Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/TJDxzTrNcm_JUBQq51eVKAGUb3M.roa
File: TJDxzTrNcm_JUBQq51eVKAGUb3M.roa (raw, json)
Hash identifier: I32RNrgNmMCqgGuFyM+cqOZg4sA0odAi7Q0t2K4n3Vo=
Subject key identifier: 4C:90:F1:CD:3A:CD:72:6F:C9:50:14:2A:E7:57:95:28:01:94:6F:73
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 019425FDBF74485284882D3B13AAAC88B4DC
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/TJDxzTrNcm_JUBQq51eVKAGUb3M.roa
Signing time: Thu 02 Jan 2025 07:49:33 +0000
ROA not before: Thu 02 Jan 2025 07:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 5.56.144.0/20 maxlen: 20
5.179.80.0/20 maxlen: 20
37.49.128.0/20 maxlen: 20
46.32.156.0/22 maxlen: 22
62.12.32.0/20 maxlen: 20
62.12.48.0/21 maxlen: 21
62.116.192.0/19 maxlen: 19
77.233.224.0/19 maxlen: 19
78.153.160.0/19 maxlen: 19
80.88.128.0/20 maxlen: 20
80.243.112.0/20 maxlen: 20
82.192.160.0/19 maxlen: 19
83.136.88.0/21 maxlen: 21
83.151.128.0/18 maxlen: 18
87.116.0.0/18 maxlen: 18
88.212.64.0/18 maxlen: 18
89.221.160.0/20 maxlen: 20
92.62.192.0/20 maxlen: 20
93.176.64.0/18 maxlen: 18
130.185.128.0/20 maxlen: 20
185.20.240.0/22 maxlen: 22
185.67.128.0/22 maxlen: 22
188.120.80.0/21 maxlen: 21
193.105.116.0/24 maxlen: 24
193.105.149.0/24 maxlen: 24
194.182.96.0/21 maxlen: 21
195.93.176.0/23 maxlen: 23
195.93.182.0/23 maxlen: 23
195.140.132.0/22 maxlen: 22
212.60.120.0/21 maxlen: 21
212.98.96.0/24 maxlen: 24
217.74.208.0/20 maxlen: 20
217.116.208.0/20 maxlen: 20
217.195.176.0/20 maxlen: 20
217.195.178.0/24 maxlen: 24
2a02:188::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bf:74:48:52:84:88:2d:3b:13:aa:ac:88:b4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Jan 2 07:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c90f1cd3acd726fc950142ae757952801946f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:fa:80:2e:8a:4f:87:44:d7:7e:60:e1:11:
19:21:d1:75:26:f2:d9:21:c6:e8:0f:10:ea:c1:ee:
63:09:20:b0:ea:db:c0:38:7c:5e:74:6b:23:52:12:
13:03:02:3b:cc:e3:15:70:f9:fa:a4:e2:03:08:d6:
36:aa:3d:66:c9:29:34:e9:56:c2:2d:d9:9b:35:56:
97:29:b0:39:d1:b6:a3:1b:ea:3e:8c:9b:74:4f:b9:
41:00:45:8d:63:7d:37:d0:e3:fd:e1:81:f3:5d:dd:
d9:23:70:46:b7:e7:86:58:19:29:c8:cb:ce:7e:4b:
95:30:96:62:1d:ec:c0:82:d5:2a:0b:ba:b7:df:8e:
e1:10:0e:26:14:3c:c6:c4:20:1a:58:a1:eb:27:c5:
ad:60:6b:3a:fb:42:f1:15:33:88:1e:ca:64:60:42:
cc:ed:1e:b5:02:8d:1d:45:52:94:1e:a0:fb:2c:20:
b3:ba:06:c3:58:4b:ed:96:13:ca:18:b7:53:4c:a7:
f4:c2:61:9e:58:47:60:2c:a0:fa:e3:86:a1:9e:88:
72:65:8b:62:be:26:e9:a1:f2:8c:1b:e8:10:f7:d5:
e4:91:b2:6b:b5:87:22:3a:22:e9:22:ec:80:3e:b4:
af:0c:93:7e:b7:6b:2f:98:30:68:a2:ae:55:fc:e1:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:90:F1:CD:3A:CD:72:6F:C9:50:14:2A:E7:57:95:28:01:94:6F:73
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/TJDxzTrNcm_JUBQq51eVKAGUb3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.144.0/20
5.179.80.0/20
37.49.128.0/20
46.32.156.0/22
62.12.32.0-62.12.55.255
62.116.192.0/19
77.233.224.0/19
78.153.160.0/19
80.88.128.0/20
80.243.112.0/20
82.192.160.0/19
83.136.88.0/21
83.151.128.0/18
87.116.0.0/18
88.212.64.0/18
89.221.160.0/20
92.62.192.0/20
93.176.64.0/18
130.185.128.0/20
185.20.240.0/22
185.67.128.0/22
188.120.80.0/21
193.105.116.0/24
193.105.149.0/24
194.182.96.0/21
195.93.176.0/23
195.93.182.0/23
195.140.132.0/22
212.60.120.0/21
212.98.96.0/24
217.74.208.0/20
217.116.208.0/20
217.195.176.0/20
IPv6:
2a02:188::/29
Signature Algorithm: sha256WithRSAEncryption
5e:88:c4:d6:92:a8:04:23:c4:e6:ae:12:87:01:78:e0:e4:3b:
2d:13:19:d4:05:a5:3b:57:24:b8:2a:4f:23:d2:a9:bc:4a:1e:
a4:10:86:7d:85:39:17:10:5e:07:0d:7e:6a:a4:06:5d:c9:f8:
ef:76:23:69:3a:96:e2:ab:f1:22:5b:ca:ff:dc:33:d3:cc:8c:
68:37:8d:ed:6b:e1:f4:4b:35:e5:76:3e:92:54:06:98:c0:89:
62:3d:6d:f2:fc:1f:76:c6:50:05:ad:3e:11:6c:9b:e3:84:70:
68:a0:82:0a:34:89:7a:9d:97:ba:a8:0f:cf:38:9f:6b:97:91:
e8:36:05:c1:5c:13:6c:4d:e9:19:69:5f:6f:c2:9c:95:6b:54:
c5:a1:03:84:be:cb:37:18:66:70:17:c8:8a:00:d5:f7:6a:c9:
d5:aa:a5:61:e6:ee:8d:0b:cd:6c:65:82:6d:44:07:b4:c6:43:
1c:d8:3e:1e:24:ed:63:21:de:15:13:2b:62:b4:45:eb:a2:b1:
7d:64:d3:bc:e5:37:7e:02:16:5f:42:70:73:ff:c2:95:bf:8d:
d5:c7:08:c6:0a:2b:5c:41:a6:66:d4:a2:15:d3:e2:68:84:5f:
6e:2b:44:96:af:a1:0e:94:f9:21:74:23:c5:a0:e3:46:18:5f:
ef:8f:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:16:05 2025 by rpki-client