Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/TB1SNMK17klLvRw1OV09EGXDsjg.roa
File: TB1SNMK17klLvRw1OV09EGXDsjg.roa (raw, json)
Hash identifier: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=
Subject key identifier: 4C:1D:52:34:C2:B5:EE:49:4B:BD:1C:35:39:5D:3D:10:65:C3:B2:38
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 0194244590D82539372E45336B930DE880A3
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/TB1SNMK17klLvRw1OV09EGXDsjg.roa
Signing time: Wed 01 Jan 2025 23:48:46 +0000
ROA not before: Wed 01 Jan 2025 23:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60447
IP address blocks: 77.246.216.0/22 maxlen: 22
77.246.216.0/24 maxlen: 24
77.246.217.0/24 maxlen: 24
77.246.218.0/24 maxlen: 24
77.246.219.0/24 maxlen: 24
95.214.104.0/22 maxlen: 22
95.214.104.0/23 maxlen: 23
95.214.106.0/23 maxlen: 23
185.97.72.0/22 maxlen: 22
185.97.72.0/24 maxlen: 24
185.97.73.0/24 maxlen: 24
185.97.74.0/24 maxlen: 24
185.97.75.0/24 maxlen: 24
195.170.166.0/24 maxlen: 24
2a06:4c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:90:d8:25:39:37:2e:45:33:6b:93:0d:e8:80:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Jan 1 23:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c1d5234c2b5ee494bbd1c35395d3d1065c3b238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:10:9b:6f:53:da:0c:dc:a7:69:93:73:60:
15:ec:31:ee:17:44:a8:db:ab:c5:d4:f7:36:d5:9a:
c9:15:6a:1f:44:bb:83:b3:5b:72:a6:d4:b4:40:33:
a4:73:25:dd:87:3a:7e:47:86:cb:a1:51:bd:c0:60:
9c:33:0a:db:89:18:ea:7e:b5:85:08:17:63:2c:02:
4d:53:de:15:77:17:90:15:af:28:8c:87:25:7c:c8:
2f:de:55:6d:16:ab:ed:86:fc:ea:11:db:a6:c4:72:
e1:da:e5:f1:45:f7:3e:70:d5:23:7a:58:7f:bb:80:
b6:56:3f:f8:cf:28:f3:ff:25:73:dd:1b:9a:8a:16:
86:67:35:f3:b7:fa:b8:e5:ad:55:8d:ad:49:d3:44:
52:d3:c3:64:86:59:6f:0a:9c:90:73:60:e3:cf:da:
e7:c7:18:6a:8f:ed:22:d1:ee:89:80:6d:09:ae:72:
1c:c0:8c:45:1b:48:3d:d8:ea:e6:8e:a1:ee:2c:5e:
6e:25:8f:59:10:48:29:bc:d9:d7:c5:e6:85:67:98:
1d:ea:73:d8:3d:f5:c3:b5:ea:2b:03:12:42:d3:00:
72:9a:f3:b2:7d:96:4f:59:ac:e1:93:e6:87:e8:1b:
2a:ae:d4:45:5c:11:dd:18:59:bf:e5:63:cf:80:f8:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1D:52:34:C2:B5:EE:49:4B:BD:1C:35:39:5D:3D:10:65:C3:B2:38
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/TB1SNMK17klLvRw1OV09EGXDsjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.216.0/22
95.214.104.0/22
185.97.72.0/22
195.170.166.0/24
IPv6:
2a06:4c0::/32
Signature Algorithm: sha256WithRSAEncryption
38:b2:43:41:45:e9:9c:20:44:59:d5:3c:76:68:8b:ba:ce:6d:
9e:ea:37:4b:79:19:9e:e2:f3:ac:71:da:94:a7:6f:de:f2:b7:
cb:8a:e5:78:c0:9b:40:35:52:34:9f:e2:db:32:68:28:e0:39:
be:3e:61:ae:22:a0:ba:4c:02:67:88:37:1a:b3:0e:4d:ea:dc:
5a:86:71:a8:01:40:c1:17:80:3f:0b:01:9c:b5:8c:f3:33:53:
74:6d:d6:95:40:68:51:d2:8e:8f:ca:67:6c:7e:7f:8f:14:fb:
9e:41:75:2c:b5:28:e3:d9:e9:51:21:e6:9e:57:54:8a:00:06:
77:5f:ad:d3:87:e1:48:bf:ab:7e:2d:2f:9a:b9:11:6f:34:91:
36:a8:b4:1c:ed:2f:33:7a:7d:1e:b4:8b:27:4c:5d:19:a5:65:
17:7b:79:f5:cb:4a:4f:b6:0c:3a:fd:9a:77:8c:e5:8f:51:44:
a2:c6:9b:cf:3d:7e:ac:d8:6e:94:3c:8d:02:04:1e:3c:30:e9:
f4:4c:05:52:e3:ee:b4:b2:2e:e7:52:4b:cf:f2:b8:e4:ef:cc:
48:72:28:18:a0:5f:38:a8:96:55:df:34:09:5b:b2:bf:a4:d1:
60:6a:da:76:66:2b:8d:40:aa:e7:7b:c1:a5:04:2a:42:45:e4:
b0:d7:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:16 2025 by rpki-client