Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Tg6VtiC46nYG7UpLrjhkLof0ZDo.roa
File: Tg6VtiC46nYG7UpLrjhkLof0ZDo.roa (raw, json)
Hash identifier: 34WqeTsvUK5D0ulz6sKeNM2Zb6vzh+fv5F2uid+6qfk=
Subject key identifier: 4E:0E:95:B6:20:B8:EA:76:06:ED:4A:4B:AE:38:64:2E:87:F4:64:3A
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD4F5EEF3341CEEA8632B4B8350FB2
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Tg6VtiC46nYG7UpLrjhkLof0ZDo.roa
Signing time: Thu 02 Jan 2025 07:49:05 +0000
ROA not before: Thu 02 Jan 2025 07:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5547
IP address blocks: 195.208.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:4f:5e:ef:33:41:ce:ea:86:32:b4:b8:35:0f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e0e95b620b8ea7606ed4a4bae38642e87f4643a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:86:bf:6a:44:8a:2d:c3:a5:ee:a2:82:33:
7d:f2:2d:fb:2f:ca:60:bd:d8:af:86:15:0d:e5:6a:
e9:3e:fd:eb:45:05:a2:e7:52:f5:57:be:17:9d:c3:
8b:0a:95:81:94:18:2a:19:72:20:62:13:ee:73:64:
a5:8a:56:b0:b7:5d:36:2b:e1:8d:93:b8:f8:5b:11:
28:f3:8a:52:60:ac:04:a4:20:d2:ac:ce:d3:93:22:
45:51:c0:9d:0b:f2:13:ee:7a:bd:f3:5a:fe:19:84:
01:68:53:e6:e5:75:13:e2:85:92:1b:15:0f:0a:75:
ef:d4:c6:89:64:33:ba:8a:c3:b6:a0:40:6a:3b:44:
91:56:8a:d6:83:bc:08:a0:45:62:bc:a7:44:52:1a:
04:65:08:62:a6:1f:ff:9e:96:29:e6:b2:d4:95:ba:
3e:f4:91:89:34:b6:ad:1d:48:1a:7a:28:ac:e2:0b:
35:fa:41:b8:0c:45:90:dd:54:51:93:26:81:06:66:
71:7d:de:04:eb:b6:14:db:fe:a9:b5:45:c4:44:09:
ba:c4:2b:b7:28:8a:ab:bc:0b:76:a4:de:03:4a:9a:
8e:ee:b5:c5:41:a6:9b:d9:18:d9:23:3e:61:7a:54:
44:47:2d:de:53:32:c2:57:fa:24:da:52:0f:bb:d7:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0E:95:B6:20:B8:EA:76:06:ED:4A:4B:AE:38:64:2E:87:F4:64:3A
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Tg6VtiC46nYG7UpLrjhkLof0ZDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.8.0/21
Signature Algorithm: sha256WithRSAEncryption
bf:b0:5b:b9:a2:07:9f:fb:9e:8f:22:5a:b2:56:63:ea:ef:e8:
8f:f5:f9:af:00:4d:0a:ea:d2:a2:6c:18:33:b9:1b:18:15:00:
61:59:5b:d6:c3:95:89:35:2c:7e:41:7b:27:ee:c1:5c:fa:34:
16:95:60:37:f2:19:74:da:27:af:23:ed:58:31:6e:81:4e:a0:
78:9d:46:7f:0a:d3:c6:ac:a4:a1:02:f7:78:08:70:30:f1:3f:
4c:8f:ba:38:68:19:95:e8:26:4b:b1:ea:77:41:7e:40:13:e6:
d9:27:1c:79:c5:a6:ae:72:ad:8b:47:7b:87:31:45:48:c1:93:
b1:b6:a3:2f:be:e6:3f:d5:b3:7d:15:7c:4d:12:f7:6f:20:04:
e3:c5:bf:79:39:48:de:05:18:bb:58:f1:10:4b:82:e8:08:53:
c0:7b:fb:5f:1c:ca:7d:14:0b:56:70:6d:7a:b9:ca:fb:6c:cb:
c9:e0:cd:61:24:70:3e:70:3e:32:a7:40:2c:ac:f3:b9:1d:34:
29:6d:34:81:c4:bf:58:76:88:cc:61:1c:49:1d:ea:e8:94:4d:
84:86:1a:b5:bd:bb:ab:87:45:a4:43:15:9d:6a:51:25:12:c5:
f8:ce:3b:58:38:15:f1:8b:9c:6d:4f:42:27:84:b1:71:d8:e5:
ae:dd:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:57:03 2025 by rpki-client