Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/tjgASAOzma6f2Z7RoOryTeTZY9s.roa
File: tjgASAOzma6f2Z7RoOryTeTZY9s.roa (raw, json)
Hash identifier: DpWY737dSZuYYOG9ZIqDhXCNF5lWUkY9/w4EmAF3fpE=
Subject key identifier: B6:38:00:48:03:B3:99:AE:9F:D9:9E:D1:A0:EA:F2:4D:E4:D9:63:DB
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 019426D8E578FC0A708A94CEA6D857E2B260
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/tjgASAOzma6f2Z7RoOryTeTZY9s.roa
Signing time: Thu 02 Jan 2025 11:48:56 +0000
ROA not before: Thu 02 Jan 2025 11:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 153.96.22.0/24 maxlen: 24
153.96.51.0/24 maxlen: 24
153.96.78.0/24 maxlen: 24
153.96.82.0/24 maxlen: 24
153.96.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:e5:78:fc:0a:70:8a:94:ce:a6:d8:57:e2:b2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 2 11:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b638004803b399ae9fd99ed1a0eaf24de4d963db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:95:ad:a4:02:b6:ae:47:75:ce:75:b7:a8:
11:57:86:04:d1:37:b1:1f:32:ad:ae:63:ad:f1:ad:
5c:a8:dc:55:0c:bf:b3:b6:85:71:6a:8d:ce:2b:53:
21:e7:22:2b:db:4e:89:7a:5e:63:78:1d:83:fd:91:
52:17:19:62:42:94:70:17:91:ef:5b:35:81:56:03:
fa:9e:8f:b9:57:fb:e2:76:83:7a:ec:49:a8:00:93:
60:3e:32:ba:1e:ae:14:b0:58:1a:0d:48:91:9a:49:
ee:c9:8e:2d:af:b7:df:23:81:77:0e:06:df:0a:b8:
a4:75:54:3f:09:f3:92:c5:62:2f:13:5a:1b:8f:65:
e7:59:42:93:2c:00:52:3f:95:87:03:ac:e6:58:3c:
bd:73:4f:54:d1:58:be:a3:67:58:20:20:0b:0c:9a:
ba:09:39:3c:a8:88:b6:e2:21:a4:ec:78:25:16:92:
3c:3a:ac:2b:cd:a7:90:b3:a1:bc:1c:a3:69:c7:f9:
da:e2:c6:97:d9:1b:f9:98:55:ee:67:4f:69:86:82:
1a:14:0e:b0:b0:5b:5a:b0:b1:a4:5a:a5:02:6d:f0:
76:ae:0b:10:d0:a3:e9:9b:d4:af:d9:ed:c5:6f:25:
bc:74:a9:e0:76:28:09:77:b4:2b:b5:7f:16:0e:e3:
b9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:38:00:48:03:B3:99:AE:9F:D9:9E:D1:A0:EA:F2:4D:E4:D9:63:DB
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/tjgASAOzma6f2Z7RoOryTeTZY9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.96.22.0/24
153.96.51.0/24
153.96.78.0/24
153.96.82.0/24
153.96.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:38:3c:2c:73:1c:38:8d:68:98:64:e5:dc:5e:bb:90:c0:58:
7a:4a:c8:3e:6a:d2:fc:05:6f:06:79:1e:65:2d:db:c0:b5:cd:
e6:da:43:80:5c:3b:8f:92:62:46:f4:d5:63:4f:e2:19:1c:78:
47:a3:ba:c2:e8:71:6e:fd:26:49:ef:95:48:fc:f8:2e:d0:9f:
40:3d:e0:5a:5e:ff:f3:d2:3f:f8:69:eb:75:77:a9:f5:45:b9:
a9:aa:bc:c3:00:74:2e:13:c9:44:06:04:c1:6c:1c:6b:4e:24:
70:cd:92:b2:88:0b:cc:2e:b8:9d:ab:7c:b5:a3:8a:4f:92:09:
14:be:ff:7d:ea:07:04:82:1b:65:32:fd:1c:65:77:3f:34:6c:
68:36:aa:79:d6:ee:07:ee:8f:f8:2f:4f:36:a7:4a:95:ca:c6:
19:a5:5f:2c:f9:cc:ba:67:ad:11:19:99:f2:14:80:43:c5:dc:
90:58:27:ce:1f:54:79:33:a8:07:fd:4b:f0:47:cc:27:45:1e:
e8:9b:9e:29:c3:42:e3:21:bc:e5:db:9b:e5:03:45:41:d9:e2:
e5:3e:79:f6:a9:15:26:9b:6a:ef:77:75:9b:68:d6:43:a3:21:
c4:53:45:4c:3d:e6:1b:e0:22:e3:cf:4a:c0:8f:ab:89:6b:63:
7f:69:5e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:34:04 2025 by rpki-client