Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/tVgSZKCpd3ZATUDRMVn8O1JJW1Y.roa
File: tVgSZKCpd3ZATUDRMVn8O1JJW1Y.roa (raw, json)
Hash identifier: sNXwCd4RaR/9p6J0OSMx7+ZuraiFfStaotv4IhWktG4=
Subject key identifier: B5:58:12:64:A0:A9:77:76:40:4D:40:D1:31:59:FC:3B:52:49:5B:56
Certificate issuer: /CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Certificate serial: 01942368EAD466D571AD9CFD958F4C60FEFD
Authority key identifier: A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/tVgSZKCpd3ZATUDRMVn8O1JJW1Y.roa
Signing time: Wed 01 Jan 2025 19:47:45 +0000
ROA not before: Wed 01 Jan 2025 19:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209620
IP address blocks: 193.58.88.0/22 maxlen: 24
193.58.91.0/24 maxlen: 24
194.55.240.0/22 maxlen: 24
2a0c:94c0::/29 maxlen: 48
2a0c:cbc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:ea:d4:66:d5:71:ad:9c:fd:95:8f:4c:60:fe:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a823fe6dad8ad4fdaee6dd6983c1e55cde8482a2
Validity
Not Before: Jan 1 19:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5581264a0a97776404d40d13159fc3b52495b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:db:3d:c1:65:24:cb:71:ce:46:03:a6:19:
56:81:91:49:35:34:cc:88:f4:4b:96:ae:81:47:85:
94:e9:7b:92:da:af:ac:f8:38:8f:0e:c9:af:9e:84:
c8:a6:92:10:bb:55:e8:12:29:e7:57:d6:14:0c:f8:
a9:e0:a9:9b:6e:59:96:70:88:35:0a:31:ad:52:5b:
da:63:86:a7:2b:24:35:0d:65:5a:4a:78:8d:30:c8:
9b:34:c7:85:b1:59:be:2b:1b:4c:b9:8c:8e:4f:79:
5a:56:5f:43:f7:4f:3a:e9:f8:6f:06:65:2c:b0:bc:
2b:57:3a:ef:21:ae:53:a4:da:9f:f3:dc:61:8a:dc:
9e:5b:f6:11:30:70:f3:43:70:ad:03:9e:fd:c5:b9:
c7:be:ca:a7:e1:b3:73:81:1c:5b:bb:bc:4e:48:6a:
03:0d:7e:a1:91:00:62:bc:a1:79:a3:28:f8:e8:88:
cb:6b:61:78:30:3c:32:7b:a6:9c:7e:dd:df:a5:61:
a2:85:f9:94:79:ad:e9:39:4f:0b:39:70:41:00:04:
e7:e1:5a:36:47:f3:70:98:b6:6c:7f:c8:7b:d7:e9:
f1:b4:3d:e5:64:e6:b4:f1:09:1a:13:83:f5:a6:17:
5c:d9:64:69:0c:ad:87:29:07:36:92:23:95:0d:28:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:58:12:64:A0:A9:77:76:40:4D:40:D1:31:59:FC:3B:52:49:5B:56
X509v3 Authority Key Identifier:
keyid:A8:23:FE:6D:AD:8A:D4:FD:AE:E6:DD:69:83:C1:E5:5C:DE:84:82:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCP-ba2K1P2u5t1pg8HlXN6EgqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/tVgSZKCpd3ZATUDRMVn8O1JJW1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/038560-26d6-455d-a8f4-9bfdf2251267/1/qCP-ba2K1P2u5t1pg8HlXN6EgqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.88.0/22
194.55.240.0/22
IPv6:
2a0c:94c0::/29
2a0c:cbc0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:11:48:9c:41:dd:1b:5e:04:d5:c4:66:53:d0:33:90:a4:23:
b2:b3:a0:68:61:b9:b8:bc:1b:97:0b:97:9a:eb:e9:53:d5:14:
68:88:dd:2a:0f:31:8d:19:65:59:f3:fd:0e:38:e6:6d:b8:a3:
9d:47:94:79:b4:06:0e:7d:7f:3e:8b:f6:93:39:97:67:ff:ae:
f6:65:7c:6a:74:07:71:f3:69:2d:1a:e2:bc:4c:53:3c:10:e4:
9d:5b:ff:f9:bf:c6:f1:b8:b0:65:e5:fc:06:44:35:c0:d8:86:
75:3c:ae:5f:0a:8d:b4:2b:ff:76:c7:a7:de:6a:c5:7f:43:b4:
66:e8:50:e3:cd:48:12:83:db:ef:7f:5d:6c:7e:ba:6e:df:2c:
1b:5e:84:2d:67:be:31:5f:af:32:6d:1d:0e:b3:27:dc:ba:af:
09:c6:25:da:ba:bd:ba:90:99:27:97:b1:c8:5b:82:ae:c1:dc:
54:54:2c:82:5c:f4:bd:79:69:2f:9e:64:c3:13:a0:0b:fd:46:
d5:27:e4:04:11:3f:88:67:4c:75:fa:f0:73:70:d1:68:ff:86:
06:65:d7:ea:44:be:b1:11:23:fc:9a:ca:eb:a9:ee:a5:2f:87:
52:3f:6f:fb:58:5e:7f:c6:80:7e:b3:84:fc:8b:4b:54:5f:39:
12:9f:1c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:26 2025 by rpki-client