Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18bd82-37c8-4f57-975c-a4896d5a3887/1/TBGcTtg-S3ES1kYrpfjUKSrugzg.roa
File: TBGcTtg-S3ES1kYrpfjUKSrugzg.roa (raw, json)
Hash identifier: vsa5Dgijnd7bLynbXL+borN2ma8DDZBYZcHmI6E36fQ=
Subject key identifier: 4C:11:9C:4E:D8:3E:4B:71:12:D6:46:2B:A5:F8:D4:29:2A:EE:83:38
Certificate issuer: /CN=a2ac930447090bf983a191e0a76317abf40c73e3
Certificate serial: 01857102F72770B3B0E49F0E7EA711AAD967
Authority key identifier: A2:AC:93:04:47:09:0B:F9:83:A1:91:E0:A7:63:17:AB:F4:0C:73:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oqyTBEcJC_mDoZHgp2MXq_QMc-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/18bd82-37c8-4f57-975c-a4896d5a3887/1/TBGcTtg-S3ES1kYrpfjUKSrugzg.roa
Signing time: Mon 02 Jan 2023 05:44:57 +0000
ROA not before: Mon 02 Jan 2023 05:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29182
IP address blocks: 185.253.32.0/23 maxlen: 23
185.253.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:f7:27:70:b3:b0:e4:9f:0e:7e:a7:11:aa:d9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ac930447090bf983a191e0a76317abf40c73e3
Validity
Not Before: Jan 2 05:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c119c4ed83e4b7112d6462ba5f8d4292aee8338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:96:c1:c6:39:8f:11:90:05:68:56:83:42:
9a:96:8d:2b:0b:27:4e:b7:ae:d2:62:97:a9:62:f8:
00:d0:a8:55:b5:e9:e0:49:d4:3d:32:42:b0:e5:cd:
df:bb:42:7b:71:12:da:63:9c:c8:40:bf:1e:33:79:
f8:94:4b:ac:0e:97:8a:d9:93:1a:e2:c6:d1:b5:d0:
24:d1:fb:14:43:c1:10:4b:e2:e4:be:10:36:d9:df:
a8:32:eb:69:6a:84:af:fd:c6:ae:ad:86:b8:0b:72:
d7:27:33:72:52:a3:64:a0:1a:e2:21:08:bd:7c:15:
75:62:99:b4:f6:01:6d:bd:e7:5b:60:b3:ce:37:1c:
13:4d:0d:d6:4d:14:52:aa:87:87:5e:4b:e3:10:84:
37:f1:a1:bd:02:42:65:2e:fd:b8:d1:c3:e4:96:c9:
9d:91:96:aa:c2:bf:f7:d5:3e:f1:63:16:d8:e4:20:
9b:1f:6b:ae:14:c0:55:05:14:a0:b0:4d:de:fd:ef:
88:3e:81:2b:c9:d9:be:81:4f:49:5f:bd:be:a5:de:
a3:52:b7:14:42:b1:3e:3b:f4:db:26:79:6e:e6:c8:
41:fe:ca:46:f9:0d:86:a6:2f:6d:03:03:71:b9:3e:
c5:1c:28:7e:26:2a:d8:e4:41:e1:0f:e7:27:ca:00:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:9C:4E:D8:3E:4B:71:12:D6:46:2B:A5:F8:D4:29:2A:EE:83:38
X509v3 Authority Key Identifier:
keyid:A2:AC:93:04:47:09:0B:F9:83:A1:91:E0:A7:63:17:AB:F4:0C:73:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqyTBEcJC_mDoZHgp2MXq_QMc-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18bd82-37c8-4f57-975c-a4896d5a3887/1/TBGcTtg-S3ES1kYrpfjUKSrugzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18bd82-37c8-4f57-975c-a4896d5a3887/1/oqyTBEcJC_mDoZHgp2MXq_QMc-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.32.0/22
Signature Algorithm: sha256WithRSAEncryption
09:13:db:01:74:0c:4e:aa:50:f6:81:63:2c:70:b9:f6:d0:00:
58:e9:4b:53:20:1d:02:5b:2a:f5:f1:b4:c2:df:31:0f:39:f9:
32:d7:c2:bf:4d:f7:97:06:c4:e6:e4:1c:4d:b4:01:57:b5:eb:
6a:df:96:62:c2:7f:9a:39:2a:a7:46:8f:69:89:e3:f8:57:59:
bd:d1:42:38:19:f9:bf:86:da:47:17:dc:82:40:ae:c8:a3:c7:
88:ae:98:5e:a4:1e:78:6f:39:cb:6f:06:7e:01:c4:8b:f9:ae:
5c:09:70:f5:15:20:f6:56:01:6b:28:92:28:7c:cc:05:9f:b9:
26:37:87:ba:a2:91:4f:cf:b5:35:fa:6d:b0:97:5a:3d:f6:23:
c1:ab:1e:dd:17:e8:cf:40:c3:07:c0:87:6e:e2:69:35:d5:6e:
92:07:fa:ab:61:1d:09:06:78:f2:bc:80:86:5a:a6:8f:c0:6c:
61:81:11:95:bc:f6:4b:7c:a8:29:26:ba:ab:21:d3:2d:a4:b6:
6c:42:74:40:95:66:ad:55:a3:4d:f7:80:f2:00:bc:e1:55:58:
ab:fa:93:34:c4:3d:e2:6a:06:93:6e:fe:73:4f:51:3e:34:c7:
5b:a4:32:89:20:53:66:c9:7f:68:f8:b6:cb:2a:87:ab:26:e9:
72:9e:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:18:14 2025 by rpki-client