Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/TG-Wp-qUgf6UU7uM2HeblDsoiwE.roa
File: TG-Wp-qUgf6UU7uM2HeblDsoiwE.roa (raw, json)
Hash identifier: LobKxpzBf5Kemnp6cgUBGUN/GuMAdGx7NexKGlW2GAQ=
Subject key identifier: 4C:6F:96:A7:EA:94:81:FE:94:53:BB:8C:D8:77:9B:94:3B:28:8B:01
Certificate issuer: /CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Certificate serial: 01970CB63F0483DF9874D791DCB3099A004E
Authority key identifier: 88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/TG-Wp-qUgf6UU7uM2HeblDsoiwE.roa
Signing time: Mon 26 May 2025 13:09:19 +0000
ROA not before: Mon 26 May 2025 13:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210772
IP address blocks: 185.112.156.0/22 maxlen: 22
2a02:6080::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:b6:3f:04:83:df:98:74:d7:91:dc:b3:09:9a:00:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d7592f411900c067b5e7a219a345abfdbaa40f
Validity
Not Before: May 26 13:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c6f96a7ea9481fe9453bb8cd8779b943b288b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:c9:2b:db:44:61:d3:6b:1f:d6:95:58:c1:
52:c9:c2:e7:4e:f7:a4:b7:16:40:01:0a:86:7e:10:
0a:e7:86:54:25:ed:00:5a:f7:8a:65:ab:c2:74:0e:
f2:a4:5d:9b:06:68:04:81:72:67:9d:6b:9a:1e:22:
42:3e:c1:6e:e6:6f:bc:8b:de:ed:82:7f:db:a4:ec:
18:ad:76:77:fc:2e:ed:c8:a7:12:50:65:54:c0:92:
5d:39:50:0d:88:aa:e5:b8:9d:bb:a3:36:d2:d2:d8:
c4:dd:4b:b0:a7:07:d3:bc:f1:32:35:9c:a6:e8:cb:
64:bb:06:af:f4:b3:ec:8a:74:ff:15:07:f5:56:ca:
bb:4c:45:7b:55:a2:3f:b9:54:48:42:0b:c8:95:c6:
bb:93:b5:97:a8:7e:b9:83:ec:6f:bf:f2:27:44:0a:
82:ef:ad:e5:c8:f0:43:0b:db:78:fc:f3:58:4c:bb:
5e:50:fc:44:46:27:73:5c:f9:9f:45:24:33:4d:91:
c8:5c:69:6a:4b:6b:0a:04:6d:68:2c:70:19:a8:56:
15:9e:d2:e7:a9:65:b7:67:60:84:0b:c8:70:8c:f3:
47:cd:c3:db:6a:80:5f:b7:f6:05:0f:de:06:7c:ad:
71:be:f5:b6:42:36:8b:5c:46:9a:0b:56:35:e5:b5:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6F:96:A7:EA:94:81:FE:94:53:BB:8C:D8:77:9B:94:3B:28:8B:01
X509v3 Authority Key Identifier:
keyid:88:D7:59:2F:41:19:00:C0:67:B5:E7:A2:19:A3:45:AB:FD:BA:A4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNdZL0EZAMBnteeiGaNFq_26pA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/TG-Wp-qUgf6UU7uM2HeblDsoiwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/88b5c3-341c-4ea9-a948-6e8e9d52dd48/1/iNdZL0EZAMBnteeiGaNFq_26pA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.156.0/22
IPv6:
2a02:6080::/32
Signature Algorithm: sha256WithRSAEncryption
87:f6:b0:79:48:b3:1d:ed:ad:90:be:ac:8a:ee:91:e3:e5:87:
60:e3:ca:0b:44:1f:00:e8:1e:09:ad:4d:16:04:18:29:64:b2:
58:f7:b2:a0:d0:03:7a:93:de:5f:24:91:9f:88:17:76:63:8f:
53:6b:c2:8c:c2:ba:0a:b7:4e:1c:07:19:f7:4e:8a:c5:ca:4d:
26:47:de:99:c0:da:ad:84:72:94:36:4b:c9:03:a9:d6:e1:31:
41:0e:c5:f2:84:74:80:d2:62:11:49:34:7f:52:92:7f:83:0f:
17:1c:c7:9f:63:f2:21:32:fa:66:d4:7c:6a:50:21:37:a7:07:
b3:c8:a7:ae:70:e0:1e:1d:9e:6e:f2:63:94:a3:d7:04:e3:e0:
48:0d:22:b8:65:25:90:fb:b5:5d:e2:10:89:c9:eb:6b:39:d6:
4d:88:be:18:91:0a:eb:5f:fe:df:f5:25:e3:85:8b:f3:bb:f4:
4b:6f:87:5b:ab:6f:60:35:3f:74:d6:9e:03:51:9f:99:27:89:
db:a4:7c:7b:67:5a:58:4f:95:bb:2c:39:77:d5:36:6b:30:9b:
5c:75:62:f8:54:c4:b3:cc:75:8b:a8:49:9c:17:1c:2b:4c:78:
7f:92:b8:8a:83:f1:44:b0:35:18:3a:5c:82:43:76:23:ca:ab:
92:b3:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:14:28 2025 by rpki-client