Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/T_Q_reFzpNg2VJDDsUW5kAU3o7Q.roa
File: T_Q_reFzpNg2VJDDsUW5kAU3o7Q.roa (raw, json)
Hash identifier: 3JCeN9eOV01l3NSUO32T8sgK9o1saZIISrqwgfbXMwc=
Subject key identifier: 4F:F4:3F:AD:E1:73:A4:D8:36:54:90:C3:B1:45:B9:90:05:37:A3:B4
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018847B85D97B9187A7DC73138FFCD12A154
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/T_Q_reFzpNg2VJDDsUW5kAU3o7Q.roa
Signing time: Tue 23 May 2023 08:27:24 +0000
ROA not before: Tue 23 May 2023 08:27:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 164.215.103.0/24 maxlen: 24
85.158.146.0/24 maxlen: 24
109.205.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:47:b8:5d:97:b9:18:7a:7d:c7:31:38:ff:cd:12:a1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: May 23 08:27:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ff43fade173a4d8365490c3b145b9900537a3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:0e:95:a9:03:6b:d9:bd:67:00:2f:7b:48:
bf:3b:03:0d:8e:e3:f9:b1:56:ae:9d:c0:1a:7e:98:
78:a6:fa:6d:75:b3:e0:c9:52:6c:12:d5:41:47:15:
c6:d3:ca:95:2a:ec:c8:1c:ca:2f:5b:fa:34:e9:d9:
ec:a5:6d:5b:b0:ed:bf:89:29:61:4d:4b:56:8c:38:
9c:86:41:e5:8e:23:20:a9:78:48:83:e6:65:cc:6e:
d8:9b:13:4a:e8:a1:f6:a2:67:03:b5:a5:9a:76:71:
7d:96:23:87:d4:5c:31:e5:63:fb:42:04:a4:cc:03:
37:92:5f:01:12:b7:53:c2:3b:49:31:96:70:bd:97:
bb:ca:5e:e3:5b:41:5e:85:2c:03:bc:52:94:09:5a:
de:e5:77:6d:8e:d6:54:7e:26:16:4c:54:ff:4d:98:
d0:11:57:17:df:64:1b:14:53:2d:56:c9:9e:d9:80:
6c:a4:d8:4c:b1:79:cc:9a:92:04:e3:a0:77:c5:9d:
21:2a:78:4d:c9:47:3f:e0:c3:f3:13:61:9d:37:9c:
fd:5a:32:b1:68:e0:a4:f0:97:e9:10:3a:26:72:8d:
16:fb:7d:a6:56:5d:b6:18:87:0c:43:75:cb:44:ec:
3f:47:16:a9:a6:5e:f3:ce:da:30:3a:18:ac:de:15:
63:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F4:3F:AD:E1:73:A4:D8:36:54:90:C3:B1:45:B9:90:05:37:A3:B4
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/T_Q_reFzpNg2VJDDsUW5kAU3o7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.146.0/24
109.205.210.0/24
164.215.103.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8d:0d:56:a0:97:4d:36:e3:1c:a3:13:64:c9:28:16:f2:35:
c2:cc:36:e5:20:22:e1:39:e6:bc:e4:7c:3f:de:d3:f8:82:78:
d7:cf:49:8a:49:2c:2f:7a:73:8e:38:ae:cf:fc:b5:45:c4:13:
78:12:34:cd:49:a1:ce:ca:1c:50:c6:21:db:34:77:53:24:97:
6d:9c:31:95:55:15:17:53:8c:4b:e3:78:de:23:f1:d1:8d:e3:
2e:cd:5d:07:b6:34:c3:ab:db:b8:fc:8d:51:13:ed:a3:be:d6:
cf:a5:d4:72:e9:d8:81:7f:35:bf:a7:39:5b:57:1e:1b:61:43:
b7:aa:89:ac:c4:27:8a:62:bc:64:44:46:ea:bc:27:3b:7d:2e:
7f:be:6b:c6:28:42:e7:9b:c7:6a:d9:9b:b3:06:9c:79:b9:0a:
fb:26:df:b4:3d:da:44:b8:fc:14:9a:70:0d:e0:4b:b8:70:0f:
64:56:2c:2d:92:89:45:03:4d:c9:53:ad:5a:8e:b3:70:d4:5c:
00:f0:b8:c1:a7:c6:2a:c1:82:99:da:24:bf:93:80:02:02:1a:
b8:c4:ba:6a:72:f8:af:8c:fc:c6:26:df:6e:57:af:6a:38:c8:
ef:45:87:e4:28:dc:19:ef:40:74:91:e8:3d:43:7e:1e:94:de:
90:b9:a4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:39 2025 by rpki-client