Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/tLM3iIVhQceNYkOIU_pVNpTfSJY.roa
File: tLM3iIVhQceNYkOIU_pVNpTfSJY.roa (raw, json)
Hash identifier: v6wP02Wnh+/NDbrm290AbF+i251q32/38i9gEakSkJo=
Subject key identifier: B4:B3:37:88:85:61:41:C7:8D:62:43:88:53:FA:55:36:94:DF:48:96
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 01936EB6718933494E03F18FDC40FB0F8926
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/tLM3iIVhQceNYkOIU_pVNpTfSJY.roa
Signing time: Wed 27 Nov 2024 17:41:10 +0000
ROA not before: Wed 27 Nov 2024 17:41:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29884
IP address blocks: 137.174.128.0/21 maxlen: 21
155.204.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:b6:71:89:33:49:4e:03:f1:8f:dc:40:fb:0f:89:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Nov 27 17:41:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4b33788856141c78d62438853fa553694df4896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:0a:07:8f:da:2e:77:ce:d3:12:19:02:de:
05:68:4c:36:1a:85:ff:9f:f7:6f:f5:31:6b:c3:82:
7c:65:4f:30:3d:e3:c6:38:ca:7e:05:31:ea:fb:7a:
36:1c:ae:74:18:9e:11:54:3f:c8:c4:2b:14:50:c1:
2e:a7:29:19:33:e6:d5:50:a1:a1:17:82:01:35:6b:
9a:19:04:5c:1e:b5:15:d2:b9:e3:79:1b:d8:29:25:
12:1e:b6:86:67:48:6f:99:7d:6f:65:1c:a2:39:a1:
10:ec:db:7d:39:51:97:f7:7f:ed:e9:a9:67:f9:48:
27:26:fd:29:21:de:da:56:b6:35:c2:2e:48:2b:29:
da:e5:2d:fa:67:2d:c8:26:00:65:c3:c8:a7:09:9c:
06:0c:df:73:6b:1f:e8:e8:d7:5e:49:de:0e:d5:32:
5b:b5:2d:7e:82:dd:4a:ae:42:aa:da:5d:96:2c:52:
3f:ea:99:7e:96:6d:fd:a9:4b:0c:ef:5b:e1:67:21:
56:ff:50:7b:e9:18:67:89:d7:dd:85:ef:66:37:05:
cc:96:03:9b:37:c4:ee:0a:88:9b:85:60:82:9e:f7:
12:f1:08:f6:3d:d8:2c:91:f0:5c:83:82:ba:71:56:
b2:8b:fc:1f:41:f7:a4:59:04:41:c9:da:3f:b8:6e:
d1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B3:37:88:85:61:41:C7:8D:62:43:88:53:FA:55:36:94:DF:48:96
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/tLM3iIVhQceNYkOIU_pVNpTfSJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.128.0/21
155.204.144.0/21
Signature Algorithm: sha256WithRSAEncryption
48:58:d9:ce:55:26:b5:83:42:11:18:f4:35:65:33:08:6e:7d:
df:f6:9b:52:19:a8:6e:1f:68:49:f2:ec:40:58:dc:39:62:ce:
9d:cd:35:0f:84:dd:c1:c8:28:04:7a:f6:fa:bb:29:0b:4d:41:
36:5f:cf:9b:7b:9c:7a:98:73:96:5d:de:e7:e2:da:93:ab:0d:
ff:d1:c6:53:36:16:f4:69:d5:58:fa:51:90:b9:31:0e:47:1e:
dc:9d:a0:ac:dc:13:e5:6f:05:8b:1e:1e:4a:5a:fa:01:57:ef:
6f:5d:7d:90:83:38:ec:ec:79:df:af:db:b0:91:6b:1d:90:a9:
8d:ad:c5:3d:e2:3a:e0:a8:c9:ab:7c:dc:1f:22:4d:34:16:81:
ae:36:2d:85:60:d4:49:1c:92:6d:13:8d:12:f5:00:11:23:da:
10:b2:71:b7:e3:82:de:89:43:3f:63:b5:c2:e1:7d:c2:6c:e6:
77:4d:e6:fd:a2:8c:0a:4d:57:76:a2:13:43:4e:18:8d:4b:31:
41:a4:39:30:22:c7:4a:d9:d6:05:b3:fd:da:d5:6f:90:f2:6f:
73:02:0e:ce:e0:d2:52:5f:67:8e:a2:2e:74:5a:9e:94:b1:d0:
19:99:00:71:eb:22:ae:2c:46:8b:23:36:f2:be:dc:d3:1f:2a:
d8:60:c2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:23 2025 by rpki-client