Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/TV69kqHjyeIs6SyKtJS7y7vqsMA.roa
File: TV69kqHjyeIs6SyKtJS7y7vqsMA.roa (raw, json)
Hash identifier: j8rtwZUvSwiOl5RpVQQncmBLRe+d+je/6YGxxoYbrG4=
Subject key identifier: 4D:5E:BD:92:A1:E3:C9:E2:2C:E9:2C:8A:B4:94:BB:CB:BB:EA:B0:C0
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0195494E8EE2BBE7D60A30C5B236E12C79DC
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/TV69kqHjyeIs6SyKtJS7y7vqsMA.roa
Signing time: Thu 27 Feb 2025 21:27:19 +0000
ROA not before: Thu 27 Feb 2025 21:27:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50053
IP address blocks: 5.178.3.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:49:4e:8e:e2:bb:e7:d6:0a:30:c5:b2:36:e1:2c:79:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 27 21:27:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d5ebd92a1e3c9e22ce92c8ab494bbcbbbeab0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:28:ba:95:6d:ae:ce:4f:c9:b8:20:84:15:3b:
36:20:5f:4b:aa:7a:bc:9b:78:65:b2:96:f0:d2:24:
68:5e:38:7d:48:ef:8d:bb:2e:b3:fd:5b:c5:63:c7:
78:ea:27:f0:42:8b:b0:6c:95:3e:22:64:80:7d:ac:
12:6f:a0:a8:ea:f0:c5:7f:1d:06:e0:36:67:8e:3f:
b7:01:a1:87:de:16:2e:fa:4b:04:25:45:a6:12:41:
00:36:0f:08:84:19:f0:34:35:41:d0:07:1f:74:f0:
04:1f:22:f4:42:77:e3:4a:16:f5:7b:77:f1:9b:0e:
9b:82:a4:95:ef:d0:2d:05:ea:fb:fd:84:a6:f2:90:
1b:0e:43:b9:ae:bf:22:f7:a1:ce:49:92:f3:0b:35:
69:ab:d5:4a:1b:d2:26:bb:04:d1:15:b9:a1:72:8c:
b7:16:d0:7d:dc:fb:84:8e:ec:ee:c9:09:d4:28:41:
ea:46:bf:10:74:f4:25:3f:b4:20:40:1d:34:b9:cc:
cc:1d:14:04:5d:37:25:8c:e5:cd:d9:af:f2:2c:a5:
c1:ac:fa:e3:78:13:7b:c1:d9:63:b5:08:b8:3f:53:
dd:4b:d7:9f:89:64:39:3e:b4:4a:f6:94:45:45:9e:
bc:6a:c9:55:52:77:a6:34:43:bf:a0:50:e0:57:2b:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5E:BD:92:A1:E3:C9:E2:2C:E9:2C:8A:B4:94:BB:CB:BB:EA:B0:C0
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/TV69kqHjyeIs6SyKtJS7y7vqsMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.3.0/24
46.23.96.0/24
46.23.98.0/24
109.205.212.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f7:2c:fc:67:33:31:1f:d2:ce:73:9e:e3:d6:f2:06:8a:bf:
50:23:4b:b0:69:9e:24:d8:ed:2b:ce:76:19:01:59:49:d9:43:
d2:46:93:85:18:30:54:2a:06:4a:da:a2:6b:c0:d1:27:e0:85:
3c:91:4b:81:48:1b:3e:53:16:b8:89:b8:bc:7e:00:c6:79:90:
0c:9a:bf:20:55:d3:55:03:70:51:ee:a6:5a:ca:2a:02:fa:15:
46:c9:8e:07:04:79:97:c7:15:84:f7:cb:0e:d7:e7:45:a0:fa:
0a:7b:a5:e6:89:a8:15:f2:b7:97:f8:13:ea:1e:7a:4a:6a:96:
8b:f5:c1:cd:d8:76:15:a8:c3:66:f8:97:97:0b:17:9c:4c:1f:
b4:46:c3:8a:95:cf:08:5b:05:49:d9:19:39:0a:3e:58:ff:57:
7e:7a:41:ab:09:70:28:fb:d4:f8:9d:02:fb:f2:3e:0e:93:97:
4d:fb:b9:22:77:1c:98:f7:b0:ed:a6:a8:c0:ac:ce:fe:0a:23:
9a:2e:ff:9c:6b:94:4d:43:9f:19:30:b7:65:3a:98:6f:97:1d:
7c:4f:54:d8:68:46:5b:90:45:01:6d:01:d8:de:f4:ad:43:e9:
d6:01:1a:dc:09:42:cf:51:f4:f6:9e:42:22:99:3c:bd:9e:bd:
cb:bd:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:32 2025 by rpki-client