Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/TbP72HU__x5-xpUX6PI_i9iyDaM.roa
File: TbP72HU__x5-xpUX6PI_i9iyDaM.roa (raw, json)
Hash identifier: FLkmCrV+1GGkGMAjoDFB0RSF/lM4teoeIsYHwGZQivI=
Subject key identifier: 4D:B3:FB:D8:75:3F:FF:1E:7E:C6:95:17:E8:F2:3F:8B:D8:B2:0D:A3
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 01942445477349A8CAEE435883A1FAE64D3B
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/TbP72HU__x5-xpUX6PI_i9iyDaM.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3225
IP address blocks: 185.62.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:47:73:49:a8:ca:ee:43:58:83:a1:fa:e6:4d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4db3fbd8753fff1e7ec69517e8f23f8bd8b20da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:c7:bd:aa:3d:e4:01:a3:1e:b4:3e:d6:8e:
a8:93:1d:32:01:d9:db:41:29:22:b9:cf:b0:bc:c4:
ff:42:54:8e:12:05:79:60:9a:af:60:6c:e1:8d:08:
30:9c:a7:d0:b3:c1:c0:45:2a:15:79:39:de:09:d7:
f7:58:53:ab:24:d8:66:86:96:90:25:c3:71:79:e8:
18:df:7b:30:9b:c2:d1:8a:6e:14:8f:66:22:55:3f:
73:a7:b6:fb:15:0d:8a:c4:5c:35:b2:c8:f1:9e:86:
e4:4b:8f:9e:a2:24:49:ec:31:0e:42:61:04:45:50:
88:5f:0e:3a:79:15:1b:0d:0a:07:cb:8b:f8:00:3e:
a6:08:e5:f4:1b:0b:33:5e:88:1c:ba:96:a4:c6:3d:
94:2b:aa:de:dd:40:f5:e5:aa:05:c4:35:c7:21:ce:
1a:bb:34:71:f7:db:94:e7:34:f0:23:f4:aa:f3:5e:
0e:8b:4c:4d:0f:70:e4:6a:f0:4e:d9:b8:a0:e8:01:
10:02:24:a5:1e:99:48:29:73:ad:5e:23:21:f4:94:
1c:ac:c1:2c:cc:15:94:80:6e:88:96:40:b8:10:00:
71:b4:4f:a4:3c:cf:38:94:17:e8:69:0d:27:71:ac:
6c:be:47:cd:2a:c1:47:90:70:6d:62:45:b6:3f:a0:
6f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B3:FB:D8:75:3F:FF:1E:7E:C6:95:17:E8:F2:3F:8B:D8:B2:0D:A3
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/TbP72HU__x5-xpUX6PI_i9iyDaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.230.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a9:45:13:bb:4c:15:0f:74:17:0c:a1:62:99:86:96:70:06:
ad:91:e0:f2:77:7e:a7:7d:d2:04:1f:04:4c:22:da:62:cf:4e:
e9:b9:85:a6:a0:87:eb:28:8b:d2:18:18:da:06:e6:c4:2d:79:
06:3d:88:0e:5d:d1:30:0a:38:79:e3:84:67:37:e3:75:63:2d:
93:d6:57:7d:b2:87:ee:da:2d:11:4e:a4:c3:13:02:c5:b9:63:
3e:2d:b9:4f:6b:e8:8d:49:7a:93:6f:1e:df:1f:e7:1d:15:9e:
6f:99:b4:20:b1:95:25:96:b2:fc:02:02:d7:29:28:4d:4b:4c:
07:89:88:5a:3d:1a:e1:f5:9c:63:e4:c2:87:25:2a:26:fa:23:
ed:ed:5b:e3:2f:1c:09:db:7f:9b:77:31:c2:53:ed:49:92:11:
73:23:92:68:8d:29:83:4f:60:90:48:d1:57:db:a0:77:7b:02:
67:c2:24:52:48:45:24:bf:8f:9c:48:d5:bc:9c:c0:10:ab:b3:
63:44:75:68:4a:86:f3:f5:2c:71:f2:5e:85:62:89:a6:33:cb:
69:77:c7:e2:f3:3a:34:2b:6e:eb:2c:a1:53:d7:06:48:f9:61:
4d:3a:6a:10:85:0a:8f:30:ad:fc:17:19:cb:8a:18:c4:b0:be:
27:53:27:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:31 2025 by rpki-client