Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/tbvXMTTdSL6j9mjbPEShhptkxhs.roa
File: tbvXMTTdSL6j9mjbPEShhptkxhs.roa (raw, json)
Hash identifier: bSqJDNr4i6x7IW+KKwQCVD/vW6ll2MmLrzn0Ik0wXGk=
Subject key identifier: B5:BB:D7:31:34:DD:48:BE:A3:F6:68:DB:3C:44:A1:86:9B:64:C6:1B
Certificate issuer: /CN=680121b199b291de7763d8c1caa7b3cdc3561810
Certificate serial: 0190C6E0B89901A529C085318095293A6C2F
Authority key identifier: 68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/tbvXMTTdSL6j9mjbPEShhptkxhs.roa
Signing time: Thu 18 Jul 2024 17:25:34 +0000
ROA not before: Thu 18 Jul 2024 17:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 185.128.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c6:e0:b8:99:01:a5:29:c0:85:31:80:95:29:3a:6c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=680121b199b291de7763d8c1caa7b3cdc3561810
Validity
Not Before: Jul 18 17:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5bbd73134dd48bea3f668db3c44a1869b64c61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:60:48:33:2c:b7:af:c2:c4:d3:41:4d:67:
96:69:93:5d:bd:d2:43:99:98:5c:9f:28:32:2b:d6:
9a:f9:b9:4a:1c:29:65:ba:b1:c6:2f:b6:60:80:b5:
74:c0:ee:df:b5:c2:4f:1a:db:f8:25:c3:64:d9:ac:
72:3e:90:64:50:59:03:d0:ae:fc:f1:7c:89:00:5e:
ad:93:57:65:27:86:e1:38:1b:8f:cd:16:4a:7c:ea:
be:c1:6a:7b:ab:a0:45:65:f3:4d:c5:1d:6f:c5:2b:
dd:34:a4:f0:13:7c:71:94:05:ee:dd:40:99:03:bf:
3f:a5:27:f9:5f:d0:55:ab:b9:0a:a2:42:63:0f:69:
aa:1d:27:6e:86:8b:09:eb:b6:b3:9f:a5:4a:d2:6c:
62:f1:92:5a:27:98:5a:5c:31:37:c0:5d:df:6e:9c:
aa:e7:3a:98:85:ea:37:a9:00:7a:d9:c4:e8:db:0c:
fd:e6:e9:b4:00:2a:5d:9f:a7:9e:40:81:64:a2:a7:
20:03:6a:7c:01:02:f1:d3:ce:5c:68:a7:17:0f:75:
9d:be:b3:19:68:93:0b:eb:a1:03:56:97:90:b9:04:
45:1c:8c:5e:2b:9f:85:cb:cf:fd:6f:b1:6d:88:f6:
c1:a4:5f:a1:d6:79:d0:af:45:a6:10:2d:3c:7b:8d:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BB:D7:31:34:DD:48:BE:A3:F6:68:DB:3C:44:A1:86:9B:64:C6:1B
X509v3 Authority Key Identifier:
keyid:68:01:21:B1:99:B2:91:DE:77:63:D8:C1:CA:A7:B3:CD:C3:56:18:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAEhsZmykd53Y9jByqezzcNWGBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/tbvXMTTdSL6j9mjbPEShhptkxhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2dcee7-b0c5-41c8-a36c-badd1cd2dcec/1/aAEhsZmykd53Y9jByqezzcNWGBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2d:b5:10:95:09:51:52:ca:6e:0d:f9:e2:2a:c9:7a:10:62:
75:f2:5b:0c:be:a1:fe:06:36:51:1c:f8:f4:e5:17:40:09:a6:
d1:57:ce:80:01:dd:32:67:05:95:b9:f8:9c:60:c4:32:b6:39:
6a:23:13:6c:f4:fa:91:20:86:aa:00:f8:1f:67:d7:d9:65:bc:
05:b9:c8:92:fa:de:49:54:59:b4:13:80:03:29:9c:12:88:e9:
45:5b:21:69:64:67:23:31:45:20:14:73:f4:1d:24:d3:f7:86:
e4:ab:73:d4:da:ce:d4:05:ac:b8:a8:80:6c:59:08:b9:05:1b:
99:f3:db:a8:6e:ca:7e:90:dd:4e:d7:53:e1:23:e1:5a:54:2d:
a5:04:c9:08:fa:5b:b5:5b:c6:6f:31:f1:c4:66:4d:f0:78:94:
ec:93:f0:02:0a:0c:0d:76:de:c0:d9:eb:03:f8:d8:38:2c:59:
17:dc:56:db:8d:b2:79:6e:0f:85:9c:63:8e:aa:a9:b3:c1:8d:
76:3d:7d:9e:74:07:ea:c6:a4:05:ad:2c:8d:53:ee:d3:2f:8e:
6b:fc:e1:cb:82:cb:cc:c3:a5:8b:97:dc:e3:0c:8c:93:bf:ba:
3f:51:3b:a8:a5:31:2a:62:36:64:e8:7c:50:22:1e:1e:ae:ef:
cf:d0:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:15:06 2025 by rpki-client