Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/tsj3-EceEMkrM5LO7syOv62-ESE.roa
File: tsj3-EceEMkrM5LO7syOv62-ESE.roa (raw, json)
Hash identifier: 1ihTVazjuXMqt+0E6TJ5XvWCOZrI1UKuO7sj4p7S42A=
Subject key identifier: B6:C8:F7:F8:47:1E:10:C9:2B:33:92:CE:EE:CC:8E:BF:AD:BE:11:21
Certificate issuer: /CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
Certificate serial: 018CC72739ED8E74114EF00AB9A34490FF58
Authority key identifier: 26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/tsj3-EceEMkrM5LO7syOv62-ESE.roa
Signing time: Mon 01 Jan 2024 22:31:25 +0000
ROA not before: Mon 01 Jan 2024 22:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43200
IP address blocks: 81.26.32.0/19 maxlen: 19
85.89.192.0/19 maxlen: 19
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:39:ed:8e:74:11:4e:f0:0a:b9:a3:44:90:ff:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c8f7f8471e10c92b3392ceeecc8ebfadbe1121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:28:9e:ed:cb:8d:e1:d4:7c:d7:cc:c7:0b:
19:22:2e:49:88:3f:b0:09:07:55:02:5e:3d:4d:06:
c6:7c:9c:e1:a1:4d:df:46:88:79:a4:ed:68:f3:12:
e4:86:49:27:e6:40:9c:22:9d:aa:23:c9:25:80:a3:
b7:b0:5c:fe:2f:7d:6c:07:37:1f:05:bc:40:f8:65:
f8:a7:ca:45:34:9b:16:85:b2:26:ec:c7:20:71:73:
2c:02:eb:9b:da:32:13:2d:28:49:59:e8:f5:8f:bb:
b4:db:3b:aa:e6:94:a0:df:40:9d:56:36:9a:80:93:
5b:59:e7:10:18:78:50:42:ad:92:ed:db:5e:8c:cf:
e3:27:c5:5e:18:42:99:b7:b5:71:82:f5:8d:20:0c:
73:49:c2:59:c5:ce:92:17:0a:9c:2e:cd:1d:cd:34:
7a:19:8b:37:fe:de:76:1a:d0:da:8b:70:d6:68:02:
43:f8:ba:ae:49:fb:c8:1a:f0:9c:18:bf:23:57:e1:
47:d6:72:bd:56:39:25:56:fd:9a:d8:f8:d2:2a:da:
2b:78:d9:8b:24:6a:58:df:21:52:cb:c0:cc:61:66:
73:3b:77:ed:67:4a:15:7a:0c:39:b5:5b:99:46:cb:
85:1b:74:84:30:29:96:d9:21:f0:3b:7a:7e:82:cf:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:F7:F8:47:1E:10:C9:2B:33:92:CE:EE:CC:8E:BF:AD:BE:11:21
X509v3 Authority Key Identifier:
keyid:26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/tsj3-EceEMkrM5LO7syOv62-ESE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.26.32.0/19
85.89.192.0/19
Signature Algorithm: sha256WithRSAEncryption
12:05:7d:f1:1c:0f:ee:62:43:4c:89:ba:02:b3:1b:a8:83:4c:
f8:71:64:29:b6:53:24:2c:e4:58:d7:16:e6:bc:54:e6:99:44:
86:26:e9:17:4e:d2:f5:e0:94:1a:76:54:77:36:59:18:01:14:
3d:d9:e9:77:a7:a4:2b:98:ae:50:a9:04:51:c3:7d:9b:98:04:
85:4c:4b:6d:d8:e4:d1:10:01:2b:ea:4e:2f:1f:47:2e:f6:25:
6e:8e:c3:48:94:53:6f:70:3a:b6:64:72:f6:84:4d:64:b0:25:
5a:09:53:84:e8:c4:c5:55:74:f2:b3:82:f8:e8:f3:20:aa:d1:
39:6d:76:de:18:63:64:da:00:7a:a7:9a:5a:54:1f:2e:6a:79:
8c:e1:26:39:6c:01:f3:08:77:e7:2b:75:6c:33:3e:1b:f2:84:
5a:c3:ad:6e:40:ea:72:d9:94:50:15:ce:f2:25:2a:2c:94:19:
72:89:ee:9a:10:21:24:2a:a9:33:16:52:75:a8:5e:c3:bf:0b:
b3:7c:7b:35:29:6f:73:ef:11:76:48:b0:a2:6c:47:e7:f4:fb:
ea:e9:4e:6f:0b:f1:1c:95:a6:35:e9:fd:5c:2f:ef:fa:79:22:
f5:3d:23:90:06:b2:d6:9d:1a:b7:aa:04:3d:be:f4:9f:4f:fe:
11:29:3f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:29:44 2024 by rpki-client on console.sobornost.net