Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa
File: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (raw, json)
Hash identifier: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=
Subject key identifier: 4E:6F:32:4F:FD:EF:06:02:EB:C7:0D:4B:AF:80:37:18:DD:42:8E:4E
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 019423D6F80B6D0BD47F68E37201A87B2745
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.207.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f8:0b:6d:0b:d4:7f:68:e3:72:01:a8:7b:27:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e6f324ffdef0602ebc70d4baf803718dd428e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:be:7b:d8:ce:e6:11:10:17:7f:47:99:a9:5a:
29:32:eb:78:86:4a:0d:f2:49:44:87:60:3b:80:fd:
f6:41:58:bd:3c:5a:ea:7f:98:ff:36:50:d6:06:e9:
4a:3b:5b:8c:e4:a4:fc:66:ea:65:27:91:0d:dd:f9:
a4:bb:47:db:5b:8f:68:a1:96:8f:0d:0a:c0:b9:42:
c1:7b:dd:2f:52:92:76:70:09:b3:be:dd:ad:4b:86:
fe:86:ae:a1:a3:18:97:08:25:96:b5:cd:c6:c0:ae:
19:d8:16:1b:3b:c1:9e:ce:33:5c:6a:6b:c9:3c:6f:
ca:29:7d:eb:a6:e8:3d:35:b9:eb:3f:55:4c:9b:a2:
90:36:77:fd:9a:53:6a:ee:3e:13:27:41:52:8f:5d:
70:e1:3e:be:17:d1:20:35:d7:cb:ec:7f:b5:de:17:
fb:30:7b:06:a0:f3:1d:39:45:ae:91:30:6a:f2:a6:
a0:62:b8:d8:e3:4c:1c:d2:4a:3c:87:73:60:3e:8a:
a4:fc:c0:7d:2b:fe:c0:de:29:c1:53:31:a9:81:f6:
c2:27:83:a5:e7:44:7b:f6:6f:97:b1:95:9c:6a:0b:
10:b3:a2:37:fa:83:92:91:68:12:86:7e:b9:e7:a5:
2c:4f:29:25:66:57:21:9c:9d:8b:b7:4b:fe:90:0b:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6F:32:4F:FD:EF:06:02:EB:C7:0D:4B:AF:80:37:18:DD:42:8E:4E
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.237.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:02:8c:81:40:7c:97:d2:c8:92:71:85:03:7a:62:75:35:22:
af:0a:85:30:5a:84:04:f9:d5:06:a7:ac:28:79:7e:f6:d7:a8:
7e:35:49:a5:7c:4f:3c:95:64:90:92:e7:17:bf:74:cf:36:9b:
0f:ce:71:4d:ea:b6:98:38:f0:6e:30:06:61:83:61:3a:e4:1a:
24:47:5b:c9:b6:2b:0d:db:22:d5:79:44:6b:71:27:27:58:b6:
c0:5b:5a:dc:e2:81:d9:02:c9:ca:7b:14:d4:c6:5c:e3:73:34:
d3:f6:fe:98:eb:63:df:a9:15:fd:61:45:cf:cb:bd:ad:6a:0e:
57:9b:4c:bf:f8:6f:fb:9e:62:20:a2:33:9d:0e:93:9a:d2:48:
f5:36:1e:fa:7e:41:7e:2e:c2:bf:c9:a1:29:ce:7f:60:29:34:
12:4e:80:d7:71:d4:2e:b0:d9:65:f0:74:7c:93:2f:88:c5:83:
3f:1c:3c:1c:12:0e:f7:23:f9:6e:b6:50:a2:25:db:21:bc:86:
ba:6b:5f:43:1f:21:6b:e8:ce:81:25:c7:2b:80:c2:2a:57:04:
a3:e2:70:54:87:c9:ee:ab:06:78:2b:cf:c7:b3:1b:d3:e3:d0:
95:28:c1:49:a9:75:49:67:b2:7a:ea:46:1e:27:12:93:d3:10:
b2:be:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:53 2025 by rpki-client