Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/TjdGjb9QH2M8kY_Y8vzffTH4jDU.roa
File: TjdGjb9QH2M8kY_Y8vzffTH4jDU.roa (raw, json)
Hash identifier: S0bGAHppjuYhKRUvEZmV9Gq2yECd1agB3uT5yg00eB0=
Subject key identifier: 4E:37:46:8D:BF:50:1F:63:3C:91:8F:D8:F2:FC:DF:7D:31:F8:8C:35
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01958EFFE56B0830FC621B543FAD4297C4B3
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/TjdGjb9QH2M8kY_Y8vzffTH4jDU.roa
Signing time: Thu 13 Mar 2025 10:14:49 +0000
ROA not before: Thu 13 Mar 2025 10:14:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3319
IP address blocks: 77.47.142.0/24 maxlen: 24
185.143.56.0/22 maxlen: 24
195.178.132.0/24 maxlen: 24
195.178.133.0/24 maxlen: 24
195.178.134.0/24 maxlen: 24
195.178.135.0/24 maxlen: 24
195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.148.0/23 maxlen: 24
195.178.152.0/22 maxlen: 22
212.111.207.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:ff:e5:6b:08:30:fc:62:1b:54:3f:ad:42:97:c4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 13 10:14:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e37468dbf501f633c918fd8f2fcdf7d31f88c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:28:ac:e9:25:9e:3a:48:73:b4:de:e8:ce:
ac:8b:fe:ba:76:07:d2:b4:01:62:60:4a:b9:14:60:
f3:4a:41:ee:c1:ce:4e:ad:09:9c:95:be:42:42:60:
21:2b:fe:be:f6:e1:6d:9e:ea:bc:34:29:38:12:2b:
4d:a6:78:36:74:eb:a4:cc:6a:19:61:d5:75:dd:75:
b9:5a:20:f8:0c:f5:2c:05:0d:dc:75:c6:53:03:69:
9e:05:c6:64:33:94:7c:2a:0e:75:72:8e:85:53:57:
ff:64:94:b3:46:67:ad:c7:f5:f7:d1:5e:c4:f3:8e:
d4:09:8d:81:43:0d:03:14:27:ac:03:e8:2b:c9:1b:
ec:41:13:08:2a:6c:f9:d3:c4:c5:9c:d3:30:bf:b8:
6f:85:98:fd:51:42:c6:62:d9:c4:a5:f5:f4:90:ec:
be:f4:e5:93:68:33:9f:af:d7:96:6d:b9:54:41:4e:
e5:c7:80:ea:c2:09:46:b9:ad:1b:bb:45:f6:1a:61:
f9:ab:f8:b3:0b:82:ef:3f:81:a5:83:f1:c2:bc:d1:
ea:11:6d:6d:58:2b:60:69:97:59:5e:cc:0f:a4:93:
54:18:de:8f:1c:08:0c:8e:36:93:3d:2d:01:4a:09:
d3:5f:fb:8c:5c:f0:53:3a:71:81:58:d8:b5:34:22:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:37:46:8D:BF:50:1F:63:3C:91:8F:D8:F2:FC:DF:7D:31:F8:8C:35
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/TjdGjb9QH2M8kY_Y8vzffTH4jDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.142.0/24
185.143.56.0/22
195.178.132.0/22
195.178.144.0/23
195.178.147.0-195.178.149.255
195.178.152.0/22
212.111.207.0/24
212.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
78:57:56:be:47:1c:3c:34:52:7d:be:ad:a7:d9:6f:7b:00:f6:
cb:be:32:8c:16:27:6e:20:93:be:0b:f0:bd:dc:f9:eb:14:19:
f8:24:ce:ff:c4:f9:b8:bb:bb:a9:0a:6d:f7:1d:9b:61:3d:78:
72:cf:31:ba:7b:fe:df:0f:35:28:6d:c8:4a:2e:69:46:44:50:
b9:74:3c:7e:0e:e6:c4:59:8f:92:ae:b0:18:c3:25:9f:76:6b:
af:8f:e1:81:6f:6b:a1:32:2b:83:25:99:f2:ef:43:10:b6:51:
70:f0:68:2a:b6:cc:ee:32:4b:e9:90:46:b2:da:a1:6e:f5:56:
57:4f:0f:00:12:61:8d:a5:bd:36:c3:b2:bf:eb:07:14:87:18:
1d:ca:3c:17:35:46:99:b9:c7:22:20:78:cd:36:ce:f5:f4:95:
d4:0e:2f:b8:b1:9f:ff:2d:ac:27:24:2d:20:e9:dc:9b:63:82:
8d:da:10:86:5d:24:c4:b0:32:64:f4:62:5c:56:3e:5e:01:7b:
a6:d2:a3:e0:15:7f:50:2e:4e:75:6a:c9:b5:1b:66:0e:21:66:
d0:3e:b6:0a:51:96:16:4a:e5:0d:3d:06:e5:ad:52:61:89:9a:
63:38:d7:4c:20:36:1b:e8:15:d7:c1:4a:74:be:86:ae:19:17:
da:6d:ff:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:38 2025 by rpki-client