Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/T4ZPdSgXyO-3kivHVJ2L-16g3-I.roa
File: T4ZPdSgXyO-3kivHVJ2L-16g3-I.roa (raw, json)
Hash identifier: ebJLU2sNgskXi7L+DUzkP7Sy/pQ3uxvOhdQyNDHf5Xc=
Subject key identifier: 4F:86:4F:75:28:17:C8:EF:B7:92:2B:C7:54:9D:8B:FB:5E:A0:DF:E2
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01856F0B56A85C8F3618412968AC433FB013
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/T4ZPdSgXyO-3kivHVJ2L-16g3-I.roa
Signing time: Sun 01 Jan 2023 20:34:52 +0000
ROA not before: Sun 01 Jan 2023 20:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42708
IP address blocks: 79.141.174.0/23 maxlen: 23
185.174.133.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
193.42.39.0/24 maxlen: 24
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:56:a8:5c:8f:36:18:41:29:68:ac:43:3f:b0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jan 1 20:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f864f752817c8efb7922bc7549d8bfb5ea0dfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e3:95:90:3a:eb:77:48:49:e5:e0:03:78:d6:
70:e5:5b:f9:2f:a0:ab:e0:53:9b:1d:ba:12:23:91:
ec:77:e5:0b:a0:3b:8f:4d:49:08:f8:13:a7:b7:7a:
5d:1f:7f:8d:d2:41:b0:97:4e:ea:19:b0:96:bb:cf:
f0:b1:00:06:52:19:62:4a:58:97:92:b8:5f:27:77:
0f:35:66:aa:b0:67:18:8b:bc:b4:00:e2:fa:00:bc:
41:26:af:86:69:9b:e0:fa:7f:d1:1f:ae:b6:99:44:
03:50:1d:9d:5e:0a:f0:58:ac:fb:90:02:4f:84:88:
b1:92:95:a0:38:93:32:a6:02:0e:d5:38:0b:53:5c:
04:a1:8d:ab:21:84:54:46:b4:91:cd:f2:e3:f9:21:
78:14:f4:1e:c2:56:ac:dc:f0:91:70:82:0d:6f:5a:
0c:3f:18:d1:1d:46:8a:a8:9a:d5:44:30:49:36:a8:
33:01:b3:4f:2f:61:e9:a4:15:43:65:b7:9a:43:52:
f3:7d:5e:85:b8:6e:92:d9:2a:55:2f:43:ae:8c:d3:
fa:c4:34:b7:09:09:5d:8c:1a:c3:46:f1:16:88:b5:
1b:e5:6c:c2:29:36:af:b9:59:19:c3:a9:f8:6c:dd:
88:c5:f2:e6:a9:5e:a8:49:e9:58:66:bc:4d:91:fe:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:4F:75:28:17:C8:EF:B7:92:2B:C7:54:9D:8B:FB:5E:A0:DF:E2
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/T4ZPdSgXyO-3kivHVJ2L-16g3-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.174.0/23
185.117.88.0/23
185.174.133.0/24
193.42.39.0/24
IPv6:
2a01:8640:6::/48
2a01:8640:9::/48
Signature Algorithm: sha256WithRSAEncryption
94:b1:df:59:ca:c1:56:2e:0b:08:32:5a:10:d1:7f:cf:e4:43:
e2:e4:33:38:d6:64:f1:b7:69:43:2d:88:c5:81:d7:85:c7:5b:
76:4a:0e:ab:7b:26:e9:ee:b7:fe:40:2c:5c:56:30:47:d0:02:
8b:cc:7a:11:52:ca:00:d0:69:c1:e2:cf:a9:c9:26:2d:22:e7:
c7:e7:d9:2d:13:1e:4c:95:75:b1:a3:5c:7e:9f:ee:49:61:ec:
30:76:ea:d4:96:92:7b:f7:b7:53:e4:95:b8:25:41:f5:6a:8b:
44:29:7b:95:47:13:cd:ad:42:f5:18:2a:c3:2c:de:75:23:0a:
f3:3f:27:e1:b7:4e:87:59:ac:8d:b0:78:54:75:90:58:87:d5:
0e:a6:2d:fb:06:94:c2:ea:5e:d8:6c:9f:35:35:63:4c:ae:ba:
c7:43:74:bb:88:4f:03:15:c1:1d:53:54:e0:bf:56:21:a1:8a:
74:8d:4f:e8:6a:0b:97:9e:03:33:22:f8:99:c2:a3:d3:78:dc:
dd:60:de:11:c8:8c:15:2f:d3:f3:18:76:6d:45:04:6d:f2:91:
04:71:62:c1:2d:98:73:fb:d5:4b:1f:be:d8:a3:01:a2:90:8e:
cd:d7:26:5c:0c:1f:52:08:ef:14:d4:6c:fe:b5:ed:07:d3:22:
52:11:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:02 2025 by rpki-client