Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/TptRjlzyain1TeVGlfy9UuhC5Rg.roa
File: TptRjlzyain1TeVGlfy9UuhC5Rg.roa (raw, json)
Hash identifier: 4OFUq9JFXkEHHVNnS5yASlpWNxJ8MAvfk+wTzR+GhT4=
Subject key identifier: 4E:9B:51:8E:5C:F2:6A:29:F5:4D:E5:46:95:FC:BD:52:E8:42:E5:18
Certificate issuer: /CN=4e64f2a0b26df43de723099a63a723b5beb97f5a
Certificate serial: 01856D660D1C8D2DAE16B9104C013EABE627
Authority key identifier: 4E:64:F2:A0:B2:6D:F4:3D:E7:23:09:9A:63:A7:23:B5:BE:B9:7F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TmTyoLJt9D3nIwmaY6cjtb65f1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/TptRjlzyain1TeVGlfy9UuhC5Rg.roa
Signing time: Sun 01 Jan 2023 12:54:42 +0000
ROA not before: Sun 01 Jan 2023 12:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207046
IP address blocks: 109.205.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:0d:1c:8d:2d:ae:16:b9:10:4c:01:3e:ab:e6:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e64f2a0b26df43de723099a63a723b5beb97f5a
Validity
Not Before: Jan 1 12:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e9b518e5cf26a29f54de54695fcbd52e842e518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:0e:f3:08:70:f9:df:61:dd:08:18:4d:8c:
08:dc:83:fe:ca:d4:88:ef:e0:bd:9b:b9:2f:34:96:
b8:6d:9f:d8:98:da:19:57:67:5a:2f:cd:38:33:d8:
05:ef:cf:14:3b:c9:11:38:07:df:aa:4b:3c:ff:95:
45:a3:85:c1:4d:c6:f0:9a:00:1b:6a:d8:af:b1:73:
c2:d5:5b:48:32:b5:03:24:f8:4c:8a:c9:cb:66:0f:
53:7a:b4:2e:be:19:dd:bc:5a:b3:a5:3c:a8:3b:75:
f4:f5:ec:aa:1f:39:d1:73:1e:17:16:6f:11:0b:7e:
d0:4a:7e:12:b1:02:43:31:ef:cd:b8:1a:e9:b5:00:
f3:1e:d8:24:3d:59:c3:1c:02:58:32:e2:f7:a6:1b:
16:82:56:9a:db:c1:ba:e2:07:92:f5:e7:85:71:f2:
7d:bb:97:1e:80:45:9c:c9:ea:7b:d0:27:51:0e:02:
16:76:67:d3:74:73:fd:43:dc:1d:83:1a:f5:00:ec:
47:da:12:cf:fe:40:8a:fb:26:06:74:10:64:b0:a6:
4d:b2:f7:40:2c:ef:d3:30:7c:b9:e6:1f:8c:b0:51:
b9:53:c9:7d:eb:3e:8c:a8:56:52:4a:0c:c9:ac:ee:
d3:fd:66:bd:49:b3:2e:07:7e:7c:50:ed:a3:44:25:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9B:51:8E:5C:F2:6A:29:F5:4D:E5:46:95:FC:BD:52:E8:42:E5:18
X509v3 Authority Key Identifier:
keyid:4E:64:F2:A0:B2:6D:F4:3D:E7:23:09:9A:63:A7:23:B5:BE:B9:7F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmTyoLJt9D3nIwmaY6cjtb65f1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/TptRjlzyain1TeVGlfy9UuhC5Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/541e43-4f90-4716-8a18-9602e963f610/1/TmTyoLJt9D3nIwmaY6cjtb65f1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.60.0/24
Signature Algorithm: sha256WithRSAEncryption
55:96:64:f9:f5:bd:5c:fd:df:73:7c:d3:65:c5:74:10:58:e9:
5a:e9:ce:7c:0d:09:10:fd:8c:5a:d5:b9:91:4e:bd:39:fb:d2:
d9:b2:9c:5d:13:4c:8d:12:67:1e:6b:0b:89:af:46:9f:c2:37:
f4:0e:e0:a6:02:1c:8f:d5:35:a1:2b:28:9f:74:a3:2e:69:46:
a3:3d:01:b9:dc:94:1b:2e:59:19:54:b0:38:92:9b:32:36:c0:
8f:4a:19:da:01:6b:ec:ae:f8:a7:7f:85:ca:56:ad:ad:b7:81:
f6:6f:12:db:eb:5d:b0:f9:e2:e6:b5:e1:b2:9b:02:30:ac:6f:
75:27:01:ce:ca:27:ba:84:4b:e4:0b:d8:ea:f7:1d:06:42:6b:
a5:f3:06:d0:80:a7:2f:72:0f:cc:5a:03:64:fb:b2:d4:9a:a4:
97:22:b7:41:3e:4c:bb:a0:f0:be:fb:06:4b:14:0e:60:43:37:
77:9c:28:c2:ae:64:ba:41:10:25:77:f2:09:b5:f5:5a:e2:98:
c6:12:ea:08:30:21:bd:b0:70:ab:f0:6b:0c:47:c9:d0:f9:4c:
a5:c3:17:f8:1e:04:ad:46:ce:5d:02:b6:63:3c:8e:16:aa:6d:
85:18:9b:13:de:02:27:53:b0:35:9b:cf:67:4f:91:36:1b:c1:
f6:ad:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:58 2024 by rpki-client on console-fra.rpki-client.org