Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/TLR6hIp-wrcqgfYzismXcdKpRZA.roa
File: TLR6hIp-wrcqgfYzismXcdKpRZA.roa (raw, json)
Hash identifier: LrHQj9RDxkFGhAlW/cRpAl72UOu8vnkk8wmXdSZ6bkE=
Subject key identifier: 4C:B4:7A:84:8A:7E:C2:B7:2A:81:F6:33:8A:C9:97:71:D2:A9:45:90
Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Certificate serial: 019427B635AF5B9BC63337313D815DA6652D
Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/TLR6hIp-wrcqgfYzismXcdKpRZA.roa
Signing time: Thu 02 Jan 2025 15:50:40 +0000
ROA not before: Thu 02 Jan 2025 15:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30779
IP address blocks: 88.135.224.0/19 maxlen: 19
193.19.74.0/23 maxlen: 23
193.34.20.0/22 maxlen: 22
2001:67c:203c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:35:af:5b:9b:c6:33:37:31:3d:81:5d:a6:65:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Validity
Not Before: Jan 2 15:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cb47a848a7ec2b72a81f6338ac99771d2a94590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:45:c7:7a:d2:48:c8:be:8d:10:21:27:28:
02:d9:f6:34:b7:ba:54:5b:bf:55:0c:70:40:05:27:
df:39:b4:e6:42:1f:f7:34:96:d7:93:e3:3b:c0:d6:
fb:25:dc:b2:89:d0:e7:65:53:a2:8d:b0:0c:1b:64:
fc:50:d6:ce:00:22:b9:c4:08:2e:c7:20:d0:3b:9b:
e3:bb:9c:6f:85:53:a6:e9:91:a4:38:a5:50:49:db:
dc:26:78:80:be:e5:ec:c3:e7:c2:2f:7f:67:c3:1c:
b9:9d:40:e1:7d:a8:b6:a1:f7:c9:d7:03:29:13:58:
ef:d9:2a:96:da:0a:85:98:d7:6f:fa:2b:d4:4e:6d:
6d:ab:8c:21:55:b1:c6:84:70:13:87:f1:c5:a1:a6:
2f:8e:3f:16:2d:97:9f:b6:36:62:a2:a4:39:4b:2c:
5e:29:1f:34:88:cb:82:bd:10:be:18:8e:b5:bc:b9:
f8:e1:84:0d:d7:af:b0:15:9d:6c:2b:e9:fd:6d:1a:
4f:04:a2:3d:69:eb:d3:86:d5:fd:2b:26:26:47:e8:
80:4f:91:c0:66:8e:9d:47:27:8e:c7:20:f5:3c:38:
a4:34:e8:7b:b6:91:d7:3b:b0:68:30:ab:b6:83:50:
65:e5:75:d7:71:90:df:23:dc:23:12:2f:48:b2:6c:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B4:7A:84:8A:7E:C2:B7:2A:81:F6:33:8A:C9:97:71:D2:A9:45:90
X509v3 Authority Key Identifier:
keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/TLR6hIp-wrcqgfYzismXcdKpRZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.224.0/19
193.19.74.0/23
193.34.20.0/22
IPv6:
2001:67c:203c::/48
Signature Algorithm: sha256WithRSAEncryption
40:92:c1:5f:8b:54:f5:e6:23:03:60:4a:9c:6d:8e:aa:c0:d0:
30:d1:7e:af:47:d3:ad:4e:78:76:f4:09:b4:3d:8e:15:64:ff:
67:c0:4a:79:10:52:c2:ad:2b:90:d1:31:e0:a0:e5:ec:08:10:
af:64:54:c2:e9:eb:1e:1f:a9:23:3d:fb:85:00:5c:ed:e1:be:
b6:4b:db:58:bb:fa:8b:65:5a:87:65:52:6c:d3:cb:f8:35:73:
29:1f:15:4e:ed:a3:81:bb:a4:37:4e:44:de:3d:84:62:4c:a4:
9e:d2:32:ed:1a:8b:02:86:72:10:87:d9:af:39:67:0c:37:f6:
73:1c:be:88:50:42:49:11:07:44:25:49:1a:83:d8:c0:8d:5d:
61:a3:2b:28:22:ad:b3:28:44:13:70:dc:ae:74:d1:58:29:05:
f8:63:c6:0d:46:04:1b:50:f3:dd:3c:22:bb:41:31:9c:9d:ba:
d4:4a:30:c7:a7:e0:66:7b:81:82:6b:82:f3:a7:8e:62:f4:87:
5b:7d:cc:32:11:9f:df:6d:6d:48:57:e9:c5:ff:f0:b7:36:b8:
f5:44:7a:69:52:7a:28:8e:a7:79:cc:f2:88:d5:89:7d:5f:77:
70:1b:18:f6:58:6c:47:6c:f1:58:cd:11:45:1f:31:b0:34:a6:
bf:12:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 16:24:02 2025 by rpki-client on console.sobornost.net