Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/__TjvsyVvPmib-81OPkONkSc2TU.roa
File: __TjvsyVvPmib-81OPkONkSc2TU.roa (raw, json)
Hash identifier: dbZzWIHzEQMnK8WSDv/NtDIwz0TAz+VHnJMEh9u7RCQ=
Subject key identifier: FF:F4:E3:BE:CC:95:BC:F9:A2:6F:EF:35:38:F9:0E:36:44:9C:D9:35
Certificate issuer: /CN=2b5dcecf19dba752092bbc3d279ac1cc4f1e3637
Certificate serial: 01942748068C8ABC8C1BC5DE0F6A7EBE2938
Authority key identifier: 2B:5D:CE:CF:19:DB:A7:52:09:2B:BC:3D:27:9A:C1:CC:4F:1E:36:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K13Ozxnbp1IJK7w9J5rBzE8eNjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/__TjvsyVvPmib-81OPkONkSc2TU.roa
Signing time: Thu 02 Jan 2025 13:50:19 +0000
ROA not before: Thu 02 Jan 2025 13:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50407
IP address blocks: 193.105.17.0/24 maxlen: 24
195.191.68.0/23 maxlen: 23
2001:67c:2e18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:06:8c:8a:bc:8c:1b:c5:de:0f:6a:7e:be:29:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5dcecf19dba752092bbc3d279ac1cc4f1e3637
Validity
Not Before: Jan 2 13:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fff4e3becc95bcf9a26fef3538f90e36449cd935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:d0:c5:9d:2d:4e:9f:73:03:d1:0a:2d:f0:
6b:69:f9:4f:e5:6b:28:87:09:43:1f:cb:e4:4e:4f:
93:1a:be:f8:81:0e:9a:cf:dd:55:63:ad:a6:7f:4a:
6a:c9:52:37:f3:6e:e1:6a:1a:f9:b7:d9:be:86:6b:
3e:69:73:13:d3:b8:34:18:6b:bc:e0:4e:9e:0d:6f:
f6:50:c0:f6:6f:04:67:bf:94:a0:6e:5f:d0:c8:77:
21:e8:7f:00:c5:6b:89:96:66:52:77:d2:a2:f1:3e:
7c:23:ea:52:ab:4a:1a:1f:48:66:c2:b9:0e:e1:29:
01:65:5a:8e:56:da:ce:73:f2:c2:f2:ad:30:84:6e:
0c:03:93:72:58:98:18:98:8e:08:b9:51:3f:bf:6b:
4e:27:33:61:fd:f9:13:76:c8:05:40:5a:5b:37:cf:
d7:67:bf:e3:cd:e8:ef:82:eb:d5:bf:d7:e3:24:3e:
45:4e:e4:41:56:54:20:4e:ee:d7:c3:68:56:7a:5b:
0e:e4:45:61:bc:4b:e4:de:7c:3d:64:1f:c0:b3:ee:
74:07:95:c0:2a:e6:8f:d0:64:0c:99:4a:6f:e8:89:
ea:d3:68:f6:7e:f0:04:63:54:44:92:fb:1a:32:aa:
87:d6:a6:06:8c:5d:74:89:7c:aa:a0:d3:5d:52:18:
73:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F4:E3:BE:CC:95:BC:F9:A2:6F:EF:35:38:F9:0E:36:44:9C:D9:35
X509v3 Authority Key Identifier:
keyid:2B:5D:CE:CF:19:DB:A7:52:09:2B:BC:3D:27:9A:C1:CC:4F:1E:36:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K13Ozxnbp1IJK7w9J5rBzE8eNjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/__TjvsyVvPmib-81OPkONkSc2TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/888208-c77f-45d4-baee-717a4e00f859/1/K13Ozxnbp1IJK7w9J5rBzE8eNjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.17.0/24
195.191.68.0/23
IPv6:
2001:67c:2e18::/48
Signature Algorithm: sha256WithRSAEncryption
54:d0:62:1e:b9:6b:11:84:70:71:94:21:e1:76:f0:41:f6:69:
38:60:87:ef:e9:16:ed:23:4c:3a:4f:a9:e1:ab:84:d7:13:a7:
48:63:cf:60:0b:be:25:33:72:3d:70:9d:80:5c:e8:9f:cb:fd:
08:3d:70:a4:59:47:2b:26:53:4f:f3:e4:17:42:03:bb:89:aa:
e7:8a:85:f2:9a:b3:d7:e6:a8:fc:f3:b6:96:4e:9e:7c:bb:49:
47:f2:ef:72:46:62:ad:83:a2:c0:fd:83:a5:50:95:64:10:48:
4b:54:f9:3f:06:12:9b:3f:f0:af:87:4d:02:65:e1:81:05:7a:
4c:09:98:0f:ea:67:54:66:4b:f5:69:bd:26:0f:55:5c:d9:0d:
99:a9:7d:2b:a0:57:04:c3:b6:0c:88:c7:e7:e4:76:b6:80:34:
39:82:43:9b:a6:ff:65:e7:41:a8:b0:40:45:38:5a:fd:49:a2:
07:9e:5a:48:39:8b:2e:92:11:d3:55:68:77:5b:aa:b7:4c:12:
37:0f:cc:68:42:a4:15:33:66:40:27:b9:d9:40:e8:8d:df:22:
05:ad:e4:45:8a:a0:f2:e5:eb:6f:f7:f5:44:a7:7e:3e:19:a1:
12:f9:40:b1:ed:3b:64:1d:d4:c7:9c:5c:8a:1a:43:19:06:5b:
85:93:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:19 2025 by rpki-client