Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/TfzbLdgbmHscHRZGFXa2BLnb_bw.roa
File: TfzbLdgbmHscHRZGFXa2BLnb_bw.roa (raw, json)
Hash identifier: 3EA04j0oUnZMkQnX+1EWE2fWG+qVwtOVdfkijI+MKmY=
Subject key identifier: 4D:FC:DB:2D:D8:1B:98:7B:1C:1D:16:46:15:76:B6:04:B9:DB:FD:BC
Certificate issuer: /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial: 01942521B7C432CC98ABA235B6361AF48A56
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/TfzbLdgbmHscHRZGFXa2BLnb_bw.roa
Signing time: Thu 02 Jan 2025 03:49:14 +0000
ROA not before: Thu 02 Jan 2025 03:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 195.78.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b7:c4:32:cc:98:ab:a2:35:b6:36:1a:f4:8a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Validity
Not Before: Jan 2 03:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dfcdb2dd81b987b1c1d16461576b604b9dbfdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:f0:15:63:dd:6e:f9:22:4b:98:7c:95:1b:
03:12:da:99:f3:5b:01:52:e4:c5:d9:a7:00:de:51:
76:de:0a:ff:8c:dd:49:0f:25:07:04:34:a3:1e:4f:
59:12:e8:56:e6:f3:30:5b:ce:ae:75:e6:c3:66:6b:
1b:b7:49:fc:ff:ef:20:f5:94:f0:9d:b9:0f:03:bb:
3e:3f:25:ae:a2:b0:83:e8:16:c6:15:45:2c:af:3d:
26:c1:fe:1a:2e:9d:ec:6b:4d:b8:24:01:34:2e:56:
f0:8f:97:80:19:92:2d:c8:9f:c1:e9:ac:83:de:22:
49:35:bb:80:a5:cc:7f:d1:aa:ca:7a:d3:78:af:c6:
06:15:08:d5:54:6a:fa:52:b6:a3:3d:87:da:0f:21:
6a:c8:7c:f4:08:70:72:c9:e3:5e:a2:95:d2:6a:d7:
90:ee:57:ab:dc:73:7f:58:6e:d4:07:9f:20:34:60:
32:ae:1c:66:6a:40:b6:14:a4:9e:dd:eb:a4:5d:e2:
76:b2:42:01:a3:c8:7a:96:c9:07:48:63:40:41:a1:
7c:2b:6a:8c:8d:08:a9:ad:7f:df:6a:1c:b2:2f:87:
72:56:48:f9:dd:0d:60:19:3d:a5:58:ad:fe:34:03:
7a:f1:50:30:0d:e5:a1:19:ba:6e:41:b0:54:f9:f3:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FC:DB:2D:D8:1B:98:7B:1C:1D:16:46:15:76:B6:04:B9:DB:FD:BC
X509v3 Authority Key Identifier:
keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/TfzbLdgbmHscHRZGFXa2BLnb_bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.50.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:3a:df:4b:41:de:92:95:e4:38:41:57:1f:d6:a4:39:96:32:
f8:fd:21:fb:40:08:b1:ec:3b:ac:7b:fa:43:4e:c1:84:f6:3e:
fe:01:18:a2:af:96:25:02:68:3d:35:52:75:05:f4:dc:bc:c2:
35:62:51:9c:93:2e:5a:09:a5:ad:dc:3a:86:70:27:6a:a0:f7:
c1:c2:f4:06:dc:4d:14:15:20:c7:36:98:9a:59:9b:b9:77:0b:
6c:2c:a6:30:31:5b:5b:92:23:9d:a7:6d:83:30:28:a8:1a:ea:
0f:fa:81:04:e2:8f:21:06:0d:e7:91:70:7f:59:cc:dd:a8:37:
5f:50:7e:b6:b6:b2:70:df:54:4a:de:a9:8e:54:e8:3e:79:42:
af:1f:ab:c6:09:bd:d1:3a:c9:ad:06:7e:f1:07:46:64:fe:dc:
e8:25:15:f6:ed:7f:db:86:85:0d:f1:4c:3e:77:d8:ef:b0:69:
0c:47:3d:17:10:d3:c1:11:5b:9e:d6:aa:53:41:e2:6f:7b:44:
31:23:ac:70:b2:b5:41:66:81:5b:14:ba:27:40:15:82:69:70:
55:a0:cd:28:e5:0e:ca:e2:0c:1f:cd:e9:dd:b3:e4:22:89:46:
86:3f:e6:92:2a:fb:c2:99:52:08:b9:92:7f:58:07:33:04:60:
9e:f8:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:37:56 2025 by rpki-client