Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/Tbcx9w57JlajlSr_D5AgzfLOVcY.roa
File: Tbcx9w57JlajlSr_D5AgzfLOVcY.roa (raw, json)
Hash identifier: 9ZMFnkZJalflC1y21xwgngk/wJpk4yIEOnHaqOzi8Nk=
Subject key identifier: 4D:B7:31:F7:0E:7B:26:56:A3:95:2A:FF:0F:90:20:CD:F2:CE:55:C6
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 0195A87CDBF4A2DA04D315F86C1CF997B2E0
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/Tbcx9w57JlajlSr_D5AgzfLOVcY.roa
Signing time: Tue 18 Mar 2025 09:01:49 +0000
ROA not before: Tue 18 Mar 2025 09:01:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 178.236.233.0/24 maxlen: 24
178.236.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a8:7c:db:f4:a2:da:04:d3:15:f8:6c:1c:f9:97:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Mar 18 09:01:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4db731f70e7b2656a3952aff0f9020cdf2ce55c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:03:4f:be:3e:3f:53:f5:79:41:a3:18:62:
6c:f8:34:ba:88:6b:e5:6a:ed:ad:e3:1f:f7:9d:dd:
6f:9f:d8:af:7a:ff:71:e8:eb:4e:ef:ce:5e:80:9c:
b3:56:f3:53:54:44:fd:88:3d:c5:73:ac:8a:1e:13:
72:55:8e:08:ca:8d:11:84:d2:ef:7b:a8:64:4e:fc:
db:a0:3a:45:83:ab:4d:e2:7c:f3:ce:48:e2:1b:06:
d3:09:6f:af:e8:a9:2b:3c:57:8e:39:df:ea:77:31:
63:75:6c:a6:a3:00:fe:ad:da:82:7b:1d:c3:8f:84:
4a:98:11:73:06:63:e8:0e:98:60:08:a9:a8:dd:92:
fb:e3:6d:60:6e:61:f0:94:a5:fb:1e:2d:4b:3d:1b:
23:50:0d:fa:b6:9d:8d:cd:86:8e:75:77:9a:c9:0b:
64:7f:ba:83:52:2b:ac:ff:a9:0b:4d:e3:7c:50:0d:
ce:72:09:79:3b:8c:0f:83:b4:30:52:54:4b:9e:ee:
99:35:b3:5d:0a:f6:b4:97:dd:39:56:d9:17:8e:41:
6a:9a:f6:4c:df:42:c4:76:84:b0:98:a8:18:a7:83:
65:10:bf:98:d2:04:63:01:78:14:0e:3e:a2:13:e8:
84:da:bb:d0:fd:96:a8:22:a7:e1:a8:5d:99:eb:28:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B7:31:F7:0E:7B:26:56:A3:95:2A:FF:0F:90:20:CD:F2:CE:55:C6
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/Tbcx9w57JlajlSr_D5AgzfLOVcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.233.0/24
178.236.237.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e2:e1:b4:74:26:04:03:f8:8b:30:eb:df:44:93:68:e9:80:
be:51:cb:97:6f:d4:f6:73:7b:80:09:26:99:a4:a5:bb:92:7a:
35:ee:64:55:87:31:7d:ed:ba:8e:85:72:0a:5a:ef:d3:52:ae:
ae:c7:cc:c0:79:e8:b6:3b:db:d7:8c:70:b4:4b:0c:0b:e8:98:
0d:84:6d:77:2b:48:2a:08:fa:f4:03:79:37:fb:3a:d3:6b:b5:
ce:b2:7b:da:df:be:7e:57:25:f8:70:f9:5c:3c:04:cf:3f:ce:
4a:aa:36:f0:96:b4:3e:eb:db:90:e0:3a:bd:5c:3c:e4:1f:6b:
cd:db:c5:2a:fc:98:cf:30:61:8c:fc:67:31:59:58:c1:6e:a7:
f3:9c:36:a7:8b:65:19:fe:e0:31:0c:d0:8e:f6:a0:5b:b6:6b:
da:24:0a:76:f2:26:bb:ff:2d:a4:49:00:a5:e8:c0:7e:be:48:
a7:ea:c4:d5:b5:ca:0b:b1:c6:59:ec:5c:83:db:d8:be:35:fb:
a4:5f:65:fb:93:4d:26:be:fe:6c:32:1c:3d:c7:07:81:5b:5e:
10:a7:73:18:e6:79:a9:cc:a9:41:8d:a4:b1:f7:25:f2:8f:af:
ef:a8:11:31:02:14:b4:aa:d6:fc:30:95:d6:2e:0c:c2:1c:d3:
8b:dd:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:15 2025 by rpki-client