Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/T4YcAcx9-z_vWx7N5_go_LzPSRM.roa
File: T4YcAcx9-z_vWx7N5_go_LzPSRM.roa (raw, json)
Hash identifier: H7UT1nQGUIxj7MGL8Rx2F9evpWm/HtigCkD1ZzvdaYI=
Subject key identifier: 4F:86:1C:01:CC:7D:FB:3F:EF:5B:1E:CD:E7:F8:28:FC:BC:CF:49:13
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 018571B0F9FD11EB1DC1D605E9702BBAB539
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/T4YcAcx9-z_vWx7N5_go_LzPSRM.roa
Signing time: Mon 02 Jan 2023 08:55:01 +0000
ROA not before: Mon 02 Jan 2023 08:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33868
IP address blocks: 193.23.54.0/24 maxlen: 24
185.6.2.0/24 maxlen: 24
91.207.186.0/23 maxlen: 23
2a02:848::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:f9:fd:11:eb:1d:c1:d6:05:e9:70:2b:ba:b5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Jan 2 08:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f861c01cc7dfb3fef5b1ecde7f828fcbccf4913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:b4:fb:dc:fb:43:87:6d:18:c4:7e:61:91:
89:b6:16:0e:3b:5c:d9:79:25:11:16:01:b5:59:94:
81:03:9d:32:6c:0b:f4:23:f6:67:e5:1d:bf:48:19:
d2:c0:f4:08:de:fe:f5:76:cd:0d:05:9c:ba:8f:d6:
2f:41:7f:e4:80:9d:0a:ac:e8:07:4b:e8:01:18:80:
ce:7c:59:1f:77:1f:43:69:22:0e:53:61:c6:71:ab:
f6:c8:cd:c7:fc:5a:d8:ad:bb:c5:b2:3f:be:de:1f:
06:a0:34:a5:52:19:77:ec:4b:fe:53:42:14:d2:e5:
e1:92:e1:f8:8b:09:75:78:49:18:55:7c:d5:79:d4:
10:8a:00:2a:8d:43:25:b5:fd:af:9e:f1:0e:c6:11:
54:49:93:25:f4:c4:d5:9b:ff:eb:b7:65:dc:ed:76:
75:ba:82:a1:bb:f8:20:05:5b:4f:41:76:e8:27:4d:
77:d1:ba:f2:c7:e3:8d:85:4d:56:c0:92:58:bf:c4:
52:58:60:b5:3f:b9:16:aa:b0:49:28:77:76:44:c7:
31:97:0e:54:95:05:ee:dd:17:f9:c2:68:20:bf:f8:
ce:dd:1b:f0:e6:fc:0e:26:f8:5a:88:7d:97:41:e6:
0a:9a:e1:a9:29:fc:6a:93:87:9f:d7:93:4d:54:7b:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:1C:01:CC:7D:FB:3F:EF:5B:1E:CD:E7:F8:28:FC:BC:CF:49:13
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/T4YcAcx9-z_vWx7N5_go_LzPSRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.186.0/23
185.6.2.0/24
193.23.54.0/24
IPv6:
2a02:848::/32
Signature Algorithm: sha256WithRSAEncryption
67:7f:36:1f:47:4e:c6:1b:89:9b:92:f1:e7:4d:c4:b8:56:3c:
4e:21:10:c9:a7:bc:8b:75:ab:b9:7b:2d:f1:f3:1f:61:8a:fe:
96:aa:80:4c:7b:4f:5a:5f:85:21:e5:87:ed:5e:e1:d8:23:84:
7d:21:f7:42:21:ef:02:54:e1:c3:4a:c8:e8:a7:1e:80:99:84:
a4:34:92:cc:48:63:b5:bb:7a:f8:9d:63:ce:0a:3e:3d:7b:07:
ce:1f:41:ba:d8:8c:9a:19:95:56:2f:f7:70:aa:14:8d:24:c7:
16:2f:00:d7:96:ed:2c:d8:ed:1a:c4:e3:60:aa:a6:70:35:f1:
d4:dd:14:df:98:de:96:71:90:75:ba:41:20:b2:e9:1a:2c:ed:
21:41:a5:c8:aa:bc:80:49:45:4c:71:24:fb:90:a2:9a:07:cb:
e0:15:b5:b2:d9:a1:b9:b5:bc:02:44:82:d2:54:4e:74:f1:14:
61:ac:8d:90:6e:d4:6b:b4:79:80:62:b2:51:11:e9:4d:3f:27:
6d:a3:f1:48:c1:32:91:bc:09:4c:bb:26:f6:12:68:ef:db:41:
1b:14:aa:3a:57:8c:54:d4:df:d8:da:e8:92:df:57:5e:7e:f1:
d6:74:b3:f4:2f:2e:a8:af:a0:a4:2b:7c:73:1e:27:3c:c4:d2:
9d:46:7a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:52 2025 by rpki-client