Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/TQ9EUV04cWKYm1hICroZbxqUuqE.roa
File: TQ9EUV04cWKYm1hICroZbxqUuqE.roa (raw, json)
Hash identifier: 5UiVq8DMalJZqVvv4q1Nxk2K8oHfF9gRpt/y7jiZuKs=
Subject key identifier: 4D:0F:44:51:5D:38:71:62:98:9B:58:48:0A:BA:19:6F:1A:94:BA:A1
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 0193984048B57E8A948A974675CBA70B3D91
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/TQ9EUV04cWKYm1hICroZbxqUuqE.roa
Signing time: Thu 05 Dec 2024 19:16:09 +0000
ROA not before: Thu 05 Dec 2024 19:16:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44527
IP address blocks: 93.92.104.0/21 maxlen: 21
93.92.104.0/22 maxlen: 22
93.92.104.0/24 maxlen: 24
93.92.105.0/24 maxlen: 24
93.92.106.0/24 maxlen: 24
93.92.107.0/24 maxlen: 24
93.92.108.0/24 maxlen: 24
93.92.109.0/24 maxlen: 24
93.92.110.0/24 maxlen: 24
93.92.111.0/24 maxlen: 24
185.62.220.0/22 maxlen: 22
185.62.220.0/24 maxlen: 24
185.62.221.0/24 maxlen: 24
185.62.222.0/24 maxlen: 24
185.62.223.0/24 maxlen: 24
2a04:8040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:98:40:48:b5:7e:8a:94:8a:97:46:75:cb:a7:0b:3d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: Dec 5 19:16:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d0f44515d387162989b58480aba196f1a94baa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:1f:21:4d:f2:77:e8:8b:92:ae:13:e3:42:
8f:99:47:33:1d:fc:4c:72:2a:ce:95:9b:85:87:c4:
f2:a7:f8:30:ee:89:43:7d:34:f3:94:fc:6a:86:99:
bd:ca:b5:5d:9e:3a:07:30:5b:df:2f:31:7c:47:c6:
3d:d3:28:bb:df:4d:36:2c:9e:9a:6f:58:13:f5:e3:
27:f7:6d:9a:de:6b:eb:9b:c7:03:9c:b3:3a:6f:1d:
51:20:d1:5a:f7:25:57:20:01:4d:cf:8b:a7:a6:38:
6b:8d:1c:58:a3:04:03:69:6e:f6:6b:65:ab:77:f7:
d3:03:11:09:4e:21:b2:97:62:b4:3f:dc:0f:e1:0b:
1c:e0:ad:89:e0:ed:7c:92:fc:d5:77:96:b8:ee:83:
66:c8:a4:d3:32:40:77:d1:fd:0b:79:7e:33:72:84:
e0:8d:bb:f8:b5:8a:7a:cc:e5:7e:12:66:63:15:d9:
a1:ed:ec:75:6e:c7:b0:25:ae:d6:82:e5:e8:1b:66:
75:2b:08:e1:75:48:6b:6e:06:ce:b4:91:ea:2b:9e:
c6:e5:2e:04:ca:e2:4a:38:45:49:f2:81:2f:ce:62:
2a:22:48:18:7d:47:2d:38:78:23:fd:b4:ac:34:2f:
50:58:43:81:b8:66:c1:da:0d:8a:2b:39:2c:ec:3f:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0F:44:51:5D:38:71:62:98:9B:58:48:0A:BA:19:6F:1A:94:BA:A1
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/TQ9EUV04cWKYm1hICroZbxqUuqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.104.0/21
185.62.220.0/22
IPv6:
2a04:8040::/29
Signature Algorithm: sha256WithRSAEncryption
98:ae:d6:d0:d8:dc:7c:2e:60:9e:05:18:46:76:30:c3:81:0b:
d8:fc:7a:8e:bc:45:ca:47:27:15:fc:07:9e:38:eb:e3:e2:9b:
7f:16:12:bd:74:5f:82:86:d2:75:a5:a7:06:4a:9c:d5:e9:08:
3f:2f:7e:ff:6a:7c:cb:18:95:45:e5:4f:c9:ad:18:11:b8:40:
e1:f6:9d:fa:00:1d:20:bb:0e:26:45:22:36:94:bc:9d:0a:32:
3e:dc:c0:eb:af:3e:cf:a2:a3:68:62:64:0b:d7:13:08:ee:f6:
d2:44:d0:7f:9c:c8:62:5b:0d:5b:e4:b8:0b:7b:fa:a9:81:6c:
c2:8f:2a:c9:e7:f4:45:8f:ae:c4:13:d8:d5:63:cf:8b:77:ae:
b0:97:2d:81:2a:07:f6:fc:ac:1c:b3:1f:07:30:0c:d0:a8:93:
e6:78:f4:b5:35:4a:ca:b6:53:2f:2d:73:c1:cb:90:ff:7b:a2:
3b:69:09:a7:10:01:98:ff:05:df:b4:52:ba:cc:70:fd:ef:03:
73:43:d9:cf:f8:79:83:ba:f1:50:a8:47:ec:f1:27:7d:78:38:
05:05:5e:ba:9f:33:b9:6c:84:70:4a:29:20:1b:81:db:03:9f:
38:64:75:ee:28:18:9b:36:05:92:b9:88:42:d6:f7:68:c5:e6:
49:46:7f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:03 2025 by rpki-client