Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/TGxa4AWW8d2S3jNyrrIrtRG9fuo.roa
File: TGxa4AWW8d2S3jNyrrIrtRG9fuo.roa (raw, json)
Hash identifier: UaW61CDqJkg34hDFyjESuX43pUEf6PKhxfnk19k36yc=
Subject key identifier: 4C:6C:5A:E0:05:96:F1:DD:92:DE:33:72:AE:B2:2B:B5:11:BD:7E:EA
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01942746EA8E1445F5CC8668490C5DAD05CB
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/TGxa4AWW8d2S3jNyrrIrtRG9fuo.roa
Signing time: Thu 02 Jan 2025 13:49:06 +0000
ROA not before: Thu 02 Jan 2025 13:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.64.89.0/24 maxlen: 24
194.163.68.0/24 maxlen: 24
194.163.80.0/22 maxlen: 24
194.163.92.0/24 maxlen: 24
194.233.31.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
194.233.149.0/24 maxlen: 24
194.233.151.0/24 maxlen: 24
195.180.128.0/22 maxlen: 24
195.180.149.0/24 maxlen: 24
195.252.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:ea:8e:14:45:f5:cc:86:68:49:0c:5d:ad:05:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 13:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c6c5ae00596f1dd92de3372aeb22bb511bd7eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6a:b0:f0:87:5b:02:a6:c0:74:a6:e4:ff:ae:
be:db:0d:c4:97:2c:68:37:ea:97:7a:00:99:bf:13:
b5:56:43:42:91:ba:92:5c:f6:9c:b6:77:9e:ff:5f:
49:42:04:4b:55:60:52:6b:7a:e1:b9:dc:b2:fd:9f:
ef:b2:e1:05:d1:5e:54:3f:d0:51:6e:62:f4:91:d9:
fa:9d:5f:7c:17:7d:c9:d9:93:72:34:c2:2f:ef:e2:
60:48:7d:d7:0e:09:0a:c0:91:a8:c4:0e:c9:10:14:
d7:b1:d8:cf:14:77:a5:cf:0a:65:3f:26:b9:9e:bf:
8b:ce:fd:e8:07:5b:7f:8f:c9:f0:3c:58:53:58:4f:
3e:7b:43:18:64:9f:44:79:26:e7:9f:07:34:95:ad:
75:ef:62:a3:27:db:35:ef:67:df:02:f2:48:69:6a:
aa:ef:52:a3:7e:57:5c:a6:dd:bd:91:35:58:7f:1e:
65:e5:80:64:90:da:d5:a4:95:86:a7:28:07:32:27:
2a:18:09:ae:9b:1f:82:da:46:08:ad:68:e8:ec:ee:
ad:0b:3f:f2:58:9b:1a:7f:d4:f0:f6:72:82:bd:f6:
92:8f:3a:ea:3b:78:ff:1c:7f:af:a8:f4:73:bc:76:
30:85:f7:cd:10:c2:0d:df:47:87:cd:f9:45:27:9d:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6C:5A:E0:05:96:F1:DD:92:DE:33:72:AE:B2:2B:B5:11:BD:7E:EA
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/TGxa4AWW8d2S3jNyrrIrtRG9fuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.89.0/24
194.163.68.0/24
194.163.80.0/22
194.163.92.0/24
194.233.31.0/24
194.233.148.0/23
194.233.151.0/24
195.180.128.0/22
195.180.149.0/24
195.252.175.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:18:7c:6e:12:ae:77:45:26:cf:dc:49:9b:0d:9a:04:a7:e1:
de:e0:7c:29:54:76:97:5e:42:bb:df:11:6e:a4:8c:40:eb:57:
e6:ae:fa:e2:8a:eb:e8:29:c6:1e:0a:8f:65:e4:8c:73:4e:46:
b9:6c:36:e9:89:bc:c8:1d:6f:b9:6a:15:e1:ca:c3:a5:08:3e:
19:1b:4e:5e:e1:56:dc:a0:e9:56:ee:40:c3:6a:99:de:b2:71:
8d:49:66:8f:7d:1c:30:38:43:4b:dc:d6:8b:4e:da:29:2d:cc:
ef:98:3d:87:19:ab:7c:c9:59:eb:f0:53:38:f2:6e:a0:49:72:
e7:02:76:ca:d6:e2:f4:79:a6:b5:1d:0c:d5:27:6b:54:bc:f4:
d1:5d:f0:bb:60:ed:e2:2f:3a:9f:9f:3a:2c:73:e2:98:d0:73:
40:4f:3e:a4:5e:57:df:97:89:65:47:bf:0f:2c:aa:70:af:bb:
32:f3:3d:ba:e4:ef:d7:7b:11:a7:30:bd:c7:53:19:65:83:4f:
ee:33:44:e4:87:d1:0a:75:68:23:6a:44:12:46:95:a4:f4:49:
6f:31:e0:e8:24:6d:9a:03:59:42:6a:09:2a:59:c1:b5:8a:3c:
ac:13:ae:1d:8f:81:dc:eb:a0:3d:bb:4e:26:24:7c:16:fc:a3:
5b:eb:30:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:04 2025 by rpki-client