Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/tSxVJ_3NUU1jpqxYZOCcDO2dwoA.roa
File: tSxVJ_3NUU1jpqxYZOCcDO2dwoA.roa (raw, json)
Hash identifier: cGN7O8hiPwVqOsKMv3QLT1v7c/YknV6OWDN+6dxDZEM=
Subject key identifier: B5:2C:55:27:FD:CD:51:4D:63:A6:AC:58:64:E0:9C:0C:ED:9D:C2:80
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDDAC00C33755EC691EB948A749FCB
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/tSxVJ_3NUU1jpqxYZOCcDO2dwoA.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56382
IP address blocks: 185.133.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:da:c0:0c:33:75:5e:c6:91:eb:94:8a:74:9f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b52c5527fdcd514d63a6ac5864e09c0ced9dc280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3d:3d:b3:ad:fa:73:ee:d3:3d:43:02:a6:30:
fa:a6:a4:06:56:68:af:68:78:80:0e:bd:03:1c:91:
c6:20:85:c6:e6:a3:39:f2:ed:1d:c3:a3:90:a2:2b:
9b:5d:b4:4a:6d:03:ff:c2:c6:06:12:ce:67:31:60:
0c:5f:74:61:8d:44:d9:04:b6:61:ee:87:b6:2e:3e:
d1:41:49:59:c5:66:1f:1e:70:bb:df:4b:d1:d5:70:
03:d6:74:3e:6a:72:9e:27:1b:95:7f:9b:c0:32:8d:
45:9e:b3:23:9e:95:e8:2a:9b:26:7a:06:4e:1c:31:
fa:82:81:8d:b8:f4:72:d9:24:81:39:d4:e3:00:75:
b1:94:43:34:1e:42:e1:fc:49:1d:a2:a5:af:64:5c:
7b:18:25:5a:29:9a:b3:62:01:01:af:98:e7:c9:80:
f3:43:aa:ea:fc:33:4b:38:45:96:1c:6a:a5:f9:1d:
54:6f:95:98:86:a5:84:08:c4:b3:06:de:7e:4e:0a:
fb:8b:46:8c:45:ee:ed:8b:28:bc:10:3d:4b:9c:74:
16:cd:d0:38:32:34:97:ea:0a:eb:52:fe:82:5d:c7:
87:29:ad:03:13:3c:67:20:f8:b0:45:f3:6c:7f:34:
d4:87:75:6f:7e:0a:ec:71:88:86:b2:33:d5:03:9e:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2C:55:27:FD:CD:51:4D:63:A6:AC:58:64:E0:9C:0C:ED:9D:C2:80
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/tSxVJ_3NUU1jpqxYZOCcDO2dwoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.208.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:3a:ad:2f:f0:57:05:e8:ec:61:36:41:98:3a:5e:84:71:01:
48:c8:e4:a2:9d:40:0f:d3:5e:3e:03:fa:ad:10:4f:56:f8:54:
a4:74:da:9f:6d:00:52:b7:68:da:11:65:0c:e6:d5:d4:cc:e3:
4b:2b:c3:49:18:8c:53:58:23:5a:73:61:55:8a:1c:4b:95:fd:
99:a9:ec:b3:ec:bf:7f:f5:ac:76:98:02:a0:c0:c4:45:ea:e4:
05:e2:3b:fc:87:d0:af:94:c4:fb:d2:7e:50:0c:f4:78:91:f0:
3b:2b:bc:74:37:e0:d0:54:95:24:b2:a5:14:8a:65:f1:2c:92:
a1:24:dd:4b:9f:6f:f6:ef:d5:e2:44:75:e7:26:78:ba:62:92:
9c:9b:ea:a6:d1:98:ae:eb:e4:9b:c3:7a:dd:a9:d0:e2:0e:c4:
c8:8c:d7:76:69:25:6b:4a:fb:c1:b8:e2:df:98:86:57:ca:50:
6d:aa:88:29:9b:4c:86:48:38:c0:47:55:c1:3b:01:e0:f8:29:
1e:12:87:16:6d:85:6c:79:4d:56:4f:13:84:0e:3e:32:af:89:
19:c9:ef:f0:3f:38:89:1c:55:80:18:b0:17:40:cc:82:67:0a:
bb:99:d1:9d:5d:f6:7a:ea:79:cb:72:7e:fc:1b:29:51:08:d2:
74:aa:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:09 2025 by rpki-client