Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/tpqvdlW8wuSttlFQd80uk4F5YQY.roa
File: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (raw, json)
Hash identifier: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=
Subject key identifier: B6:9A:AF:76:55:BC:C2:E4:AD:B6:51:50:77:CD:2E:93:81:79:61:06
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 01941F8C7FEEA6B064B6269594E368045594
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/tpqvdlW8wuSttlFQd80uk4F5YQY.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60849
IP address blocks: 185.27.116.0/22 maxlen: 22
185.27.116.0/24 maxlen: 24
185.27.117.0/24 maxlen: 24
185.27.118.0/24 maxlen: 24
185.27.119.0/24 maxlen: 24
2a04:2ec0::/29 maxlen: 29
2a04:2ec0::/32 maxlen: 32
2a04:2ec1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7f:ee:a6:b0:64:b6:26:95:94:e3:68:04:55:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b69aaf7655bcc2e4adb6515077cd2e9381796106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:38:99:11:2f:bb:11:46:91:f6:4a:44:fe:fa:
a3:49:55:db:87:39:57:f0:ec:47:cb:16:11:a9:a7:
70:d7:65:29:5a:89:7c:71:b9:91:25:38:ad:50:bb:
90:49:bf:53:9c:f3:60:a1:a7:44:2a:ce:bb:19:38:
d4:1d:ee:8d:e4:72:56:52:ba:88:33:40:c9:53:64:
36:7c:8b:8e:87:bd:78:1d:d7:5e:07:27:c8:05:33:
ca:3b:31:81:62:58:e0:ba:3c:93:5f:c1:82:ec:2a:
4a:d7:e1:ea:06:91:54:bc:a3:57:64:49:8b:1a:4d:
09:c0:49:0d:44:39:3e:2d:20:f0:7a:f0:97:9d:4b:
8b:49:3c:ab:1a:4d:84:e0:28:10:2f:85:e5:45:4f:
cd:64:19:7e:dc:03:ce:91:1d:ec:1f:8b:24:a5:f8:
12:df:d3:bc:f1:b2:9a:b8:6e:2a:06:1e:0f:56:ac:
27:cd:c4:75:2a:86:4f:24:4f:35:48:3d:77:45:b8:
dd:95:c9:03:4b:02:37:4f:48:93:e2:39:f0:eb:40:
02:ef:61:eb:63:49:1d:ae:4d:ab:c2:11:1e:e0:2a:
d4:e9:69:0f:31:6b:0e:f5:b1:5f:3d:07:0f:be:47:
72:77:34:00:65:1e:0a:d6:3b:26:07:c9:70:c0:48:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9A:AF:76:55:BC:C2:E4:AD:B6:51:50:77:CD:2E:93:81:79:61:06
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/tpqvdlW8wuSttlFQd80uk4F5YQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.116.0/22
IPv6:
2a04:2ec0::/29
Signature Algorithm: sha256WithRSAEncryption
6e:f9:e4:ae:b1:60:be:7f:fc:6b:82:79:a9:56:70:53:2c:a4:
2a:ae:4c:d6:b6:0e:96:27:da:a3:e7:b9:85:15:d3:fb:62:e6:
3d:d0:6f:f4:a7:ae:25:35:42:cb:5f:3c:fe:c0:a7:a8:97:50:
4c:fd:30:42:33:7d:f9:a5:c4:db:f0:c2:33:da:7f:69:c1:92:
64:d2:d4:24:a5:66:a7:1c:43:31:52:e5:94:c1:69:62:0e:fa:
e6:ef:f5:74:c2:e0:56:6a:7b:f6:fd:cc:73:cc:4c:25:89:0e:
4a:d1:e1:61:13:a1:db:98:e5:ab:48:1b:3c:8f:d0:29:96:33:
d1:2c:02:19:4d:dd:3e:88:55:89:00:d2:fd:46:da:a6:3c:0e:
af:5e:eb:fc:8a:60:9b:98:a8:1a:89:ff:15:36:9a:27:b3:7c:
d4:79:90:65:d0:b1:8b:a1:69:63:f7:36:7a:48:0f:45:8a:53:
eb:95:84:e3:ce:10:9b:9f:17:44:88:16:73:3b:e7:37:d8:33:
cf:8f:04:30:53:ea:f7:64:e5:7b:8d:c3:90:34:3f:81:f9:34:
96:18:a8:05:42:d1:4a:0f:89:1e:08:78:d2:f3:8a:4f:06:43:
21:23:a3:13:4c:97:0c:95:1f:84:48:2a:6e:92:2a:da:dc:4e:
ed:39:d1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:25 2025 by rpki-client