Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/tce_jftJ9E_4KJ_uPWaE-OosXF4.roa
File: tce_jftJ9E_4KJ_uPWaE-OosXF4.roa (raw, json)
Hash identifier: wJZcfb6ZEWBCJ/uKNt0y+u5y+6aoB2gLD29sHouunZQ=
Subject key identifier: B5:C7:BF:8D:FB:49:F4:4F:F8:28:9F:EE:3D:66:84:F8:EA:2C:5C:5E
Certificate issuer: /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial: 019422FC42F7E6D2F415DE84F364B9B24357
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/tce_jftJ9E_4KJ_uPWaE-OosXF4.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202120
IP address blocks: 185.73.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:42:f7:e6:d2:f4:15:de:84:f3:64:b9:b2:43:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5c7bf8dfb49f44ff8289fee3d6684f8ea2c5c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:18:80:f8:ca:44:df:99:5f:b4:83:55:6c:
ac:d3:82:9b:3f:90:c4:90:f6:14:62:89:f1:9d:8d:
b2:fc:37:25:9d:7f:be:c3:5a:6b:1a:1c:e3:51:22:
fe:7a:ea:65:97:75:09:c6:1e:1d:e9:9a:9c:e7:02:
b4:fd:46:09:12:49:d0:74:47:b1:f4:36:38:4c:13:
d4:f4:cc:cd:96:03:d0:b2:43:1f:32:97:57:47:b1:
fb:fe:2a:9d:a8:6f:70:80:d8:bf:b3:b7:50:16:b9:
ce:c9:7c:d4:30:fb:0d:49:a6:91:0f:48:c7:9e:d0:
17:a8:e6:8f:c4:5d:7d:1b:0f:c9:a2:a6:6f:36:5e:
d1:e9:7a:1b:ff:13:73:74:d7:2e:68:9a:ca:a5:69:
10:00:91:3d:96:96:b0:d4:c9:c1:5f:01:81:49:b0:
ae:61:0e:6e:65:d6:ef:8c:c4:ae:70:e0:bb:7a:fd:
e0:c7:dc:e8:13:6b:56:a6:9e:a6:c1:ad:ed:1f:61:
3e:a1:55:16:e0:44:da:b5:d7:52:31:7c:5e:2a:bd:
75:59:09:41:c0:e0:f6:76:ba:8b:a4:63:49:97:f0:
7c:a5:69:c7:3c:cf:6f:85:9f:75:87:a4:ff:5a:e3:
16:fc:75:0b:6a:6f:65:24:06:ad:0e:59:3f:d3:de:
f2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C7:BF:8D:FB:49:F4:4F:F8:28:9F:EE:3D:66:84:F8:EA:2C:5C:5E
X509v3 Authority Key Identifier:
keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/tce_jftJ9E_4KJ_uPWaE-OosXF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.95.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:87:2e:e8:e7:80:6c:74:4a:49:ec:38:fb:14:ec:64:63:1f:
3c:6d:37:6e:b4:d3:df:c8:ef:66:1c:db:ac:fc:49:a0:fe:4e:
cc:52:8a:eb:92:8e:3d:bf:37:ce:8a:b0:0e:ab:95:28:24:35:
bb:6f:02:8e:40:07:87:93:9e:0f:87:e3:b1:79:53:4d:47:e9:
af:62:83:e0:f2:66:cf:9f:53:63:b9:e7:9e:4e:e8:3a:62:77:
77:a0:ff:a2:62:1e:b0:3f:52:44:1c:5a:61:e5:01:8e:97:01:
ae:76:e0:4e:6f:1b:d5:6d:2f:47:83:6d:44:83:82:09:18:3b:
4f:29:ae:e9:a9:c3:f7:33:c9:0b:95:5d:b7:18:f2:0c:c9:2d:
a2:f5:8f:f9:21:5d:c6:4e:23:78:8d:09:1d:23:3c:fc:f6:ae:
dc:42:0d:c7:f4:21:8e:96:2b:9f:5f:0f:56:35:67:0b:75:50:
21:01:98:a7:70:f3:dd:da:c1:80:5d:fd:0c:74:3e:2c:5b:57:
02:6a:1f:97:73:7b:26:e5:b5:2a:d3:32:6d:26:14:49:a2:27:
00:a2:b3:71:46:77:b8:38:60:90:60:c6:75:be:b8:ea:32:5c:
3e:fd:8f:47:78:8f:03:e0:37:32:2a:ce:45:5f:e5:2c:7f:6c:
1f:6d:c1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:41 2025 by rpki-client