Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9247f7-ef48-4509-901d-e08028d999eb/1/TL9Sl4T4m0JML_4ZGFDM7J5jiAE.roa
File: TL9Sl4T4m0JML_4ZGFDM7J5jiAE.roa (raw, json)
Hash identifier: pw5UkOoLKHHvetWR1q7XEHWa1Tb2uE5Q6tB7IGmJrhY=
Subject key identifier: 4C:BF:52:97:84:F8:9B:42:4C:2F:FE:19:18:50:CC:EC:9E:63:88:01
Certificate issuer: /CN=4aac317f820419c93af26ee44e8b4ebaa6c7fe7f
Certificate serial: 01856FC2654911053F1E3F84783A5AF550C2
Authority key identifier: 4A:AC:31:7F:82:04:19:C9:3A:F2:6E:E4:4E:8B:4E:BA:A6:C7:FE:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sqwxf4IEGck68m7kTotOuqbH_n8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9247f7-ef48-4509-901d-e08028d999eb/1/TL9Sl4T4m0JML_4ZGFDM7J5jiAE.roa
Signing time: Sun 01 Jan 2023 23:54:48 +0000
ROA not before: Sun 01 Jan 2023 23:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56882
IP address blocks: 46.251.254.0/23 maxlen: 23
188.227.159.0/24 maxlen: 24
185.59.64.0/24 maxlen: 24
45.252.236.0/22 maxlen: 22
185.59.65.0/24 maxlen: 24
185.59.66.0/24 maxlen: 24
185.59.67.0/24 maxlen: 24
185.130.152.0/22 maxlen: 22
188.227.128.0/19 maxlen: 19
91.228.91.0/24 maxlen: 24
46.251.252.0/23 maxlen: 23
185.193.8.0/22 maxlen: 22
168.245.196.0/23 maxlen: 23
37.209.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:65:49:11:05:3f:1e:3f:84:78:3a:5a:f5:50:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aac317f820419c93af26ee44e8b4ebaa6c7fe7f
Validity
Not Before: Jan 1 23:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cbf529784f89b424c2ffe191850ccec9e638801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:55:4c:74:49:91:03:d4:c7:50:ca:ee:63:d4:
86:a4:c5:d7:68:74:d9:89:b1:41:0d:79:51:f3:7f:
fb:5c:fd:da:e1:38:8a:fe:c1:be:12:52:be:f4:c8:
4f:5d:6d:5f:e8:7d:a8:49:2c:0f:bc:76:d7:b3:c0:
96:c0:dc:08:c6:9c:ed:5c:5a:0c:df:24:4f:ad:0e:
b6:8a:cc:67:95:e4:56:c4:39:06:8c:a2:8e:c2:94:
f7:48:1f:d3:4a:19:91:71:1c:7c:46:95:6b:b0:23:
44:24:03:55:a2:d0:66:c8:21:67:d1:dc:e9:32:90:
0a:ea:2f:a5:f3:b6:53:2f:8e:84:ed:3d:74:09:7f:
6a:c8:9d:41:2b:0c:c2:0b:53:57:79:09:b0:df:ba:
ec:46:dc:cc:99:d3:06:5e:6c:92:41:3d:0d:76:a9:
d1:e2:3f:30:ca:82:60:f0:05:71:a4:09:5e:81:d4:
e0:6c:03:4f:0b:96:39:30:92:39:e0:08:d5:38:d3:
6f:df:4f:fb:38:91:5c:c9:7c:30:36:35:20:d2:f3:
9d:1b:b8:cc:50:17:b4:86:e8:50:a8:03:d2:2a:18:
06:35:6a:a8:47:8d:00:12:66:fc:90:07:ea:b1:8a:
28:2a:2c:c3:74:be:60:1e:59:24:cb:5c:2b:e8:09:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BF:52:97:84:F8:9B:42:4C:2F:FE:19:18:50:CC:EC:9E:63:88:01
X509v3 Authority Key Identifier:
keyid:4A:AC:31:7F:82:04:19:C9:3A:F2:6E:E4:4E:8B:4E:BA:A6:C7:FE:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sqwxf4IEGck68m7kTotOuqbH_n8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9247f7-ef48-4509-901d-e08028d999eb/1/TL9Sl4T4m0JML_4ZGFDM7J5jiAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9247f7-ef48-4509-901d-e08028d999eb/1/Sqwxf4IEGck68m7kTotOuqbH_n8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.209.160.0/21
45.252.236.0/22
46.251.252.0/22
91.228.91.0/24
168.245.196.0/23
185.59.64.0/22
185.130.152.0/22
185.193.8.0/22
188.227.128.0/19
Signature Algorithm: sha256WithRSAEncryption
71:dd:66:2d:ee:bf:f9:b0:f0:ea:b6:e3:0e:9e:5f:57:b9:e4:
65:bf:b5:cf:06:6c:c6:95:cc:1d:ef:40:7a:1d:2b:6a:62:4f:
ac:2b:03:1a:8b:76:e9:b6:4f:5c:92:50:a6:99:9f:1b:24:68:
71:93:f1:0f:17:b0:62:02:77:c3:98:30:4d:56:f8:2f:7e:ac:
1f:20:1f:25:2d:d9:0a:98:03:94:b6:ce:3a:9b:c7:3a:96:4e:
21:be:5c:60:dd:a2:bc:c1:59:1e:20:e9:38:f9:1a:0f:2b:25:
37:d6:e5:d9:3a:0a:f8:72:9d:df:ed:9a:94:a2:10:a5:0f:65:
6d:db:d4:df:ff:ba:e5:c7:ee:92:d6:3a:cc:20:ec:65:b4:50:
a0:db:2e:50:16:a6:dd:79:86:18:43:39:ff:80:b2:e1:ca:0f:
22:96:87:9c:f6:1b:c1:7a:9d:16:a4:5f:f8:78:6e:40:7c:c5:
69:fb:5d:06:2c:6c:9f:77:14:93:10:d1:c0:74:95:9b:7d:73:
22:2a:27:d0:15:6f:25:9a:3a:e7:57:b7:3f:27:9e:ee:fd:14:
4f:6f:51:91:93:0d:ca:2a:f6:a6:9d:62:22:eb:01:21:24:cd:
20:a9:63:d2:d0:02:07:99:92:bd:ea:e5:71:8d:0c:93:de:9e:
e8:92:8d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:31 2024 by rpki-client on console-fra.rpki-client.org