Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TBGYA8Os0f2-KIUdU4ggnPq5big.roa
File: TBGYA8Os0f2-KIUdU4ggnPq5big.roa (raw, json)
Hash identifier: gCWig9tR43XSik1Bag+CGVSu2diK5B115gQ2rXHg8Vc=
Subject key identifier: 4C:11:98:03:C3:AC:D1:FD:BE:28:85:1D:53:88:20:9C:FA:B9:6E:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824C382A18EA37A710B66733320104B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TBGYA8Os0f2-KIUdU4ggnPq5big.roa
Signing time: Thu 02 Jan 2025 17:51:25 +0000
ROA not before: Thu 02 Jan 2025 17:51:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214255
IP address blocks: 45.149.240.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
93.123.116.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:c3:82:a1:8e:a3:7a:71:0b:66:73:33:20:10:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c119803c3acd1fdbe28851d5388209cfab96e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:c5:6e:1e:26:13:76:23:a8:ae:ca:0f:44:
fb:6d:0c:01:57:c1:af:a6:62:42:1f:0e:67:3e:4a:
d5:37:25:59:c7:8e:6e:f3:d9:49:17:3d:c0:c7:41:
bf:e5:df:32:bb:90:c0:8b:66:07:6f:a4:bd:8d:59:
1b:4b:1c:04:30:fb:58:fc:e3:87:13:7a:4d:3a:5e:
af:7e:f2:a3:5e:9b:ae:26:e0:85:2e:39:81:71:11:
a3:6b:df:22:7e:46:02:cb:d3:79:fa:ad:e7:5e:0f:
28:6e:56:57:10:f9:77:05:11:f0:ef:f2:d0:a2:0f:
bd:e5:8d:1f:79:86:ce:f1:1f:48:9c:42:2b:13:8c:
f2:ff:b7:64:f5:9a:94:ba:f9:5f:d0:0c:18:f1:e5:
ad:ea:60:89:3f:b3:8d:b1:da:7b:62:ce:dd:b9:31:
cb:4e:2e:62:11:29:db:f0:55:43:51:70:44:45:cb:
83:b5:f6:a7:76:49:a5:b1:ad:1e:18:84:3f:3b:d1:
16:af:ff:73:0b:da:f1:62:58:4e:64:72:e6:de:b6:
77:d5:10:81:bd:f1:ff:52:89:4d:50:a2:06:4a:c9:
62:d4:0c:bb:76:4d:4d:ab:2e:4c:00:03:86:94:7b:
13:46:ae:a4:af:79:2a:8e:48:aa:f3:80:d4:32:35:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:98:03:C3:AC:D1:FD:BE:28:85:1D:53:88:20:9C:FA:B9:6E:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TBGYA8Os0f2-KIUdU4ggnPq5big.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
87.121.46.0/24
93.123.116.0/24
95.214.25.0-95.214.26.255
185.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:52:73:01:31:07:71:07:a7:a9:15:31:9b:82:22:99:b1:82:
61:44:a2:5e:00:91:8a:02:cf:16:d3:6c:80:c6:67:88:66:ab:
36:b9:a4:0d:81:c5:3d:0a:72:46:06:60:c3:34:21:52:16:f3:
c0:9e:62:b1:06:7c:27:bd:3a:36:ed:14:8d:fd:da:97:ee:d3:
2c:6c:d5:59:da:f2:f5:e8:7b:ce:c5:df:21:51:27:af:60:52:
81:76:f7:52:9b:b4:58:a9:70:41:b3:48:ad:95:2d:18:1d:37:
78:a0:7b:6d:3c:5b:2a:d3:e5:c7:0e:16:3a:c6:0c:55:40:e0:
f5:8f:85:39:05:14:a0:d8:b2:0b:ec:09:37:9e:8c:b4:e5:e0:
ab:7b:f3:25:9d:95:4d:5b:3e:4d:d1:e0:5a:c8:61:5a:71:de:
9d:29:86:98:0c:86:5f:e2:40:54:6f:5d:40:8d:60:7b:b7:d7:
01:0e:65:d0:72:6b:2e:2a:f3:19:c6:7f:c3:91:02:7d:d6:6f:
08:74:83:37:cd:b3:ee:6a:70:12:73:26:d2:b7:0f:d8:81:82:
c3:a0:01:3d:6d:70:c6:10:8c:57:02:95:d7:ba:5a:1d:eb:4e:
5e:b3:71:1a:dd:4b:34:5d:4f:fb:7f:40:64:a9:41:fc:d3:e8:
04:84:3f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:12 2025 by rpki-client