Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/TCbobbp8FEBN_ibPMGgdPkoernw.roa
File: TCbobbp8FEBN_ibPMGgdPkoernw.roa (raw, json)
Hash identifier: Fk4KxvR5D2CmdrIDDLm/YTIgqnE8NkNgsK01+BVHxc0=
Subject key identifier: 4C:26:E8:6D:BA:7C:14:40:4D:FE:26:CF:30:68:1D:3E:4A:1E:AE:7C
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B238BD7BDFEF89BBFCE31110D66804
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/TCbobbp8FEBN_ibPMGgdPkoernw.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60218
IP address blocks: 185.32.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:38:bd:7b:df:ef:89:bb:fc:e3:11:10:d6:68:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c26e86dba7c14404dfe26cf30681d3e4a1eae7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:2a:97:80:a7:52:5f:15:76:f4:66:30:9f:
91:92:0f:23:b2:81:0b:48:4b:59:58:df:fb:cd:17:
98:df:73:9e:c3:cd:bb:03:86:a1:df:bd:21:24:ab:
04:59:47:96:fb:16:3a:bf:67:74:40:78:6b:a0:b0:
6f:64:d1:95:39:56:bd:d6:d3:9b:ae:be:3b:dc:a6:
7c:b3:44:4c:5b:5f:f6:a8:ae:32:6c:8c:f9:93:d2:
ae:4f:3c:c8:c2:6d:c4:b5:7c:f6:fa:54:d8:8d:5b:
df:83:09:af:35:14:ac:b7:f3:03:16:b0:f5:94:2f:
69:72:a0:08:69:b4:e6:67:40:bd:75:9a:5a:e9:45:
fe:77:b7:40:b3:82:8c:21:14:e7:81:15:e0:32:b7:
62:9f:bd:44:c0:dc:7a:bc:04:67:d4:7d:97:c6:1a:
82:32:4b:14:97:cd:f7:e1:21:c0:f9:e7:cc:78:58:
bd:54:f2:e2:02:7a:8e:49:98:d9:6e:94:f7:e5:a2:
6f:af:c4:ff:59:b0:52:9c:84:7a:02:d0:54:97:a6:
59:8a:46:6c:03:3e:65:55:c3:86:7c:76:b8:13:86:
f8:77:9c:39:1a:08:56:6d:6a:f2:1d:42:86:86:72:
46:81:40:02:1d:d8:74:b6:52:b8:8e:ff:92:3e:2d:
e0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:26:E8:6D:BA:7C:14:40:4D:FE:26:CF:30:68:1D:3E:4A:1E:AE:7C
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/TCbobbp8FEBN_ibPMGgdPkoernw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.64.0/24
Signature Algorithm: sha256WithRSAEncryption
07:52:44:92:7d:7b:5e:d3:ca:c8:d9:a4:60:9a:40:18:b6:4b:
e9:e9:94:05:37:0d:11:36:ca:dc:88:24:2f:75:c8:f3:16:1d:
13:00:74:0c:57:55:39:52:48:ab:5a:b8:61:0c:77:4a:6f:8c:
58:9a:90:85:1f:18:47:49:e7:c1:86:70:cf:b0:38:0b:59:36:
8d:cc:52:d6:22:4c:14:74:5a:55:84:94:24:64:c6:6a:07:a9:
80:bc:07:e3:23:49:e0:16:87:95:9e:06:82:2d:2e:59:3c:d6:
a7:7e:a3:27:cf:bc:a4:64:d1:41:56:0a:b8:ea:d7:a1:02:df:
bc:ac:93:1b:c0:1a:6b:68:8f:c3:cd:43:76:40:98:f8:0d:fc:
cf:13:d9:a6:17:37:8a:55:8e:46:d9:26:62:c7:80:00:52:29:
78:3d:5f:5a:64:fe:a3:84:4f:ba:01:06:da:8d:90:0e:8a:65:
cc:df:50:a0:61:b8:62:c8:b3:c3:38:60:1c:a5:b8:16:56:c9:
f9:48:19:80:84:aa:66:d4:21:97:c4:d5:51:2f:a7:dd:d8:f7:
06:70:1d:fc:41:62:47:54:38:b4:47:63:8e:bd:8e:84:a8:95:
7a:df:8f:44:f8:51:f4:46:19:8c:c7:17:35:42:7c:25:e2:bc:
a1:e8:e9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:39:55 2025 by rpki-client