Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/TbgjMEdQ0rbdH1wsIeqh_-bYUgk.roa
File: TbgjMEdQ0rbdH1wsIeqh_-bYUgk.roa (raw, json)
Hash identifier: GE4J211d6K3inNZ5KwcVMOOJlKd9Y0lNHq1APwdB4fA=
Subject key identifier: 4D:B8:23:30:47:50:D2:B6:DD:1F:5C:2C:21:EA:A1:FF:E6:D8:52:09
Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial: 0194258FB32D9A1C5E3AC6B251229EFDFF65
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/TbgjMEdQ0rbdH1wsIeqh_-bYUgk.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39401
IP address blocks: 91.192.236.0/22 maxlen: 24
193.93.24.0/22 maxlen: 24
2a0d:9a00::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b3:2d:9a:1c:5e:3a:c6:b2:51:22:9e:fd:ff:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4db823304750d2b6dd1f5c2c21eaa1ffe6d85209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:5b:25:fc:95:92:df:38:bf:ab:ce:9a:e5:
88:a7:e5:30:ea:85:cb:5a:fe:b3:28:20:a8:7f:73:
98:59:bd:0b:6d:22:cb:0f:53:4f:3c:f5:20:57:b7:
43:1f:21:d2:d9:50:ec:09:eb:07:d3:f4:3d:2a:2c:
39:a6:b4:2e:7b:d2:94:78:a3:7b:ca:2f:26:34:c9:
13:99:70:bb:99:80:1c:95:c5:05:a2:1f:01:c7:42:
93:55:8d:19:b5:75:28:a0:ce:d7:f8:9e:70:6c:63:
c4:5b:16:e8:f6:78:2c:d5:ee:48:16:40:71:7a:27:
9f:92:3a:49:8c:8c:5a:0a:76:0b:ae:4c:9a:f4:16:
4e:08:4a:2f:02:af:b1:f7:69:a6:75:dc:70:11:f1:
5b:5e:1e:d3:63:5f:17:82:d1:49:c3:49:3f:7e:35:
10:53:6c:96:a2:a5:32:bd:02:7c:35:49:99:6f:e1:
55:20:80:13:05:8d:88:cc:aa:fa:06:26:8f:0b:4e:
c3:d6:a1:76:be:20:4f:0c:fa:26:9e:10:b5:8d:a5:
88:a3:83:75:d7:88:a8:ba:80:a3:49:a7:64:19:70:
a0:c0:0d:46:4b:6a:83:7e:50:6a:a8:ee:79:ca:61:
9a:55:a2:14:08:ef:94:93:39:ef:1f:1e:02:6a:cc:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B8:23:30:47:50:D2:B6:DD:1F:5C:2C:21:EA:A1:FF:E6:D8:52:09
X509v3 Authority Key Identifier:
keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/TbgjMEdQ0rbdH1wsIeqh_-bYUgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.236.0/22
193.93.24.0/22
IPv6:
2a0d:9a00::/32
Signature Algorithm: sha256WithRSAEncryption
69:6e:ae:0f:c3:7a:2c:ea:33:88:83:f0:ac:10:b7:e7:78:b2:
cb:88:30:90:ba:90:88:d0:ec:ac:d5:9e:e8:a4:eb:ad:e3:ca:
78:f0:6d:8b:1e:a3:3c:ce:40:31:81:05:3d:f2:95:9f:6b:9d:
c6:6f:cf:ea:11:7c:c3:46:ad:2c:07:c3:65:10:e1:12:e8:74:
aa:5f:85:8f:66:da:9d:81:ef:81:d6:81:81:4f:53:25:13:eb:
76:65:c8:e7:6c:07:c4:4b:d5:96:cb:b6:dd:16:ae:84:60:cc:
df:f4:58:61:46:bd:86:33:0f:c7:91:bc:cd:77:50:e3:09:a7:
02:22:f1:fa:d7:4e:79:bb:a2:e7:97:ec:3f:21:1d:92:8f:ef:
3d:a0:8e:1a:9a:a7:21:40:3d:41:96:a3:f6:84:a2:94:5f:55:
5b:e5:82:cf:44:aa:52:e2:69:f1:b6:45:70:a9:13:98:9c:6d:
d8:42:5d:6e:93:03:ad:3a:fa:e3:84:2d:69:fa:aa:66:31:e5:
81:52:3a:8c:c6:f4:12:81:f5:a5:bc:30:6e:2c:37:17:14:97:
24:e1:f8:1d:1e:a4:68:cc:89:1c:6f:63:c0:86:4e:3d:4c:e1:
aa:91:b9:1b:ff:5f:8b:bc:51:e6:c6:17:88:78:c3:95:71:2e:
e9:4f:93:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:22 2025 by rpki-client