Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/tfeGy-oVCY1Z7oyqHE7zpq70Xf0.roa
File: tfeGy-oVCY1Z7oyqHE7zpq70Xf0.roa (raw, json)
Hash identifier: mHWJpSWDuxlD1x9BWFmbzCK1iDrb4avINHds3U57/3s=
Subject key identifier: B5:F7:86:CB:EA:15:09:8D:59:EE:8C:AA:1C:4E:F3:A6:AE:F4:5D:FD
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 071E4E19
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/tfeGy-oVCY1Z7oyqHE7zpq70Xf0.roa
Signing time: Mon 20 Jun 2022 16:10:45 +0000
ROA not before: Mon 20 Jun 2022 16:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 37.156.226.0/24 maxlen: 24
87.121.136.0/21 maxlen: 24
185.137.36.0/22 maxlen: 24
94.176.96.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
89.44.77.0/24 maxlen: 24
46.102.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119426585 (0x71e4e19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: Jun 20 16:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5f786cbea15098d59ee8caa1c4ef3a6aef45dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:95:bf:40:e9:0a:5d:58:00:c6:1b:ae:51:42:
12:38:cd:5c:c9:3a:96:f5:cd:83:6a:9c:b4:d5:1d:
db:fc:21:f3:d1:35:93:64:8e:d2:7b:ff:de:8a:85:
2a:52:be:19:3e:59:94:8f:ac:16:67:24:f1:2b:57:
e0:12:12:2a:ea:26:e1:07:4b:66:14:83:87:f4:7d:
a2:18:06:6a:a8:06:68:18:57:32:eb:e6:82:0d:07:
3d:be:35:6d:9f:ef:8c:2a:61:d5:b9:80:83:d5:b0:
f2:70:e8:80:9f:94:70:b3:41:9f:79:93:95:98:0b:
b4:f6:e1:62:31:8e:21:c7:da:01:f0:89:56:ca:2f:
7c:cc:d5:30:75:40:38:2c:35:1e:d5:56:ea:60:a7:
24:36:5e:98:ce:c3:9b:b5:f1:73:2b:05:03:80:25:
67:60:a0:5d:76:19:55:c3:43:d7:aa:88:96:b5:9d:
4a:a6:51:ed:af:84:ae:db:33:17:cc:01:ee:b3:15:
a6:88:be:9b:d7:2c:16:47:e5:a5:78:18:5b:58:f4:
b2:f2:f1:7c:26:18:d0:93:76:49:14:ee:75:d4:3e:
4d:d5:0f:30:bf:53:22:b5:fa:e1:4e:58:82:b5:34:
80:83:ae:db:c2:19:85:b2:74:45:5f:a3:87:5f:37:
12:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F7:86:CB:EA:15:09:8D:59:EE:8C:AA:1C:4E:F3:A6:AE:F4:5D:FD
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/tfeGy-oVCY1Z7oyqHE7zpq70Xf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.226.0/24
46.102.116.0/24
86.106.135.0/24
87.121.136.0/21
89.44.77.0/24
94.176.96.0/24
185.137.36.0/22
Signature Algorithm: sha256WithRSAEncryption
36:d4:94:de:06:63:e8:26:55:1e:54:f9:3e:9b:d6:70:0d:bd:
36:b5:bc:fd:f7:f7:30:94:fe:6a:bf:9b:71:a4:10:ef:a2:04:
ad:ad:cf:f5:af:38:22:07:7c:a6:0b:01:5c:5b:7c:a2:8a:28:
5f:81:ac:a0:28:62:3d:de:89:e7:0a:1e:29:29:1f:5a:c6:32:
21:8f:b5:7e:b4:69:80:be:b2:37:aa:5c:df:f1:e4:8d:8b:8b:
31:0f:62:2d:cd:5f:20:45:5c:32:41:55:f2:57:12:8b:ff:bd:
8e:1f:32:e4:e0:9e:e8:7e:ec:dd:36:13:a5:55:e4:1e:2b:ad:
9e:be:c2:ba:cb:4e:49:18:fb:f1:d7:b7:e4:5d:64:78:bc:e0:
87:d0:ef:4b:e9:41:fc:92:d0:44:4b:c7:e1:23:e5:eb:3b:52:
45:e3:0f:29:c9:e2:30:3e:f7:e8:b1:ec:15:48:4b:ac:3d:5d:
5d:0e:66:c4:a4:f0:2b:f5:10:f5:2f:fa:fc:65:a2:7a:44:be:
3f:df:bd:fd:9f:49:65:16:fd:6f:3d:27:d9:a0:19:d7:0c:c9:
e9:4e:70:8d:c2:73:ea:90:32:aa:2b:99:47:68:5d:3a:34:9d:
29:34:1b:83:30:35:e6:8b:e2:4d:2e:26:56:f4:fe:bc:d2:5f:
c3:e6:f0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:20 2025 by rpki-client