Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa
File: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (raw, json)
Hash identifier: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=
Subject key identifier: B6:CB:53:62:7F:C3:F4:F9:FE:E2:74:65:05:F2:36:50:1F:D6:48:68
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 0194282566AC0411979C759AC0FAD786C424
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa
Signing time: Thu 02 Jan 2025 17:52:07 +0000
ROA not before: Thu 02 Jan 2025 17:52:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49223
IP address blocks: 185.41.22.0/24 maxlen: 24
185.212.250.0/24 maxlen: 24
185.239.26.0/24 maxlen: 24
185.239.27.0/24 maxlen: 24
193.57.44.0/24 maxlen: 24
193.57.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:66:ac:04:11:97:9c:75:9a:c0:fa:d7:86:c4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Jan 2 17:52:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6cb53627fc3f4f9fee2746505f236501fd64868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:61:cb:c3:fa:43:69:98:cf:8c:4e:21:9c:
76:0f:0d:d6:14:f3:81:e7:cc:c6:1a:bf:05:9e:57:
16:1d:bb:f2:d9:37:61:3b:3e:b7:5a:74:78:b8:1a:
21:9b:24:3c:22:81:fe:53:82:e6:6e:c5:52:6e:c4:
c0:b9:f2:64:9f:52:c6:7c:40:e8:81:45:11:98:fc:
d3:d8:41:80:96:a0:65:64:ad:36:d0:85:28:f6:a7:
cd:a7:53:aa:81:04:6a:42:09:79:af:d1:60:95:c9:
5a:8b:4e:8a:b2:65:d9:0b:30:22:21:2e:83:a1:14:
1d:1b:db:6d:b2:3e:b2:44:ac:a1:7f:34:7f:1d:ba:
10:75:91:bf:5b:cf:ed:3e:5b:9f:0e:bf:35:76:1b:
16:04:62:e4:b6:d4:62:45:2f:59:f2:6c:00:99:6e:
01:5c:1d:89:4e:20:69:70:5a:48:85:ce:f1:ba:4a:
fc:61:fe:de:52:20:32:0f:d1:e7:8d:b7:a5:7b:c4:
96:40:15:de:8e:2e:24:c0:24:d7:0a:f8:25:2a:3f:
c9:5a:d5:c6:80:fe:a5:97:f9:07:a5:95:25:2b:54:
e3:46:c1:38:d8:95:71:d0:ee:2d:a5:80:2f:76:81:
ac:5f:1e:df:4c:5d:92:1e:55:1e:0b:79:1b:0a:80:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CB:53:62:7F:C3:F4:F9:FE:E2:74:65:05:F2:36:50:1F:D6:48:68
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.22.0/24
185.212.250.0/24
185.239.26.0/23
193.57.44.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:a2:7a:6a:52:14:22:a5:94:03:bb:bf:51:95:52:68:68:0f:
1a:34:13:b7:04:17:04:64:17:e4:cd:57:81:23:71:ff:a1:1d:
0b:f9:28:52:4d:32:9e:c8:e1:4b:f9:d8:0f:49:14:f3:3d:44:
b3:14:fc:89:5b:15:16:4a:8c:f2:12:a0:e2:e4:f8:1e:c8:d1:
61:4f:ea:75:dd:db:31:ba:ee:52:55:9b:a9:08:fc:25:83:22:
84:49:6b:de:6d:ea:46:dc:73:86:ce:71:82:2b:da:d6:48:55:
40:e7:47:2b:ea:27:9f:b0:85:15:b4:fb:0f:bf:a2:1d:e0:25:
7b:1c:63:e3:d8:e4:d4:2a:f7:ef:45:e8:74:c0:13:3d:38:af:
f2:d4:b6:0b:ab:43:cc:eb:03:50:1e:6e:d8:dd:07:c7:29:ea:
c3:9b:87:cb:fd:58:eb:60:0d:26:f3:30:11:14:aa:7c:11:94:
98:e3:66:70:ad:03:a7:62:af:e0:72:e5:e2:e6:ed:0c:a3:fd:
99:1f:ae:99:a1:ed:95:07:9a:9d:60:3c:74:de:62:da:c6:c4:
2d:01:8c:8b:85:cb:56:c9:b5:45:1e:55:12:80:ec:34:c9:1e:
91:08:ec:10:97:86:72:d1:1f:1d:2f:95:12:65:03:e1:4e:3d:
b6:26:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:47:02 2025 by rpki-client