Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/TMmJu3XrH94K6DReVYderjXkE0g.roa
File: TMmJu3XrH94K6DReVYderjXkE0g.roa (raw, json)
Hash identifier: qAa5DF+M+UAhzMJIlXWt+Au239+GUy9x5c4+iXPb3rs=
Subject key identifier: 4C:C9:89:BB:75:EB:1F:DE:0A:E8:34:5E:55:87:5E:AE:35:E4:13:48
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 0194252211CBCD292786098B619464FDE8F7
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/TMmJu3XrH94K6DReVYderjXkE0g.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207668
IP address blocks: 45.66.20.0/23 maxlen: 23
45.66.22.0/23 maxlen: 23
45.144.120.0/22 maxlen: 22
194.53.192.0/24 maxlen: 24
194.53.193.0/24 maxlen: 24
194.53.194.0/23 maxlen: 23
2a09:60c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:11:cb:cd:29:27:86:09:8b:61:94:64:fd:e8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cc989bb75eb1fde0ae8345e55875eae35e41348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:20:3d:26:3d:07:b2:ab:8d:28:98:cb:cc:
49:94:79:59:38:3d:54:c0:5f:3b:8e:fb:b0:c1:f4:
ea:f5:e8:43:26:4f:e1:70:1b:6f:b8:bc:ee:ba:b2:
68:df:85:cd:42:23:a4:99:87:d1:f5:b8:92:a8:93:
64:8a:c0:e5:e1:ff:de:a9:ea:79:67:e7:5a:c1:99:
7d:92:4a:a8:28:2b:f9:64:72:23:45:4b:88:18:37:
dc:53:ee:89:3d:9d:c4:b8:5f:c3:65:42:54:d9:b1:
c4:b9:03:35:c2:23:ef:bb:af:dc:7c:c8:1d:20:0c:
13:4e:9c:bf:bd:02:70:94:f1:34:f8:da:aa:49:ed:
4f:d5:3a:0c:ba:86:d4:93:34:04:88:d8:0f:b6:66:
82:af:ad:c9:eb:ac:f2:58:d7:09:e5:56:b7:e1:6a:
3f:76:e4:1e:c4:62:0f:40:9d:86:65:7d:f0:8f:71:
df:d8:2d:a2:4f:1b:65:8e:fc:d8:d9:8e:92:f1:c2:
66:fe:d2:ac:6d:81:7b:a9:68:85:21:43:a8:86:06:
8a:d7:70:27:c0:a5:d9:00:01:00:d6:fd:03:ae:52:
1f:eb:75:f7:50:c0:9a:09:3d:18:28:3d:f8:6e:b8:
ec:c8:96:18:a5:f5:4f:92:3d:25:04:95:d7:d5:a5:
e5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C9:89:BB:75:EB:1F:DE:0A:E8:34:5E:55:87:5E:AE:35:E4:13:48
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/TMmJu3XrH94K6DReVYderjXkE0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.20.0/22
45.144.120.0/22
194.53.192.0/22
IPv6:
2a09:60c0::/29
Signature Algorithm: sha256WithRSAEncryption
45:9e:87:5b:39:32:8a:b0:0c:22:a7:6d:dd:91:76:e2:2b:f9:
41:57:07:59:7b:e0:48:a2:60:90:88:9e:1d:8b:eb:87:7a:4b:
f5:27:ac:00:3d:ab:0d:54:4a:9c:de:9a:c2:3f:04:14:22:35:
7d:29:74:cb:9f:d0:7a:45:ef:fc:75:49:55:66:aa:f4:56:87:
49:6d:d9:89:fa:d9:b6:65:85:25:ee:e4:b6:81:68:40:81:91:
92:43:8e:f7:27:d8:fd:de:92:c6:77:21:af:c3:ed:8f:ef:6d:
e3:1b:8f:b4:87:31:f6:dc:41:78:38:bb:ae:d3:a8:11:22:7b:
c3:cb:a9:1f:02:be:09:4e:6c:08:d6:9f:89:18:e2:b6:96:28:
98:ee:6e:d3:a7:e8:7e:52:cc:da:82:db:8e:53:75:a7:ed:eb:
c5:0d:4d:31:c1:df:b9:7d:46:5f:49:3c:6a:79:35:b0:ca:0f:
b5:be:b0:51:0b:d3:84:7d:04:33:47:ad:f3:81:8f:2a:cd:8f:
c3:07:9a:87:e5:b4:bb:94:2f:cc:ea:67:40:5e:6f:9c:1a:32:
7e:0b:83:c6:66:0d:f4:03:44:84:49:1a:18:d6:46:3c:dc:a6:
16:37:79:49:b9:94:e9:b6:6a:41:a6:54:43:27:78:22:59:d8:
1b:92:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:03 2025 by rpki-client on console.sobornost.net