Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/tcj-NE9Oq0W4crYRf7idvrdJGhA.roa
File: tcj-NE9Oq0W4crYRf7idvrdJGhA.roa (raw, json)
Hash identifier: KUoNJ5fYZ8EMQRtRw0sVkk41j68saauRAmEflc3gXhk=
Subject key identifier: B5:C8:FE:34:4F:4E:AB:45:B8:72:B6:11:7F:B8:9D:BE:B7:49:1A:10
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 018CACD1C6EDBCD894869134FD19FCAFC10D
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/tcj-NE9Oq0W4crYRf7idvrdJGhA.roa
Signing time: Wed 27 Dec 2023 19:47:58 +0000
ROA not before: Wed 27 Dec 2023 19:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24953
IP address blocks: 185.34.196.0/22 maxlen: 22
185.167.240.0/22 maxlen: 24
185.213.124.0/22 maxlen: 22
2a0b:c200::/29 maxlen: 29
2001:1ad0:c4fc::/46 maxlen: 48
2001:1ad0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ac:d1:c6:ed:bc:d8:94:86:91:34:fd:19:fc:af:c1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Dec 27 19:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5c8fe344f4eab45b872b6117fb89dbeb7491a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a8:f8:09:d9:b9:c7:4b:13:57:99:62:94:c2:
15:8b:7b:b2:dc:cf:44:52:0e:af:d6:3a:60:59:58:
83:ce:c7:d5:77:43:2d:e1:54:b2:98:85:41:1f:e7:
ca:27:1b:a5:1c:35:ca:fc:23:ac:5c:a2:83:a7:b8:
6e:08:7b:b9:00:d0:f1:db:9a:b8:dc:7d:34:13:eb:
06:a3:2b:61:f0:24:8c:7e:9a:b9:64:da:f6:58:06:
2c:28:6d:a5:e5:6b:25:22:8e:6f:4f:97:3e:75:20:
f0:f4:a0:6f:ac:8d:a9:6c:14:03:78:41:bb:cb:6e:
8a:d1:8d:84:42:e6:2d:4a:a1:11:c4:9b:9d:bc:46:
e0:da:b5:08:17:ec:33:bb:82:42:76:8d:ba:46:d3:
a8:a2:75:74:db:9c:28:97:2a:1b:f0:d2:93:39:04:
ef:4a:ee:fe:fd:05:b7:80:cb:e0:01:b2:48:e6:df:
b2:0d:7f:0d:ab:ce:4c:e5:12:4e:6e:69:84:e1:4e:
db:e7:71:01:d4:f8:e8:37:bd:30:cf:56:00:ac:32:
85:4c:fe:02:69:62:b5:7b:4a:5e:76:86:5a:42:9c:
aa:7a:6c:8d:b9:e0:83:e5:46:2a:44:2c:f7:4a:dd:
b9:04:57:3e:2e:00:0c:16:a2:e4:ad:5d:57:6d:f8:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C8:FE:34:4F:4E:AB:45:B8:72:B6:11:7F:B8:9D:BE:B7:49:1A:10
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/tcj-NE9Oq0W4crYRf7idvrdJGhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.196.0/22
185.167.240.0/22
185.213.124.0/22
IPv6:
2001:1ad0::/32
2a0b:c200::/29
Signature Algorithm: sha256WithRSAEncryption
3a:3f:b1:95:7a:96:4a:cf:71:b7:7d:dd:72:67:f1:5c:e3:53:
c7:46:87:aa:98:7f:1c:22:d0:a0:f0:bc:cf:4e:77:1b:36:a1:
8c:90:91:c2:df:96:98:e9:5f:b4:a2:f8:0c:2e:3c:07:37:e8:
08:00:6e:37:59:34:ac:dc:5b:3f:0f:c8:ac:63:b0:18:a1:50:
23:dc:b8:e5:5c:bd:8d:4d:b2:86:3a:fa:cf:fd:2c:b7:95:dd:
21:cc:c3:d3:48:d7:b6:0e:16:fa:1d:f3:12:62:77:dc:15:e2:
8d:e0:d3:b5:15:99:d0:83:0f:49:ba:80:f5:fe:d7:8f:71:ca:
79:df:8c:a2:fb:11:b7:e2:b5:ee:98:3a:90:8b:89:d0:11:ae:
a5:75:ca:f0:10:d1:de:94:db:1a:34:c0:0c:83:2d:72:a8:b9:
df:4f:a2:75:09:ec:db:34:ac:0e:ea:b5:3c:cc:e4:bc:2c:f8:
a4:46:6e:7e:ae:19:a0:a5:b0:c4:8e:2d:d4:8d:df:c5:5f:11:
a1:99:eb:b4:54:45:a3:fe:57:06:d6:c4:58:68:d2:25:79:61:
8f:17:cf:3b:24:c9:2a:3f:97:96:26:1a:b6:91:5c:c8:d1:aa:
9f:77:7c:5b:6a:37:37:8e:a4:f3:10:7b:6c:1b:20:e9:21:62:
7e:00:ac:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:28 2025 by rpki-client