Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa
File: Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa (raw, json)
Hash identifier: EMlouII+tVGp47ymDY78sfeCzz5ozn1bYR3C76/DHNQ=
Subject key identifier: 4E:EF:9E:2E:F4:B8:06:36:3A:B0:B6:E3:29:C9:42:B8:73:0D:73:21
Certificate issuer: /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial: 019425204710382DDC08D4718DD809422189
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa
Signing time: Thu 02 Jan 2025 03:47:39 +0000
ROA not before: Thu 02 Jan 2025 03:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13008
IP address blocks: 195.72.132.0/24 maxlen: 24
195.72.133.0/24 maxlen: 24
195.72.134.0/24 maxlen: 24
195.72.135.0/24 maxlen: 24
2001:67c:404::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:47:10:38:2d:dc:08:d4:71:8d:d8:09:42:21:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Validity
Not Before: Jan 2 03:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4eef9e2ef4b806363ab0b6e329c942b8730d7321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:1a:0c:67:ab:5d:7a:14:bb:70:d7:ab:26:
41:64:33:b9:98:cc:e4:56:4e:42:d5:db:65:e2:ce:
ba:0e:e4:5f:08:d0:fc:c5:78:a0:ad:e2:6a:9d:3d:
70:e9:a4:0b:5e:bd:3e:0e:f6:53:88:97:17:3a:e9:
91:69:90:bb:9d:25:7f:cd:97:34:67:61:3e:90:59:
57:88:b9:86:bb:9d:b3:a5:32:a6:90:d9:dd:a6:d8:
22:20:1d:34:47:6e:6f:9e:ec:19:f2:e8:d1:3a:7e:
4b:2d:ca:4d:fd:ac:ed:a5:65:73:10:b1:84:02:9f:
0d:08:5d:a4:e4:00:b6:e7:bb:57:14:c6:c6:a3:39:
3f:78:e8:9e:d6:2f:91:bd:48:6d:6b:1c:72:52:9f:
24:d2:26:c3:9b:24:a0:a6:ca:3e:18:0c:b0:75:e3:
b8:28:10:e1:2b:48:2b:19:1d:0a:2a:4f:31:ff:d7:
91:fe:3e:af:e8:85:02:ce:ce:c8:e6:96:78:f5:65:
37:fb:2d:7c:8a:c4:10:ca:48:86:92:41:06:15:67:
02:7b:65:ac:61:72:1a:da:03:3a:9f:77:3b:61:ba:
d1:25:40:06:08:81:cf:26:06:05:59:02:29:0a:28:
89:ee:33:2b:1b:db:84:b4:5c:2c:9d:45:fe:33:3d:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EF:9E:2E:F4:B8:06:36:3A:B0:B6:E3:29:C9:42:B8:73:0D:73:21
X509v3 Authority Key Identifier:
keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/Tu-eLvS4BjY6sLbjKclCuHMNcyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.132.0/22
IPv6:
2001:67c:404::/48
Signature Algorithm: sha256WithRSAEncryption
7c:fd:65:95:ec:70:5b:4f:70:aa:09:72:a6:b1:a9:b7:7a:bd:
e9:81:ad:3f:f3:cf:17:80:bd:9d:dd:a5:74:f3:e7:a5:f7:41:
05:c1:57:87:9c:ca:04:89:40:c1:ae:60:89:f2:a7:8c:77:21:
ba:d1:74:65:25:74:27:6a:0f:bb:b8:3b:45:14:e5:41:4c:f5:
65:f1:de:6a:67:09:1d:fa:ba:f7:c6:8a:34:f8:c9:5b:73:95:
f8:64:0c:2d:b2:b8:99:0b:0c:4e:66:88:08:5c:f6:6a:06:1e:
d3:3c:cc:24:5a:a6:3c:95:17:22:5d:90:fb:04:47:16:72:05:
6e:f2:54:df:be:1b:89:54:e2:a9:33:74:d9:1b:6d:d2:03:85:
22:f9:f5:a7:8e:cc:98:ec:0a:dc:9a:40:e8:e0:c8:95:2f:9a:
c7:ac:af:a1:04:6d:2a:40:07:00:3e:7a:be:4d:47:df:b6:b2:
a6:12:df:c3:8b:9c:91:9f:f0:cc:c7:1f:1d:a8:bc:8a:01:04:
52:52:36:62:c9:42:be:fb:7f:36:db:33:4e:50:33:04:15:82:
42:bf:f2:2f:ad:0a:7e:c8:f9:38:ee:6f:56:dc:b6:d6:9e:c4:
3e:79:d0:7f:f8:1c:8a:35:02:14:e6:1a:fb:42:32:8f:07:f3:
6e:dd:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:30 2025 by rpki-client