Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/tjGJDt_M-VxsgPS8YmM7UNvHHRo.roa
File: tjGJDt_M-VxsgPS8YmM7UNvHHRo.roa (raw, json)
Hash identifier: ByJAYyuv1Y5nwy0y2xRNrrdrD4R0wOXmShNxbo80fvQ=
Subject key identifier: B6:31:89:0E:DF:CC:F9:5C:6C:80:F4:BC:62:63:3B:50:DB:C7:1D:1A
Certificate issuer: /CN=2f3136ed10998580a517d9598abca33d9ba66599
Certificate serial: 0194266C33145B3506907577E7DAB4CBEDA8
Authority key identifier: 2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/tjGJDt_M-VxsgPS8YmM7UNvHHRo.roa
Signing time: Thu 02 Jan 2025 09:50:12 +0000
ROA not before: Thu 02 Jan 2025 09:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 145.224.128.0/20 maxlen: 24
145.224.144.0/20 maxlen: 24
145.224.160.0/20 maxlen: 24
145.224.176.0/20 maxlen: 24
145.224.192.0/19 maxlen: 24
145.224.192.0/24 maxlen: 24
163.76.128.0/20 maxlen: 24
163.76.144.0/20 maxlen: 24
163.76.160.0/20 maxlen: 24
163.76.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:33:14:5b:35:06:90:75:77:e7:da:b4:cb:ed:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3136ed10998580a517d9598abca33d9ba66599
Validity
Not Before: Jan 2 09:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b631890edfccf95c6c80f4bc62633b50dbc71d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:86:c7:8a:d9:df:8d:94:47:12:f6:68:d2:72:
9a:c4:3d:92:a1:7f:cd:d4:fa:1d:86:65:5c:d4:2d:
5a:13:fc:90:11:b7:96:07:5b:08:fc:69:ab:ef:a7:
93:22:d5:f4:1a:72:8b:21:7c:63:65:e9:58:7f:24:
6f:07:84:09:ff:0b:74:19:7a:fa:90:92:66:85:61:
2e:28:72:62:eb:31:d7:79:51:75:f7:b2:d3:b0:57:
e1:41:a8:89:87:b3:19:a6:5f:31:fb:47:7c:79:08:
be:53:4d:66:5a:e6:38:a7:86:c8:d9:e3:50:d5:78:
cf:72:db:fa:90:16:42:0f:e9:d6:cb:f3:7f:5b:6f:
e5:5a:f1:75:52:b7:12:89:da:58:7e:ff:9a:58:ab:
2b:8c:85:4b:e6:99:ad:ef:df:3a:c5:77:c2:a1:d9:
05:03:7a:65:96:93:74:ff:c7:6f:59:8e:5c:e4:cb:
bc:3e:a1:09:49:5b:eb:88:85:f7:b1:a6:b9:e6:83:
d2:70:33:aa:08:f4:23:93:44:0e:80:91:d4:ac:23:
15:ba:b6:ce:aa:52:3d:69:5b:76:3b:95:88:d9:1f:
fd:bd:03:68:81:2f:1d:55:32:f8:31:74:e8:9d:c8:
de:41:05:41:2f:c7:2f:2f:de:64:7f:bd:99:30:49:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:31:89:0E:DF:CC:F9:5C:6C:80:F4:BC:62:63:3B:50:DB:C7:1D:1A
X509v3 Authority Key Identifier:
keyid:2F:31:36:ED:10:99:85:80:A5:17:D9:59:8A:BC:A3:3D:9B:A6:65:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LzE27RCZhYClF9lZiryjPZumZZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/tjGJDt_M-VxsgPS8YmM7UNvHHRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f90d83-02be-4e5f-bd0f-929f106630f1/1/LzE27RCZhYClF9lZiryjPZumZZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.224.128.0-145.224.223.255
163.76.128.0/18
Signature Algorithm: sha256WithRSAEncryption
99:87:fe:53:4b:a8:1f:02:0d:ae:28:80:5d:74:7f:7c:0a:8b:
6a:c9:1e:99:72:b4:64:5f:86:bf:10:33:ac:a2:9f:9c:3b:96:
00:b6:c7:44:04:54:08:74:ad:f0:8d:c4:7d:db:72:b0:cf:1b:
a6:70:83:7f:54:2e:a8:08:fb:cd:df:e2:31:ab:d5:6a:67:28:
86:cc:59:2e:3a:43:f7:9c:f8:25:05:9e:3c:e8:3a:80:d7:01:
b2:8d:cd:04:52:d8:06:e5:e6:bf:19:b3:92:e9:f1:7f:75:d0:
8d:1f:dd:4e:93:22:19:83:3b:b3:fb:14:77:01:2e:73:87:86:
3f:a1:e1:d5:69:38:ef:44:0f:f1:7d:c3:67:cd:a9:ef:bd:0b:
d9:25:f5:74:65:8f:fd:97:c9:fa:9d:46:ee:5e:07:97:b4:7a:
fa:9d:e9:6e:7f:cb:d6:9e:ae:e7:77:0f:ae:28:5a:4b:8f:49:
1c:1e:0c:80:18:4a:03:c3:c2:25:21:a3:8f:75:33:a8:e7:56:
b9:65:bb:0b:16:a1:a8:06:f3:97:9a:7b:7c:74:77:9a:44:0d:
fd:82:f1:b9:b5:74:9d:d3:e3:c7:96:ba:65:47:f0:fc:2f:2b:
ac:d7:68:33:63:5b:f8:10:e0:8a:e2:8c:d8:0f:b3:d0:db:3f:
2e:37:48:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:25:42 2025 by rpki-client