Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/TrLm4FUV5Ng_22w8bz8luPxC6nU.roa
File: TrLm4FUV5Ng_22w8bz8luPxC6nU.roa (raw, json)
Hash identifier: fxeqo87RrpHbcgDDEDn0nuBWlYQJJSvq/C4Kiepu640=
Subject key identifier: 4E:B2:E6:E0:55:15:E4:D8:3F:DB:6C:3C:6F:3F:25:B8:FC:42:EA:75
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 01936E8E26C3C446B355B20BBE4C5DCDDA6B
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/TrLm4FUV5Ng_22w8bz8luPxC6nU.roa
Signing time: Wed 27 Nov 2024 16:57:09 +0000
ROA not before: Wed 27 Nov 2024 16:57:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199173
IP address blocks: 151.237.66.0/24 maxlen: 24
151.237.80.0/22 maxlen: 22
151.237.80.0/23 maxlen: 23
151.237.82.0/24 maxlen: 24
151.237.83.0/24 maxlen: 24
151.237.88.0/23 maxlen: 23
151.237.90.0/24 maxlen: 24
194.69.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:8e:26:c3:c4:46:b3:55:b2:0b:be:4c:5d:cd:da:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Nov 27 16:57:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4eb2e6e05515e4d83fdb6c3c6f3f25b8fc42ea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:2a:96:06:a1:0e:fb:e9:49:85:9d:69:9e:
40:36:3e:54:c2:3e:eb:71:63:d5:33:4d:66:d8:29:
a8:53:08:fa:7f:86:a5:eb:3f:92:95:ad:c2:32:42:
6e:5c:fd:a8:4e:72:ce:30:9d:66:41:27:14:9a:27:
0b:b9:76:ea:77:e6:2f:80:93:c2:d5:5b:07:0b:c1:
03:af:e9:02:ad:36:60:85:58:4e:f0:56:42:87:15:
d7:da:6a:ca:8f:3c:d6:18:73:8c:47:63:ac:48:16:
27:ca:c2:97:cb:1d:93:b8:0b:5d:dc:6e:f3:a2:6c:
33:d9:86:f4:9b:2a:7f:14:18:24:40:01:ba:07:3b:
b8:7e:a4:64:ca:46:d4:e1:ed:01:44:7d:41:4b:1c:
03:55:1a:78:49:25:01:55:65:ed:aa:17:4d:ba:88:
be:a1:23:d7:51:06:4e:c1:87:7a:3b:bc:e3:ea:87:
27:cb:1c:fb:62:3b:6f:4e:eb:3a:e5:19:43:11:e3:
bd:be:04:b3:44:5c:9d:93:56:33:ec:46:70:29:de:
18:6a:fc:a6:5f:48:4e:cd:1e:c6:cb:c1:6f:ed:90:
f6:ff:10:5e:d7:19:58:dc:c6:8f:d9:c9:c4:22:69:
fc:d1:f0:bd:94:79:b5:d4:14:02:1c:0c:87:62:64:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B2:E6:E0:55:15:E4:D8:3F:DB:6C:3C:6F:3F:25:B8:FC:42:EA:75
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/TrLm4FUV5Ng_22w8bz8luPxC6nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.66.0/24
151.237.80.0/22
151.237.88.0-151.237.90.255
194.69.203.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ed:7d:73:c9:be:07:78:09:9c:dc:75:b0:ff:01:b0:56:24:
b0:28:2b:a4:b3:dd:13:61:3a:e6:ac:51:3e:64:88:d4:d9:df:
f7:7d:22:8e:9c:9a:a5:71:6f:68:be:73:3f:34:b5:40:8e:3a:
53:ec:60:53:b7:85:05:b2:ff:61:3c:0d:15:32:df:ef:65:df:
a8:92:7a:f6:da:39:4e:f2:ec:a7:40:68:0a:17:c9:f0:e7:74:
23:2a:70:9e:48:41:d0:6c:66:28:75:81:3b:47:78:14:9f:c4:
aa:74:ad:65:81:1b:ca:2b:0d:15:a5:70:56:3a:9e:ea:c9:79:
81:18:45:4f:18:a6:82:12:1f:3b:ff:6b:85:79:2d:9d:79:f2:
69:f0:07:90:56:89:04:7f:22:c8:e4:da:76:dd:7b:ee:56:1c:
e3:46:64:2e:30:e1:0a:f2:ed:12:6c:fb:4e:9f:62:bd:a2:61:
b8:84:5b:82:d6:5f:46:7d:02:f2:00:33:1f:8e:33:da:9c:ac:
32:26:27:1c:5a:25:85:d6:01:9c:81:c5:81:ed:26:f3:ad:12:
24:79:6a:20:52:fa:d7:52:15:01:80:b2:eb:65:f0:3b:6f:eb:
e2:e1:16:96:3b:d9:a3:d8:3d:f0:61:b7:0b:87:ff:af:d3:25:
9a:58:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:40 2024 by rpki-client on console.sobornost.net