Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/ty50ARtEa_FQbzkrRRpK05YUuG4.roa
File: ty50ARtEa_FQbzkrRRpK05YUuG4.roa (raw, json)
Hash identifier: 6J3WVG0rq9sH9p5MoSA7/o/5BVS9JnWdKFb+LiKqGs8=
Subject key identifier: B7:2E:74:01:1B:44:6B:F1:50:6F:39:2B:45:1A:4A:D3:96:14:B8:6E
Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Certificate serial: 0194258F76E0DFEEE2C32F1294E70211CACB
Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/ty50ARtEa_FQbzkrRRpK05YUuG4.roa
Signing time: Thu 02 Jan 2025 05:49:06 +0000
ROA not before: Thu 02 Jan 2025 05:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200342
IP address blocks: 194.39.200.0/22 maxlen: 22
194.39.200.0/24 maxlen: 24
194.39.201.0/24 maxlen: 24
194.39.202.0/24 maxlen: 24
194.39.203.0/24 maxlen: 24
2a0c:f0c0::/29 maxlen: 29
2a0c:f0c0::/31 maxlen: 31
2a0c:f0c2::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:76:e0:df:ee:e2:c3:2f:12:94:e7:02:11:ca:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef
Validity
Not Before: Jan 2 05:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b72e74011b446bf1506f392b451a4ad39614b86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:ca:99:c2:f5:90:1a:21:7e:05:fe:a2:1a:
eb:3c:b6:6b:ac:c7:c7:e5:6a:7f:63:6a:cf:0a:98:
06:15:e2:68:01:ce:19:43:53:6a:d4:7b:77:0c:98:
f7:02:00:38:f2:be:1a:81:f3:bf:be:7e:43:39:e3:
0f:45:17:af:e4:d0:ef:47:06:7a:b0:0a:db:31:d0:
c0:b1:12:8c:9e:9b:90:10:02:f4:dc:c4:92:d8:4b:
94:4a:fd:b9:c7:bd:c2:36:ba:f3:3a:7d:1b:4e:3d:
bb:ac:d7:22:cb:5a:87:e1:82:98:cb:54:3f:dc:b0:
e2:95:51:e1:0e:42:ed:18:b1:45:6d:dc:53:75:c8:
f7:eb:88:54:6b:cc:20:01:33:87:aa:e6:e6:78:f7:
c1:56:57:b9:81:e3:7f:51:12:48:4d:39:7a:44:fe:
24:5c:25:27:35:0d:03:6c:86:42:b2:eb:c1:ea:8f:
07:8b:34:31:01:02:e5:45:4c:0f:71:8f:8c:22:57:
d0:2c:7a:f8:a8:22:ca:3f:cd:4b:bf:a3:2d:48:48:
1e:32:ae:b1:ef:af:f3:81:04:00:de:79:3e:c1:2f:
db:a6:2f:ab:b1:b4:55:1d:67:e0:58:4c:14:01:d6:
9d:b4:c0:6f:b7:93:20:48:ee:4f:5e:97:4c:9f:e5:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2E:74:01:1B:44:6B:F1:50:6F:39:2B:45:1A:4A:D3:96:14:B8:6E
X509v3 Authority Key Identifier:
keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/ty50ARtEa_FQbzkrRRpK05YUuG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.200.0/22
IPv6:
2a0c:f0c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:ef:95:f2:0b:39:15:55:06:92:ef:d6:4c:d0:e5:d0:2c:95:
fd:80:a1:cf:a0:81:ac:d7:06:64:db:29:44:20:9c:88:cc:dc:
b2:41:ce:db:5a:fc:88:d2:0e:3a:0b:64:6c:66:f5:ef:9f:5b:
5b:84:5b:18:59:17:a7:aa:a7:13:16:32:d5:f0:14:de:3e:6b:
2a:3b:a4:b4:a1:60:7d:f7:3e:b6:d6:75:bd:43:ae:c8:20:32:
16:ec:4b:9f:86:62:77:dd:6e:e0:fd:61:67:35:6a:ac:16:a5:
72:27:e0:60:81:01:55:26:ba:89:50:6a:4e:95:9e:3a:87:37:
74:0b:7a:ca:8b:0b:18:67:d8:8c:c1:a2:ac:f7:f4:a4:9a:bb:
84:48:15:7e:fa:73:ec:c8:9b:9b:f2:34:a0:6e:44:f4:32:18:
83:7c:17:a5:4a:83:62:21:ff:e5:e8:15:f7:95:24:87:1a:a1:
93:83:40:14:b4:8a:0f:aa:f8:7f:92:ab:9f:e0:20:11:1c:c9:
84:c0:f2:13:04:c9:97:8f:cc:d2:2d:b2:e3:92:7a:56:ff:f7:
62:89:de:37:55:a6:54:9a:52:8c:7b:1e:8a:be:14:9f:27:b6:
d7:ae:aa:3f:65:75:84:90:95:f1:b5:01:f6:46:2b:15:8b:c8:
f0:62:8f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:29 2025 by rpki-client