Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/m0TsywLYWD02x2sSh0nD7PsGTHo.roa
File: m0TsywLYWD02x2sSh0nD7PsGTHo.roa (raw, json)
Hash identifier: uAHcitqKa+9UhSu8sDQJUsQ8x0eR3KGN54lNd+/gUkw=
Subject key identifier: 9B:44:EC:CB:02:D8:58:3D:36:C7:6B:12:87:49:C3:EC:FB:06:4C:7A
Certificate issuer: /CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Certificate serial: 01831C2B4ED5D335D0CA202A8CCC321B73EC
Authority key identifier: C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/m0TsywLYWD02x2sSh0nD7PsGTHo.roa
Signing time: Thu 08 Sep 2022 08:15:43 +0000
ROA not before: Thu 08 Sep 2022 08:15:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 84.46.240.0/20 maxlen: 24
86.38.248.0/21 maxlen: 24
84.46.200.0/24 maxlen: 24
86.38.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:2b:4e:d5:d3:35:d0:ca:20:2a:8c:cc:32:1b:73:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4698585e5ebd11c969c7ed4a320edafc9d17822
Validity
Not Before: Sep 8 08:15:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b44eccb02d8583d36c76b128749c3ecfb064c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:78:a5:bc:bd:53:d3:b2:11:2f:a8:77:89:
70:9b:65:7a:c9:2a:78:25:68:e5:e0:d3:d8:d0:63:
74:f9:01:86:d1:a9:14:20:55:39:7e:0a:34:e2:b7:
14:b2:b2:85:80:7b:c1:dc:8b:d9:4b:a4:14:2c:fe:
cd:61:b4:43:57:7b:23:37:40:bf:c7:a8:bf:61:0f:
3d:2c:83:4c:96:02:33:3d:56:ec:f7:ee:2c:a8:f1:
23:0f:43:57:91:32:0a:16:34:30:32:10:27:aa:5c:
73:a9:f5:8e:98:e8:59:1d:60:f2:80:9c:96:65:9e:
73:95:98:e5:a2:e2:f2:54:53:ff:1e:12:19:1e:08:
8f:98:1d:7a:73:6c:aa:a6:10:ae:f8:2b:f5:a1:89:
03:a2:2e:7c:f8:e8:84:ae:2d:67:e8:3d:57:3f:48:
26:e3:2e:d2:ca:74:f3:31:f9:88:03:6f:64:9f:e3:
4a:e0:29:e7:fb:81:cb:2d:1d:4a:c6:c8:b3:d2:93:
0a:8f:1c:84:62:83:3e:d6:42:ef:42:8c:a5:33:04:
27:93:0f:02:83:8d:d9:f6:8a:c2:9d:8f:17:94:8e:
44:38:b1:88:29:2a:81:2f:44:60:89:1c:02:68:65:
53:07:ae:00:6d:4c:5b:cf:46:13:6f:cd:10:91:9a:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:EC:CB:02:D8:58:3D:36:C7:6B:12:87:49:C3:EC:FB:06:4C:7A
X509v3 Authority Key Identifier:
keyid:C4:69:85:85:E5:EB:D1:1C:96:9C:7E:D4:A3:20:ED:AF:C9:D1:78:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGmFheXr0RyWnH7UoyDtr8nReCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/m0TsywLYWD02x2sSh0nD7PsGTHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/5310da-6821-4673-9e98-9d6001f78a70/1/xGmFheXr0RyWnH7UoyDtr8nReCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.46.200.0/24
84.46.240.0/20
86.38.235.0/24
86.38.248.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:2c:6c:ae:51:d2:97:d8:d0:21:3c:7b:d3:7c:32:4c:e0:8e:
6b:8c:2a:93:b4:de:14:c6:f1:84:78:d6:3c:ac:c3:8a:15:c5:
7a:36:8d:87:1c:c6:6c:3a:a2:d8:ea:84:bc:9b:81:b7:dd:a6:
ab:9d:f7:a4:2d:d7:8f:7c:3e:83:ba:6e:92:ad:01:08:43:16:
58:15:ce:29:89:1e:dd:13:6d:fc:1c:d1:01:05:ef:0b:fd:2c:
1a:98:5f:88:58:63:c9:23:96:ea:41:01:c7:28:45:0d:b4:7b:
c1:97:e5:40:2e:a9:44:80:44:d5:88:9a:e7:89:bb:78:0d:69:
89:bd:0f:ea:08:e6:5a:78:8e:c2:be:33:aa:5b:34:24:18:64:
4f:c6:e3:32:e5:ce:17:7d:0c:59:f6:5f:72:7e:1b:10:d2:b7:
35:b7:7c:3c:aa:15:3a:c1:4d:82:f4:78:fe:44:ee:62:06:ff:
3b:3e:13:20:ad:f7:36:dd:3f:e4:52:fa:52:e3:79:c1:d5:0c:
12:9d:68:ff:a2:a3:85:d8:ab:ad:fe:fa:5c:77:99:70:12:97:
cb:71:a6:18:e0:98:ca:e3:a7:fc:d3:e3:19:9b:99:8f:c2:94:
c6:7e:cb:28:2a:11:cf:55:d7:d5:9b:cc:ba:92:82:39:a3:26:
7a:85:b9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:23 2025 by rpki-client