Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/cd495f-2b83-4aae-abf7-733567ac73c4/1/TGRGyjxJf8PM7Q1ze66cAEnlXm8.roa
File: TGRGyjxJf8PM7Q1ze66cAEnlXm8.roa (raw, json)
Hash identifier: QepBkD6972fR++wDV7F0aj/T1bI6PwmQEDBHpe62Hbs=
Subject key identifier: 4C:64:46:CA:3C:49:7F:C3:CC:ED:0D:73:7B:AE:9C:00:49:E5:5E:6F
Certificate issuer: /CN=f221ff685f4ec803cfaef1756e9e9ca29a854e02
Certificate serial: 018B866483A184B967E6F77F346045E2FA82
Authority key identifier: F2:21:FF:68:5F:4E:C8:03:CF:AE:F1:75:6E:9E:9C:A2:9A:85:4E:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iH_aF9OyAPPrvF1bp6copqFTgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/cd495f-2b83-4aae-abf7-733567ac73c4/1/TGRGyjxJf8PM7Q1ze66cAEnlXm8.roa
Signing time: Tue 31 Oct 2023 15:40:16 +0000
ROA not before: Tue 31 Oct 2023 15:40:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202766
IP address blocks: 185.64.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:86:64:83:a1:84:b9:67:e6:f7:7f:34:60:45:e2:fa:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f221ff685f4ec803cfaef1756e9e9ca29a854e02
Validity
Not Before: Oct 31 15:40:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c6446ca3c497fc3cced0d737bae9c0049e55e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:78:93:71:e5:71:bf:d6:35:3a:c3:b5:9f:89:
9d:e4:2d:6a:00:66:2c:19:39:22:cb:d9:b3:37:cb:
92:95:92:b3:2a:3d:9f:d5:40:f5:c5:a9:f2:92:31:
e9:5d:b0:2b:8a:dc:67:0a:a7:4b:b4:d2:47:57:82:
de:d1:4c:b8:3e:99:e4:b2:c7:e2:f6:78:b2:71:0b:
b2:ad:4f:94:1a:0d:ea:dd:19:52:47:a1:3b:74:76:
a5:ed:f6:67:e0:69:95:af:1a:80:3c:15:6d:74:24:
1d:e4:3f:2c:43:cf:9d:3f:87:b9:2a:a5:6e:db:43:
02:de:64:22:94:00:36:97:d3:d7:6e:3c:96:bb:6e:
f1:ae:a4:de:b3:a9:88:38:46:41:af:b8:a8:60:97:
d0:55:b0:6c:49:41:80:11:8c:c2:6f:fa:96:62:33:
e3:68:4f:63:6e:c6:74:5e:7e:0f:04:8b:4a:ae:b7:
90:e6:80:14:1f:f4:09:85:13:73:90:a4:1c:ac:63:
e9:90:2b:1b:49:3a:a3:eb:05:35:2f:d4:3b:f7:e6:
36:a9:0e:19:da:5d:ec:46:3d:c1:a6:f7:76:75:13:
38:69:c6:47:cf:30:b6:16:34:72:0c:3d:a7:15:65:
39:62:fe:9d:93:68:49:de:78:ee:1b:c1:73:f0:56:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:64:46:CA:3C:49:7F:C3:CC:ED:0D:73:7B:AE:9C:00:49:E5:5E:6F
X509v3 Authority Key Identifier:
keyid:F2:21:FF:68:5F:4E:C8:03:CF:AE:F1:75:6E:9E:9C:A2:9A:85:4E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iH_aF9OyAPPrvF1bp6copqFTgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd495f-2b83-4aae-abf7-733567ac73c4/1/TGRGyjxJf8PM7Q1ze66cAEnlXm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/cd495f-2b83-4aae-abf7-733567ac73c4/1/8iH_aF9OyAPPrvF1bp6copqFTgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.77.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e6:9f:82:58:23:d2:ad:d2:8d:51:84:1b:42:5d:3a:4f:89:
63:36:46:16:99:77:22:86:be:58:40:2c:e4:7b:0f:47:e4:a6:
38:e5:37:f8:cf:f0:f1:96:49:73:e1:89:48:be:61:d4:d7:d0:
c4:d1:c6:29:c8:b2:1f:db:26:91:21:b0:d4:a1:e6:5a:89:ed:
e1:37:78:11:4e:d6:9c:dc:50:e1:3a:2f:bd:26:6d:4e:6e:65:
bf:27:86:92:e0:45:4b:b4:a3:94:f0:81:b1:64:79:be:d0:33:
d0:90:46:b5:b4:97:0a:00:d9:a4:f8:c7:f0:c9:ce:f8:9b:c0:
8c:8d:a6:17:72:1b:26:9c:ad:06:c7:a9:3d:fe:b7:bc:91:66:
b6:05:21:9a:16:23:c7:79:38:c3:8f:7e:9d:90:eb:c1:e0:f7:
f0:ff:a7:e4:61:cf:77:0f:ca:ab:a7:a6:99:34:5b:86:e7:33:
79:3e:91:b0:08:c9:a7:74:f8:0a:64:df:32:2c:5f:05:56:56:
fb:ee:5b:22:f6:af:74:18:f4:50:f1:01:e7:a0:79:91:10:fd:
6e:88:b7:d3:77:22:69:20:04:e7:9b:24:8c:c0:1d:31:61:9d:
72:d2:61:f9:20:bc:a0:8c:79:e1:60:0f:39:89:70:d4:62:bd:
24:8d:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:13 2025 by rpki-client