Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/TtMpw78SmRxgZIGYNEHEXtMRk7M.roa
File: TtMpw78SmRxgZIGYNEHEXtMRk7M.roa (raw, json)
Hash identifier: A34HD6vBs6SuS2D6qkJmN0sK8pKEio3YxA+zTTW9xgA=
Subject key identifier: 4E:D3:29:C3:BF:12:99:1C:60:64:81:98:34:41:C4:5E:D3:11:93:B3
Certificate issuer: /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial: 019424B4035CDA8461EDC073C16C194E44A2
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/TtMpw78SmRxgZIGYNEHEXtMRk7M.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205943
IP address blocks: 185.201.68.0/24 maxlen: 24
185.201.69.0/24 maxlen: 24
185.201.70.0/24 maxlen: 24
2a0a:bf40::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:03:5c:da:84:61:ed:c0:73:c1:6c:19:4e:44:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ed329c3bf12991c606481983441c45ed31193b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:c0:ba:4c:a7:49:43:c9:c4:ea:cc:af:0b:
3d:3f:cc:71:fe:7d:e3:80:1e:b9:5d:92:66:4f:02:
4c:1f:22:e1:d1:08:b6:82:3b:8a:cb:a5:6f:36:81:
6b:87:a2:f4:6b:10:cf:60:d6:65:5e:6f:40:91:81:
b2:d1:1a:57:dc:d2:16:46:b9:1b:73:2a:fa:ad:a0:
8c:5a:d8:1a:52:23:bf:cf:f6:ba:1f:24:6b:05:fe:
27:f8:11:bc:5f:0a:74:fd:c7:fa:47:a5:55:c4:90:
4e:73:3c:1c:9e:56:89:0c:1c:fb:df:82:a7:5d:61:
02:89:27:ec:b0:cc:46:ef:35:c1:a9:dd:f0:1b:25:
1f:5d:5a:f8:fa:bf:2e:b8:ae:4c:14:b4:b2:18:7b:
45:b2:e9:2d:6e:a4:d5:66:a5:43:fd:89:38:5d:4a:
5a:f0:f3:30:76:b2:66:43:0c:11:77:4c:aa:05:41:
d0:63:e1:f0:fc:12:31:58:cb:db:81:e4:f2:7c:89:
0a:45:ae:0d:5a:5e:91:99:5d:54:1c:6a:49:d1:22:
93:26:72:2c:17:da:65:cb:cb:6e:0d:f6:e8:ac:bf:
bb:12:0c:f5:c2:b1:89:f1:d7:04:24:8d:48:55:b2:
b4:9f:41:bd:1f:5b:df:3c:8a:a1:c5:46:3e:cb:55:
1d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D3:29:C3:BF:12:99:1C:60:64:81:98:34:41:C4:5E:D3:11:93:B3
X509v3 Authority Key Identifier:
keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/TtMpw78SmRxgZIGYNEHEXtMRk7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.68.0-185.201.70.255
IPv6:
2a0a:bf40::/36
Signature Algorithm: sha256WithRSAEncryption
1c:7f:7a:88:89:f4:b7:a9:c2:cf:41:71:b0:65:4c:ff:f6:09:
a5:70:1a:50:56:a6:be:3c:39:c7:c3:23:e5:aa:c8:07:ae:1a:
ca:ab:a1:e0:2d:5d:43:59:05:5f:2c:21:06:a9:59:b2:0e:63:
a2:5a:61:12:26:68:b7:6c:21:09:cf:1b:a2:d6:27:70:14:36:
4f:b3:1c:9f:5d:ab:2b:be:d4:2e:5b:46:11:05:d6:04:90:0c:
a8:db:64:bf:4e:0c:b1:da:80:e9:fb:bd:aa:02:3a:38:6e:0c:
96:0f:5e:c2:71:40:bd:55:19:b7:45:07:7b:0e:29:28:62:22:
4d:80:ed:87:82:44:e9:da:92:cc:df:dd:30:e6:ab:d3:75:1e:
8f:35:2f:cb:1e:93:be:3a:f0:ec:2f:56:8b:07:9c:4e:7c:87:
a8:1d:7f:a0:51:d9:6b:8a:e7:db:e7:b9:07:f8:78:64:5e:43:
02:e2:08:fb:e1:ad:b7:e2:d3:a5:de:85:90:2d:17:50:29:be:
8c:18:10:ca:53:ae:e3:4c:44:68:e4:88:0d:c7:54:fe:18:14:
3e:3e:72:07:a0:e9:a6:66:34:18:cc:b6:a4:bd:0c:ad:e5:c0:
9f:60:e1:dd:f7:dd:ad:75:c8:96:4e:83:d9:6f:82:02:b9:10:
2c:94:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:47 2025 by rpki-client