Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/tfuB02HQtimoQr-DD5osgqIb4Pc.roa
File: tfuB02HQtimoQr-DD5osgqIb4Pc.roa (raw, json)
Hash identifier: ATYEGGuMnO82y/H5Bpf5cxk5trCzNvbXLDdNGdZ+Dow=
Subject key identifier: B5:FB:81:D3:61:D0:B6:29:A8:42:BF:83:0F:9A:2C:82:A2:1B:E0:F7
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 019407720014DBA1285AA0A2556AC3B517C9
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/tfuB02HQtimoQr-DD5osgqIb4Pc.roa
Signing time: Fri 27 Dec 2024 09:28:19 +0000
ROA not before: Fri 27 Dec 2024 09:28:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400992
IP address blocks: 185.232.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:72:00:14:db:a1:28:5a:a0:a2:55:6a:c3:b5:17:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Dec 27 09:28:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5fb81d361d0b629a842bf830f9a2c82a21be0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:b7:62:b2:00:91:1e:02:49:ef:4e:10:86:
58:1e:52:2d:c0:a5:06:1e:5d:ff:76:b8:64:15:06:
c3:b1:79:51:98:f6:3e:6d:08:62:0e:28:32:c3:e0:
27:0e:3e:e3:5c:16:5c:96:a7:d7:c4:ca:31:ad:1c:
63:91:17:95:8c:df:e7:49:a9:d7:9a:51:aa:8f:cd:
cd:bc:df:0b:b9:94:aa:cf:cd:29:32:1d:0c:e0:35:
5f:ef:af:f2:ea:37:92:d9:5f:22:c3:cd:a9:e2:d7:
46:e5:45:53:85:9c:f2:5d:ea:93:bd:2a:9e:57:ad:
8e:6c:1b:bd:1a:88:71:7e:a5:26:28:38:18:19:24:
4f:20:ec:c0:d8:bf:95:41:aa:c6:4a:19:59:54:2e:
2d:53:5b:28:a6:a9:3a:3c:b8:dd:d7:a9:7f:c2:56:
07:33:c0:dc:1b:b8:79:3e:6c:dd:de:86:3f:84:cc:
8e:f2:3e:fb:b1:48:c3:c7:59:41:c6:5e:c3:bf:de:
cf:de:94:65:d0:e8:89:e5:08:df:f0:b8:e1:96:b3:
a7:b9:ff:52:81:d6:9f:3e:dd:e1:53:18:41:ae:6a:
e1:47:f6:e5:24:fe:f3:35:af:aa:34:6f:32:61:a3:
c9:34:7c:97:81:6d:97:d8:b9:bc:d8:a6:f9:f1:8e:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FB:81:D3:61:D0:B6:29:A8:42:BF:83:0F:9A:2C:82:A2:1B:E0:F7
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/tfuB02HQtimoQr-DD5osgqIb4Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.205.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c2:30:cb:21:79:de:d7:0a:7d:41:2d:d2:45:07:02:6d:1d:
7b:3f:5f:d0:8e:64:0b:48:c3:f8:bd:27:4d:29:da:66:20:a7:
f8:3f:63:c4:04:19:1b:2e:1e:c3:cc:43:c3:d3:3f:a4:0c:af:
39:5e:36:17:58:52:27:cd:b8:aa:68:c3:fa:a9:e1:f5:c1:35:
a1:56:53:c7:dc:e8:f2:b4:f7:bc:6b:0a:fd:f4:8b:02:24:32:
f4:63:70:b9:e6:25:f9:d4:b6:e1:ed:71:74:07:27:1c:83:2e:
5a:0d:10:67:17:65:7f:08:17:11:fa:bf:66:4d:15:6b:4a:4d:
d1:f8:c2:83:92:ff:06:b0:cf:33:a9:ae:b7:28:31:27:ed:91:
ea:02:bb:43:03:f7:23:a1:b0:99:07:d5:87:6c:ed:18:f7:f9:
cf:28:87:35:c2:fe:14:77:01:3a:f9:12:d7:ba:74:e8:f9:fc:
c9:a1:1c:f9:5a:36:3b:ae:07:37:e2:c1:dd:26:d2:f2:44:1e:
3e:c8:2e:33:40:3a:7c:ef:8b:99:75:e3:d2:e7:16:ed:6f:33:
96:20:04:3b:f1:09:46:e8:62:89:03:4f:7d:bb:a4:60:be:e6:
bf:a6:79:4a:71:fc:34:f8:a3:c9:b4:8a:34:7b:19:fe:4d:87:
54:13:12:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:38:30 2025 by rpki-client