Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/TbkTGhjY9ydvYGx595lsQbFuR-U.roa
File: TbkTGhjY9ydvYGx595lsQbFuR-U.roa (raw, json)
Hash identifier: VPcwe25bDmMtg1CdipQP94sNnf5DC3Z6UdoPwm5cICE=
Subject key identifier: 4D:B9:13:1A:18:D8:F7:27:6F:60:6C:79:F7:99:6C:41:B1:6E:47:E5
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 018ACDBD6B3664D0B70085129FF2A497889C
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/TbkTGhjY9ydvYGx595lsQbFuR-U.roa
Signing time: Mon 25 Sep 2023 19:07:37 +0000
ROA not before: Mon 25 Sep 2023 19:07:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49022
IP address blocks: 45.139.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cd:bd:6b:36:64:d0:b7:00:85:12:9f:f2:a4:97:88:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Sep 25 19:07:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4db9131a18d8f7276f606c79f7996c41b16e47e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fe:f1:d4:16:83:1c:4b:98:da:3a:94:83:74:
d1:8b:65:c3:70:5b:c2:d8:98:c5:bc:28:33:ab:ab:
18:06:cf:bf:62:9b:ec:f0:cb:04:f2:01:4d:e5:d6:
95:f3:10:05:78:41:60:b8:96:5b:a8:90:b3:89:2b:
1c:d6:af:9a:8a:b5:f6:2f:ba:72:c2:0f:49:1c:cf:
68:f3:c2:dd:79:14:7d:12:d8:4e:eb:bf:8d:eb:40:
8d:16:67:9c:fa:32:d7:bc:e0:66:aa:0b:ca:8b:45:
cf:66:c4:31:5e:69:23:60:be:46:4d:1a:2d:f2:5f:
17:4c:a3:95:dd:49:99:d4:b5:8d:f0:9e:90:b6:30:
d0:57:8f:97:3f:00:19:1b:a5:e7:7e:2e:26:a4:74:
a2:fb:33:96:14:40:14:48:52:8e:1b:60:d0:9a:e3:
6f:c6:dd:40:7d:5d:5a:af:85:ea:c5:e9:93:4e:4c:
8c:9c:e7:e6:18:06:8e:e4:33:04:23:4c:b8:9b:5b:
36:9e:69:98:0d:73:bb:71:c4:88:83:69:3b:06:66:
24:8d:fa:30:6b:bf:35:bf:c2:29:d4:1a:97:98:fa:
1e:28:b2:22:0c:ed:35:44:81:1f:1b:52:79:f5:9e:
ca:89:d5:a1:77:62:cd:a2:da:8a:56:4c:de:92:04:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B9:13:1A:18:D8:F7:27:6F:60:6C:79:F7:99:6C:41:B1:6E:47:E5
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/TbkTGhjY9ydvYGx595lsQbFuR-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a9:b5:8f:75:c0:e5:af:f5:21:d5:e0:a2:2b:97:b9:0e:46:
7d:5e:ca:98:23:c4:c0:79:49:74:49:45:c7:8d:39:71:38:45:
53:44:61:36:c7:0f:04:44:1e:a8:c3:7b:65:7c:4b:9b:50:8b:
8b:e4:47:99:b1:87:5e:28:90:70:fc:44:be:be:aa:e9:71:4b:
40:c7:33:b2:f0:a6:25:7c:78:8e:13:df:f5:26:52:21:6f:81:
a3:e1:d1:fa:74:19:34:a0:32:20:48:9e:6c:3b:a5:37:40:71:
b2:fd:86:3b:f9:bb:b5:2f:5b:62:1a:7c:c5:44:5a:31:f1:3a:
3a:4a:69:0b:a0:f9:4e:08:99:37:7c:f0:29:0e:e7:d2:66:e8:
bf:2c:56:28:6d:82:e2:f8:0f:3d:77:7c:25:b4:41:dc:68:da:
e5:93:70:82:52:63:ab:de:65:dd:5f:77:d4:2f:10:ad:ac:f9:
c2:a5:a4:ec:2f:aa:a5:c1:ab:9c:06:22:b0:d0:35:34:9c:26:
4b:c2:65:d6:8a:01:e5:71:a3:22:f7:64:3e:75:69:f4:1e:9a:
38:a9:29:0b:4e:f3:a7:ea:0a:63:5b:ab:b3:8b:be:44:2e:ee:
56:4e:25:99:b7:95:a8:4b:60:cb:f6:6b:3c:8b:eb:43:67:eb:
71:2a:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:11 2025 by rpki-client