Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/TBdRYI4Vp-3SsMereWjuJuGMK6c.roa
File: TBdRYI4Vp-3SsMereWjuJuGMK6c.roa (raw, json)
Hash identifier: bWYcU1CjUZXhUk+i248J8pYxf7A24hSe76RbYqPhQc4=
Subject key identifier: 4C:17:51:60:8E:15:A7:ED:D2:B0:C7:AB:79:68:EE:26:E1:8C:2B:A7
Certificate issuer: /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial: 0194274758875A0105BECA8A28AEC2AD14A1
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/TBdRYI4Vp-3SsMereWjuJuGMK6c.roa
Signing time: Thu 02 Jan 2025 13:49:34 +0000
ROA not before: Thu 02 Jan 2025 13:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 185.239.188.0/24 maxlen: 24
185.239.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:58:87:5a:01:05:be:ca:8a:28:ae:c2:ad:14:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Validity
Not Before: Jan 2 13:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c1751608e15a7edd2b0c7ab7968ee26e18c2ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:11:9b:af:d9:40:fb:1e:6b:af:f4:98:79:
85:2b:4c:63:27:b5:a9:6b:b7:fa:d6:a5:10:ff:54:
85:cf:f0:6b:fd:e2:3e:53:e0:98:e3:73:31:33:62:
79:64:01:e4:f4:42:c0:f1:4a:54:06:77:d3:13:54:
6b:83:b5:96:59:30:f6:fd:9e:fd:83:97:ab:d6:02:
86:fe:16:c7:7e:1c:26:66:fd:1d:30:6d:fc:05:b2:
64:fb:5f:2c:d8:c6:37:79:3d:2d:f5:f5:28:a0:1f:
90:1d:af:c7:33:83:21:e5:19:0e:8b:e1:94:d3:16:
66:f4:aa:43:92:e3:b3:71:9a:48:77:a9:84:5c:d7:
91:99:af:92:83:32:08:fe:a2:b8:f6:92:ef:78:83:
54:38:67:88:ea:81:77:f7:12:8f:16:0f:24:df:9d:
3d:78:90:41:db:0e:74:6a:ef:3f:09:93:ce:9f:6d:
75:9e:99:96:3b:ec:66:08:fe:85:89:6c:65:6c:75:
8c:bf:d9:f0:fd:45:55:02:93:0d:49:dc:32:5b:4e:
b2:62:09:20:de:db:61:e3:44:f3:2d:b6:ed:64:e3:
fd:24:3d:06:1e:91:bb:f2:2c:87:ba:9a:9b:de:ab:
79:e9:e8:bb:77:a1:a8:fd:ec:a7:53:bd:99:57:2f:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:17:51:60:8E:15:A7:ED:D2:B0:C7:AB:79:68:EE:26:E1:8C:2B:A7
X509v3 Authority Key Identifier:
keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/TBdRYI4Vp-3SsMereWjuJuGMK6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.188.0/24
185.239.190.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7c:79:63:7e:9a:72:71:c6:49:ad:c0:f5:f8:60:30:47:48:
25:d7:7d:4e:92:d5:e7:f7:c7:87:c3:6a:74:74:35:88:8d:45:
6c:7a:5a:b3:05:6d:e2:1b:3b:22:d7:ea:24:58:c9:b7:b7:59:
e6:7d:c2:03:9c:a4:3e:4a:66:cc:ba:71:64:a4:e7:84:53:75:
2c:60:39:38:08:5e:39:68:81:e2:78:b8:e7:30:f7:a3:56:f2:
e2:9f:bc:81:24:62:d2:67:f3:ab:eb:75:c9:8e:ff:99:16:f4:
e0:27:b6:28:9c:c9:af:29:c9:1b:54:f1:89:06:c9:7d:ca:7c:
69:90:06:23:f8:f1:2e:e7:ef:5a:62:9b:5f:d2:96:4a:8e:3b:
38:c6:02:02:28:4d:f4:6c:50:4d:9d:c4:8c:18:53:2b:2b:d8:
78:b4:a5:8d:0e:2f:f6:9f:0a:44:b7:db:f5:c4:4c:be:64:b6:
8a:18:75:41:fb:bf:c0:65:32:81:de:0c:d2:a8:1a:8c:1e:b6:
dc:63:dc:92:25:a1:4d:cf:56:5b:62:f8:e2:08:27:a5:53:f1:
d3:f6:0a:2c:8e:d8:27:f9:d9:0b:e2:ef:10:2c:e1:61:05:f8:
28:c0:3d:a7:c6:92:65:cd:a1:a7:52:2a:e2:de:ed:b2:c0:f1:
29:a0:c9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:05:28 2025 by rpki-client