Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa
File: TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa (raw, json)
Hash identifier: 0Cql4kgvd07ySH8Z69IoKjqLLTAd4hRTfVwaM91rMF0=
Subject key identifier: 4C:15:7C:5C:BF:04:B8:9F:68:F6:81:B3:23:39:BC:12:84:60:07:2B
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 0194258F85B7D82D7FA1CC77BAE7249864AE
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210079
IP address blocks: 83.220.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:85:b7:d8:2d:7f:a1:cc:77:ba:e7:24:98:64:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c157c5cbf04b89f68f681b32339bc128460072b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:17:9b:4f:1d:ac:18:9e:fd:f1:cb:a9:b2:
57:8e:a9:c9:7b:8e:ff:b7:f7:7b:b9:78:59:52:77:
11:40:5a:f6:6a:24:76:55:3e:79:5e:14:08:17:97:
ba:71:44:e8:92:2b:88:ef:b2:79:dc:27:46:dc:62:
57:b7:24:52:be:03:52:7c:6e:c7:54:04:a0:1c:7f:
0b:39:37:a6:c1:9d:4a:0c:e7:bd:27:97:0c:75:24:
df:cc:10:d3:a2:4e:5d:d6:83:79:e4:e9:70:b2:d3:
8b:25:56:d6:d2:6d:07:2d:7a:75:39:c0:16:48:a5:
38:f0:60:df:b4:b9:3f:f9:6e:a3:eb:85:3a:da:c7:
80:0b:f2:14:2d:cd:f0:44:c0:3b:81:53:8d:55:ca:
06:3e:27:c6:13:44:0f:e9:ca:93:b3:ea:7d:5b:a1:
06:d8:56:37:d1:ab:2e:01:ea:e6:4a:4d:0f:a1:33:
d4:f5:b6:5b:c3:ab:07:f1:f8:cd:4f:99:fa:28:9b:
b3:66:2f:d7:6e:56:31:3f:7a:c7:8e:2a:e4:9a:1b:
c1:a9:db:7b:34:ea:3b:b3:18:07:a1:e2:44:63:28:
c9:e4:1e:ac:fa:06:16:42:68:cd:e6:17:84:dd:69:
4c:37:3a:3e:5d:0d:7c:39:fc:b3:27:0b:6b:df:87:
e4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:7C:5C:BF:04:B8:9F:68:F6:81:B3:23:39:BC:12:84:60:07:2B
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.220.164.0/23
Signature Algorithm: sha256WithRSAEncryption
61:7b:cb:ef:02:48:0c:ae:50:6b:e8:5d:e4:dd:7c:43:24:c3:
3a:ac:37:db:5e:b7:f8:3b:ce:b6:8d:83:8f:f2:af:20:ad:dd:
9c:6c:a5:39:a8:b7:9c:3d:9e:c8:58:d8:6a:66:76:39:d6:ba:
cf:c2:79:7a:cb:27:86:16:b0:74:b7:89:47:3e:7a:a5:26:36:
8a:bd:a9:3f:43:06:23:85:8e:ee:86:ee:f5:a6:8e:42:2d:c4:
54:f6:e4:30:cc:67:0e:c2:6c:5d:56:34:43:5e:2b:1c:e2:f4:
4d:dd:7f:3b:90:a7:0a:6b:74:20:f7:ef:c9:dc:de:d5:28:85:
e0:65:f0:c9:5a:76:c4:ef:11:68:81:41:42:e4:00:c1:7b:da:
b6:f2:56:d6:ba:9c:03:6f:c4:0a:92:fe:cc:9f:74:49:db:80:
1f:0a:82:0d:54:1c:e1:87:ec:2e:77:28:30:c3:5c:72:9a:c2:
9d:62:65:25:92:c0:51:98:99:7c:15:ef:af:14:3a:1b:50:27:
52:90:b7:84:f0:2b:f4:ba:27:d2:c4:18:22:cf:dc:c1:97:b9:
b3:02:12:72:31:4f:c3:e0:ce:43:8e:de:6e:31:4e:b5:80:a0:
30:ec:b0:d9:ed:43:1f:d6:56:c7:f3:d2:82:36:bb:15:82:7c:
70:62:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:19 2025 by rpki-client