e8:39:c8:e1:
81:f1:f4:49:40:fb:98:04:21:2a:49:1b:dc:49:4f:f1:18:7b:
cd:aa:b3:47:1d:38:82:da:d0:95:0a:9d:6f:19:e0:14:c8:9f:
11:16:9c:5d:ce:45:fd:88:99:8b:69:d8:76:29:cd:e4:45:e6:
37:49:62:5c:1b:4e:aa:68:a6:48:b6:4a:c4:a0:d2:c8:bf:d5:
63:a8:1e:51:da:e0:4b:a9:fe:c9:1b:1c:00:59:c5:46:03:b1:
6a:d4:43:67:45:7d:be:bf:d9:35:a6:88:02:e2:ff:23:0b:77:
14:15:a0:8a:da:e6:93:40:85:7a:c6:ae:4a:82:af:c0:d3:f1:
df:1f:b4:12:8f:b4:e0:af:65:09:9b:0f:84:79:4a:24:d2:39:
45:e5:8a:c2:85:57:05:14:16:70:ee:aa:8d:65:cc:3e:3e:cf:
4e:ca:39:6d:ed:db:0d:3b:53:8a:e4:22:66:cb:8e:bb:b9:bb:
06:1a:5d:d7:d6:bb:9b:cb:75:09:4c:e7:7e:ce:82:7c:e3:5e:
bc:be:35:fd:45:e3:e3:f5:5d:3b:3f:28:0f:00:da:fd:7c:72:
12:92:c8:31:0a:14:0b:dd:a6:3b:c0:30:6e:3d:bf:e8:fd:ac:
c1:26:39:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:58 2025 by rpki-client