Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa
File: TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa (raw, json)
Hash identifier: pnECVJ4MeoU++jvXvp1eJP9csOhoOVkA1NrmjgLij+8=
Subject key identifier: 4C:08:F0:12:46:0B:E4:A3:B4:0D:F8:F3:93:B3:3C:D8:E4:70:39:23
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 019421B1C5C749ACBABC39D3BB902D9CA601
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa
Signing time: Wed 01 Jan 2025 11:48:06 +0000
ROA not before: Wed 01 Jan 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50019
IP address blocks: 45.131.196.0/24 maxlen: 24
45.131.197.0/24 maxlen: 24
45.131.198.0/24 maxlen: 24
45.131.199.0/24 maxlen: 24
185.128.112.0/24 maxlen: 24
185.128.113.0/24 maxlen: 24
185.128.114.0/24 maxlen: 24
185.128.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c5:c7:49:ac:ba:bc:39:d3:bb:90:2d:9c:a6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Jan 1 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c08f012460be4a3b40df8f393b33cd8e4703923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:6c:1e:d0:e7:12:f3:97:fd:9a:56:52:60:
b1:62:50:dc:71:9f:1b:9b:e3:88:8e:5a:9b:a0:85:
6b:70:49:34:b8:16:1a:70:fc:06:24:d3:54:a4:be:
0a:26:84:48:0e:04:a9:be:c2:1b:21:4c:bf:6b:c4:
53:fa:c3:6f:be:a7:1e:54:73:91:7d:fb:ef:23:cd:
3c:ff:79:77:a6:07:8f:05:2a:c4:03:67:15:b9:a1:
d6:75:c2:61:0e:f9:26:f3:8c:e1:ec:b7:6f:19:01:
e3:ea:f6:2b:ad:05:cc:78:78:58:a2:d8:e9:82:35:
2d:d6:93:71:6f:43:b0:2f:2c:55:09:d1:97:4a:3b:
dc:96:0a:87:9a:10:f3:74:07:69:1b:b5:c1:5d:47:
a8:e5:63:0e:c1:79:8d:4c:e5:b0:7f:23:fe:a6:f4:
f5:7d:68:af:14:96:86:e9:44:07:de:c2:1c:15:10:
46:37:93:da:c5:ea:ad:05:14:03:32:a7:19:2d:b3:
a1:cc:65:41:8e:d0:80:1f:7c:36:3f:81:32:f6:81:
58:d4:a6:56:e3:e6:a4:5a:ce:5c:b3:10:07:04:b7:
aa:e5:da:3a:d2:b5:57:ae:cb:af:0d:af:53:0b:77:
8d:f3:d3:41:f9:b6:c1:88:1e:ed:0e:46:3e:8f:0d:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:08:F0:12:46:0B:E4:A3:B4:0D:F8:F3:93:B3:3C:D8:E4:70:39:23
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/TAjwEkYL5KO0Dfjzk7M82ORwOSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.196.0/22
185.128.112.0/22
Signature Algorithm: sha256WithRSAEncryption
12:50:5b:24:3c:9a:7d:22:9a:17:fb:59:8f:e7:8b:3c:0c:ca:
58:73:88:da:5c:eb:3d:fc:a5:2e:b9:04:bf:31:47:b7:86:27:
78:78:1c:4f:70:0b:dc:73:e0:b9:c8:16:20:59:bf:77:80:dc:
eb:ad:2d:c7:fc:d8:71:7c:f3:e5:94:f4:78:f8:4a:a6:53:6e:
92:b7:44:4e:0f:0f:65:fe:f2:67:2e:89:bd:18:91:16:cf:bb:
33:a0:af:63:46:6d:d4:93:30:a4:3c:d0:df:29:f8:e7:ca:4f:
4b:d2:9b:ef:94:06:09:a4:39:84:5b:35:39:61:16:37:e3:d0:
d7:af:0e:b4:3e:8e:61:5c:0c:36:cb:d0:1a:77:89:ad:fe:2b:
0f:62:b4:1a:bd:e8:f4:32:87:7d:84:1b:09:23:8e:45:91:75:
9c:3e:7f:54:4f:07:a5:d0:99:a0:90:74:dd:aa:5c:01:c7:c2:
bf:d4:78:7a:d3:1d:be:8b:d2:10:b7:6a:96:dd:f2:99:9b:e8:
07:fa:0b:d5:5a:b5:d3:fa:f5:97:a8:b2:56:01:62:83:b9:c0:
95:bf:5f:2e:d3:f0:0c:f0:98:f8:4e:34:1b:ca:74:c7:32:45:
f7:6c:70:83:95:8d:7a:e6:98:a6:22:83:ab:2a:f4:62:94:c1:
cc:32:a3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:52 2025 by rpki-client