Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/TubnKXrNaCLjNYXGuZkruk7OxWA.roa
File: TubnKXrNaCLjNYXGuZkruk7OxWA.roa (raw, json)
Hash identifier: sKHDaEtAfuxZv1tnnNx3TghdW4C9b+yhAX9oMIV0QkA=
Subject key identifier: 4E:E6:E7:29:7A:CD:68:22:E3:35:85:C6:B9:99:2B:BA:4E:CE:C5:60
Certificate issuer: /CN=360214db093d5e27995ab463312fe4076eb0cf50
Certificate serial: 0187E1CE8E7F1184082811F755D0D2EC7D3F
Authority key identifier: 36:02:14:DB:09:3D:5E:27:99:5A:B4:63:31:2F:E4:07:6E:B0:CF:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgIU2wk9XieZWrRjMS_kB26wz1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/TubnKXrNaCLjNYXGuZkruk7OxWA.roa
Signing time: Wed 03 May 2023 13:30:23 +0000
ROA not before: Wed 03 May 2023 13:30:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20506
IP address blocks: 194.176.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:ce:8e:7f:11:84:08:28:11:f7:55:d0:d2:ec:7d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360214db093d5e27995ab463312fe4076eb0cf50
Validity
Not Before: May 3 13:30:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ee6e7297acd6822e33585c6b9992bba4ecec560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1e:9e:77:5a:ba:f7:4e:82:1c:78:7f:c2:7c:
4e:0b:dd:5b:51:e3:c2:28:db:3d:02:f1:73:7c:38:
0d:d7:59:d3:68:3e:76:17:f5:46:b8:2d:19:36:89:
b5:1a:bc:4c:52:df:58:87:58:d9:40:4e:2a:8f:ff:
80:11:6a:9b:20:4a:dd:b8:78:3d:9b:9f:b6:3b:91:
70:60:2b:f4:36:88:bf:6c:56:19:25:30:9b:e9:dd:
42:ef:31:18:3a:60:bf:25:d7:72:f8:f4:d2:fb:08:
2a:4a:ba:e1:d8:6e:b7:a2:e9:5d:d3:ee:8d:b2:6b:
5d:29:22:25:22:14:56:4f:25:33:b1:17:54:49:59:
2e:21:58:cd:40:08:8a:d2:27:6a:73:f5:33:b1:9c:
00:6f:11:b4:31:45:e9:83:65:b9:15:7e:85:2f:26:
ac:fb:2b:86:ef:77:47:cc:a1:1b:3e:1f:84:c9:5d:
13:8c:97:7f:e4:91:9f:5e:91:25:ce:05:10:bd:e9:
1b:63:52:eb:27:1a:07:33:57:6f:86:06:12:b4:46:
85:ab:70:5a:dd:81:ac:6d:aa:c7:51:34:3e:6c:58:
17:4c:f2:22:d0:76:c4:ff:28:e6:14:71:5d:70:e6:
92:8b:be:ae:7f:73:c3:f7:57:07:b2:26:c7:13:c4:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E6:E7:29:7A:CD:68:22:E3:35:85:C6:B9:99:2B:BA:4E:CE:C5:60
X509v3 Authority Key Identifier:
keyid:36:02:14:DB:09:3D:5E:27:99:5A:B4:63:31:2F:E4:07:6E:B0:CF:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgIU2wk9XieZWrRjMS_kB26wz1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/TubnKXrNaCLjNYXGuZkruk7OxWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8144e2-9585-4697-bcf2-aeefa3d0541b/1/NgIU2wk9XieZWrRjMS_kB26wz1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.113.0/24
Signature Algorithm: sha256WithRSAEncryption
01:67:71:fa:43:cd:71:0c:6c:6a:3c:5d:de:75:99:6f:6b:e1:
c8:fa:34:d7:f8:24:7a:42:ca:78:18:68:4a:41:ef:b8:9f:77:
67:77:4b:91:41:0d:4e:9d:b9:94:43:28:79:d1:38:54:2c:7c:
ed:f3:c4:e9:46:ea:87:a5:cf:1b:7e:15:93:1c:cf:32:7e:f9:
b3:74:11:6a:13:aa:65:a4:cd:9f:39:40:09:66:cc:af:a9:84:
50:5f:f9:ff:75:36:fe:4a:66:f8:78:21:40:3a:4a:dd:cd:c8:
b3:45:13:c1:f3:b3:67:4c:4f:d4:46:b2:30:22:e0:b7:da:44:
d3:27:c4:3f:cb:e6:73:63:8c:10:c9:07:a5:44:5d:f7:b3:94:
93:cd:99:b4:6c:5d:0a:f1:f5:cd:f8:35:ba:53:7b:4e:97:2d:
8a:28:76:03:a3:28:de:91:e8:0a:0d:5c:73:6b:af:44:6d:5d:
9c:cd:8b:70:27:e6:60:a3:14:25:5e:b6:01:a2:35:cb:48:ba:
05:27:4a:e2:7d:61:19:b0:e1:5e:f4:4f:51:5d:16:a6:98:1a:
a6:74:84:cd:84:2f:58:60:ce:b5:e9:2c:0d:4c:cd:7b:2b:96:
c3:ec:5f:21:a5:2e:68:45:71:92:20:6c:59:6a:54:87:8d:eb:
bd:ee:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:13 2025 by rpki-client