Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/Tq4Z9dNj7FlJhk_k4_XOWUjFTFk.roa
File: Tq4Z9dNj7FlJhk_k4_XOWUjFTFk.roa (raw, json)
Hash identifier: S6kGdad4sB5m6vq7CPHNRVtisVhC0Syh/MTIUE/wCaE=
Subject key identifier: 4E:AE:19:F5:D3:63:EC:59:49:86:4F:E4:E3:F5:CE:59:48:C5:4C:59
Certificate issuer: /CN=bb376d0c9bef6b098fa63140bcc40d83d76bd549
Certificate serial: 0185714C39907B1B5501A4E52405CB67BFA3
Authority key identifier: BB:37:6D:0C:9B:EF:6B:09:8F:A6:31:40:BC:C4:0D:83:D7:6B:D5:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzdtDJvvawmPpjFAvMQNg9dr1Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/Tq4Z9dNj7FlJhk_k4_XOWUjFTFk.roa
Signing time: Mon 02 Jan 2023 07:04:58 +0000
ROA not before: Mon 02 Jan 2023 07:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42724
IP address blocks: 194.169.120.0/24 maxlen: 24
185.235.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:39:90:7b:1b:55:01:a4:e5:24:05:cb:67:bf:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb376d0c9bef6b098fa63140bcc40d83d76bd549
Validity
Not Before: Jan 2 07:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eae19f5d363ec5949864fe4e3f5ce5948c54c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:85:35:7c:41:e9:00:26:40:2d:7c:70:58:5e:
c7:e5:76:43:56:ab:17:c2:80:5e:d0:88:4c:c9:8a:
d7:ed:25:84:25:f1:d3:23:b2:c7:db:6e:a6:45:a0:
b3:d0:16:41:d4:ed:05:aa:2e:13:50:f7:4f:81:d1:
fc:a9:7b:1d:8a:31:60:53:9d:1a:a8:a5:b4:f2:bc:
18:a3:b1:f5:43:2c:7e:71:c9:4f:d3:dd:74:18:16:
db:3d:9b:60:4b:4d:ee:5b:33:ee:19:ea:a3:51:84:
c2:f0:b3:2c:0d:61:ca:01:70:c2:8f:3c:5e:8e:c1:
71:81:6c:43:9f:57:d1:62:bf:63:96:4a:77:63:b5:
02:67:31:b6:70:12:83:43:f4:9e:f6:dd:90:87:44:
bc:dd:31:c0:60:69:59:e1:8e:0f:6a:71:57:1a:4f:
a7:3e:7e:ff:3e:aa:8e:20:2f:3c:c4:4a:9a:7a:14:
f9:7d:4d:4b:d3:ee:63:0f:8c:25:06:e6:33:ae:9d:
49:bb:b7:c0:b1:c0:41:3d:d0:47:5b:02:d8:f3:69:
80:24:89:d0:00:b3:e1:5d:ea:18:c3:b1:ca:d6:09:
29:25:6a:9e:e1:57:f0:d6:34:17:0b:92:a6:8d:66:
50:73:47:31:65:00:1c:44:43:3e:1b:19:ad:35:f5:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:19:F5:D3:63:EC:59:49:86:4F:E4:E3:F5:CE:59:48:C5:4C:59
X509v3 Authority Key Identifier:
keyid:BB:37:6D:0C:9B:EF:6B:09:8F:A6:31:40:BC:C4:0D:83:D7:6B:D5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzdtDJvvawmPpjFAvMQNg9dr1Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/Tq4Z9dNj7FlJhk_k4_XOWUjFTFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/uzdtDJvvawmPpjFAvMQNg9dr1Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.77.0/24
194.169.120.0/24
Signature Algorithm: sha256WithRSAEncryption
96:8c:2b:85:3d:5f:43:9b:7c:c5:26:87:49:e9:f6:31:b4:d7:
65:70:6b:7d:e8:be:fe:5a:89:60:f4:c5:e9:16:9a:e1:b3:6a:
a5:bc:fe:87:7e:d2:1e:71:82:b2:13:b1:4f:76:fe:12:1d:c0:
71:13:aa:27:02:b0:1e:f3:ae:20:1f:33:dd:02:ac:bd:d0:99:
ba:e4:13:bd:c2:ea:33:48:42:ed:ee:37:66:d8:17:57:53:d1:
31:05:90:c5:52:c6:7f:55:5d:3b:1c:fd:a2:87:25:1e:24:6f:
d6:c9:be:19:a3:3b:39:a4:f7:fd:e1:52:8f:cc:8a:38:ac:15:
b8:f1:8e:38:8f:e2:90:31:53:e4:69:cc:40:f7:e7:15:a1:1b:
cf:91:8a:88:a8:c6:45:4b:b0:2b:91:47:d0:e7:69:64:89:41:
36:c1:06:f2:78:38:db:2b:d2:0e:a1:3a:91:5c:47:66:d9:40:
90:c5:99:52:57:4d:c7:ae:58:02:4d:9f:2a:f2:65:f1:28:a4:
6c:8b:9b:52:54:d3:1f:aa:42:e0:7f:7e:50:89:7a:73:26:a8:
31:92:b0:4b:d5:d0:71:a6:48:5e:27:88:bd:97:89:62:4b:69:
8a:39:52:6f:e7:7c:fa:de:64:5b:9c:59:19:ff:a5:da:8e:07:
be:08:2a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:15:04 2025 by rpki-client