Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/TbvHnfpEwil0k-m-bT5qxin7QgU.roa
File: TbvHnfpEwil0k-m-bT5qxin7QgU.roa (raw, json)
Hash identifier: eMD2C00X6snjPjRp1k8vdynVDBwXZs3jHeKCcB71/uI=
Subject key identifier: 4D:BB:C7:9D:FA:44:C2:29:74:93:E9:BE:6D:3E:6A:C6:29:FB:42:05
Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial: 01942444ED32A4F13C5549A320760520E6B5
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/TbvHnfpEwil0k-m-bT5qxin7QgU.roa
Signing time: Wed 01 Jan 2025 23:48:04 +0000
ROA not before: Wed 01 Jan 2025 23:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5483
IP address blocks: 79.120.198.0/24 maxlen: 24
79.120.200.0/24 maxlen: 24
193.226.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ed:32:a4:f1:3c:55:49:a3:20:76:05:20:e6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Validity
Not Before: Jan 1 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dbbc79dfa44c2297493e9be6d3e6ac629fb4205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:90:bb:d2:b6:6b:4d:de:8c:8c:3f:74:0b:d3:
4e:b1:51:95:f5:8c:06:b5:a9:5a:19:96:73:2e:da:
34:43:6c:d9:47:7c:48:a6:45:f0:10:91:fe:53:52:
19:1f:da:a2:fb:0e:06:33:7b:4b:21:4d:c0:2c:e3:
78:a5:1f:f8:39:a2:6b:be:bc:9f:be:fe:f8:7b:5d:
9f:c7:48:8d:1e:23:eb:fc:4f:81:20:85:e8:58:8b:
7c:e9:33:f6:e5:a9:e4:d0:82:a0:d9:a2:1c:30:b5:
cd:63:02:ed:51:3a:be:fd:5e:6c:42:19:13:d0:f5:
3f:01:59:9c:84:e4:ac:63:88:cd:67:4b:b9:fb:88:
58:07:f3:dd:59:5d:47:64:6a:77:4a:87:6d:d0:74:
c8:81:7e:e5:e9:30:ad:ca:d4:49:32:3d:6c:52:dc:
fb:f2:08:5d:e4:bd:b8:8c:94:bf:41:67:77:ee:22:
ac:bf:1b:d9:87:31:91:73:3b:a8:4f:f0:94:80:8f:
92:5d:31:01:44:f4:d3:ef:93:e6:63:98:13:3d:f3:
bd:9a:2e:57:df:df:31:56:68:bc:ff:0f:c3:f7:c3:
eb:24:6a:53:8e:5e:88:2f:9b:46:65:05:a6:b7:60:
e7:20:73:26:15:b3:c8:d5:39:cd:b5:89:64:14:e2:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BB:C7:9D:FA:44:C2:29:74:93:E9:BE:6D:3E:6A:C6:29:FB:42:05
X509v3 Authority Key Identifier:
keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/TbvHnfpEwil0k-m-bT5qxin7QgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.120.198.0/24
79.120.200.0/24
193.226.237.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c9:ec:df:ee:81:cb:de:8f:b1:6f:c4:48:d1:b2:9b:34:7c:
96:59:c4:d8:83:f8:54:8a:3f:15:4e:5e:0a:4a:d8:fa:cc:f0:
7b:b4:6b:2e:cf:05:64:76:6b:c4:75:03:49:eb:61:33:aa:03:
98:c6:95:70:c6:4d:88:c1:64:27:0b:2c:d6:70:a6:d9:bd:43:
fb:08:f4:76:56:50:71:80:98:61:47:3f:9c:c3:65:da:03:01:
1f:f6:10:43:be:f4:4b:06:2c:54:6c:49:24:21:52:bc:1f:96:
ca:7d:4b:2f:bd:61:ea:a6:6a:d6:3a:81:fa:77:a4:f2:b6:68:
c5:82:2a:dc:93:8e:69:ce:90:50:50:a9:04:a5:cd:2f:3a:03:
d7:df:2a:32:2a:b3:99:22:98:47:aa:c2:34:ba:9c:52:cf:49:
70:3e:35:72:61:e9:42:92:a4:e6:0f:5b:2b:ba:74:c5:f5:81:
1c:3a:df:87:84:da:26:79:ab:40:6c:c4:fd:a3:02:35:31:2b:
40:c7:61:67:d9:80:ee:44:e4:f2:86:b1:c6:a3:4e:28:49:0f:
e2:d7:30:e1:1c:d1:6f:ca:65:70:cd:14:ee:f4:e4:3a:f7:29:
c2:ba:af:92:6e:d5:c3:cb:22:2c:2a:53:e6:6c:1d:62:ec:cd:
e7:3b:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:57:36 2025 by rpki-client