Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/TCWMAcVIf1XmxOwoevTUCYxUQM0.roa
File: TCWMAcVIf1XmxOwoevTUCYxUQM0.roa (raw, json)
Hash identifier: /HDY0JXfbE0ZuzLTJcC22r4Z292oLlEe3+9pLUhfZL0=
Subject key identifier: 4C:25:8C:01:C5:48:7F:55:E6:C4:EC:28:7A:F4:D4:09:8C:54:40:CD
Certificate issuer: /CN=613d23f2121327d917d708d8fe153382455959a8
Certificate serial: 01942143B98B984703747595F0060449D274
Authority key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/TCWMAcVIf1XmxOwoevTUCYxUQM0.roa
Signing time: Wed 01 Jan 2025 09:47:53 +0000
ROA not before: Wed 01 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.209.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b9:8b:98:47:03:74:75:95:f0:06:04:49:d2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d23f2121327d917d708d8fe153382455959a8
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c258c01c5487f55e6c4ec287af4d4098c5440cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:25:81:7d:e0:c5:ae:bc:fc:ba:ce:5b:7a:
9a:22:a3:d9:13:6b:f2:78:b0:78:9b:01:2f:a0:2d:
03:95:00:94:de:13:96:d1:03:db:56:a7:b8:31:0b:
b5:83:80:96:17:8e:dd:82:20:c7:7c:22:23:e0:39:
b6:00:bd:40:df:87:36:9c:98:19:77:ce:ed:a0:46:
53:6d:7b:fb:c7:44:4a:af:1d:59:c0:62:86:c8:d4:
90:38:7b:b5:a7:98:86:35:a3:57:c5:e4:14:c2:b9:
81:c7:7f:cf:92:8f:0e:12:72:bb:4b:2e:4b:4d:6f:
a5:89:57:85:90:28:5e:57:e6:86:ae:fb:9b:74:77:
ff:47:7f:53:e2:e2:f6:76:49:60:40:4a:ec:7f:48:
d9:ab:62:d9:b0:98:14:c7:a5:dc:08:db:16:28:f0:
68:18:24:fe:28:91:3e:c1:44:ea:5f:e1:c5:6c:4d:
23:49:d7:77:93:79:04:37:e3:07:10:23:8f:2a:be:
26:3b:8e:5a:98:15:6e:35:08:a1:ab:ce:32:6d:72:
8a:8b:96:0f:ec:44:3b:2a:b7:cb:fa:18:f5:8c:ee:
00:7d:63:84:ea:f5:63:84:04:b9:b3:f4:5d:4d:a5:
e6:d1:ca:70:b9:47:ce:63:1c:02:3e:9f:c9:05:4b:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:25:8C:01:C5:48:7F:55:E6:C4:EC:28:7A:F4:D4:09:8C:54:40:CD
X509v3 Authority Key Identifier:
keyid:61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/TCWMAcVIf1XmxOwoevTUCYxUQM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.210.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b8:d9:26:2b:fa:02:27:90:ae:99:92:90:96:4e:a4:bd:d7:
f1:de:4d:83:7a:c4:83:a9:71:08:04:64:e7:39:dc:c8:e4:5e:
e2:31:fa:37:bb:85:26:fe:4f:2f:5c:82:47:e6:68:0a:5e:d7:
e1:15:8d:12:f8:ed:69:99:27:9e:ed:66:5e:8d:3f:4d:39:6f:
f1:90:bb:45:96:51:17:9c:e2:a8:da:f5:1b:1b:22:66:8d:f9:
c1:66:1b:d1:f2:d3:76:ef:7d:37:e6:be:d2:1e:8e:7c:60:67:
28:ee:0f:f0:05:95:9a:e1:57:20:41:51:36:45:2d:1f:e6:5c:
0f:1e:6b:e6:c3:ea:f4:46:c0:16:a5:c1:dd:93:db:23:d3:60:
e1:7c:a1:96:c9:84:5f:b4:28:8f:9a:b5:33:c0:30:ed:12:55:
82:3f:f0:ad:d3:cf:28:d3:09:93:d0:2c:32:c1:47:57:0a:f3:
5b:d5:01:f3:df:bb:04:e9:8d:74:49:8a:33:7d:ee:db:54:2d:
b1:15:d0:c5:03:b8:1a:3f:cf:2d:2a:a0:f9:35:9a:16:cb:1f:
dc:1f:f2:10:db:d4:34:2f:39:ce:0f:fa:84:a6:4a:04:85:e0:
df:76:a7:5d:b5:66:b5:40:c9:b1:ee:27:d1:27:86:c8:44:f7:
4e:31:60:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:40 2025 by rpki-client