Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/tlIKbz1V8UXsvEu0ibiB0w5ibCk.roa
File: tlIKbz1V8UXsvEu0ibiB0w5ibCk.roa (raw, json)
Hash identifier: /TM/jP7GUhWFV9jaWV2wl5fbT4nnV1fM8WvoCBtZe94=
Subject key identifier: B6:52:0A:6F:3D:55:F1:45:EC:BC:4B:B4:89:B8:81:D3:0E:62:6C:29
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 0194258F03707A46B93F71ACFA2B4E036AF9
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/tlIKbz1V8UXsvEu0ibiB0w5ibCk.roa
Signing time: Thu 02 Jan 2025 05:48:37 +0000
ROA not before: Thu 02 Jan 2025 05:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 185.251.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:03:70:7a:46:b9:3f:71:ac:fa:2b:4e:03:6a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Jan 2 05:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6520a6f3d55f145ecbc4bb489b881d30e626c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3e:72:4b:63:fb:fe:b6:12:c1:e3:05:5a:44:
c9:21:e8:25:ac:6a:89:0c:6f:34:26:1e:95:ab:0c:
9b:a2:8a:fc:fb:92:1b:6d:81:6b:32:df:a8:35:c7:
d1:aa:e1:76:36:2f:33:24:8b:8e:f6:5c:30:a6:81:
db:07:58:6a:1c:6b:00:a1:86:68:37:d8:47:04:0f:
bd:70:17:18:59:32:3c:48:c1:a4:6d:55:1f:67:3a:
3c:15:e8:34:0b:af:2c:e1:2b:6f:7b:68:8a:c4:fb:
05:4a:14:09:fd:ed:29:9d:40:d1:20:f6:9d:dc:90:
4c:e9:9c:b2:e1:ec:9d:5d:fd:cb:55:7e:77:76:93:
6f:1f:77:0e:f1:6b:29:1f:87:55:b9:38:a2:e0:d3:
95:83:03:d8:ba:22:2a:e4:b1:fc:82:96:35:51:25:
4b:b5:12:91:c9:21:a9:b9:7c:83:ec:cb:7d:a5:0e:
c3:ce:0d:24:a3:07:eb:ad:2e:48:39:a7:d6:69:a2:
45:8d:f6:91:86:61:a0:7a:53:ba:6f:37:5a:28:03:
66:b2:7b:5b:5e:0f:c6:08:ca:dd:e5:79:a3:b9:58:
32:6e:51:ca:75:95:bc:6b:ec:fc:7f:a2:f9:68:a4:
d6:c6:b9:37:d0:43:29:da:79:ae:8d:e6:b1:77:a3:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:52:0A:6F:3D:55:F1:45:EC:BC:4B:B4:89:B8:81:D3:0E:62:6C:29
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/tlIKbz1V8UXsvEu0ibiB0w5ibCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.21.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f6:84:3b:76:cd:04:6c:4e:d2:50:04:47:23:60:24:b9:86:
71:ab:ab:68:70:c0:c0:1a:a0:7f:62:45:a5:69:3e:66:b9:72:
1b:e1:3e:62:2c:0a:03:68:c5:01:7e:a2:67:28:38:2b:89:d4:
ae:8c:12:0c:5c:0d:9e:f3:d0:42:c1:fd:74:6e:21:54:2d:0c:
4b:a5:7b:5c:84:2a:03:3e:fc:e9:e2:f6:3e:90:6b:0e:57:5c:
14:39:af:09:32:93:b8:90:c1:0f:24:67:61:56:ee:74:60:c7:
f6:e2:8e:76:1f:fc:ca:eb:3f:2a:08:ad:d0:24:06:cc:0b:47:
ad:fb:38:05:07:1a:cf:2b:1d:ee:77:da:02:1b:e8:70:53:05:
be:4b:d0:08:ab:86:43:32:fd:a0:8c:00:0b:d1:18:dc:dc:d1:
c9:14:c6:38:19:88:b9:74:69:9a:6a:b3:c6:48:b9:c0:3e:39:
d7:4b:df:58:e8:44:1f:1a:f3:60:99:bb:e6:00:73:58:2b:5f:
8d:f8:2d:dd:86:60:14:ef:eb:70:48:28:59:18:9d:06:3f:c3:
56:d6:f5:84:20:f5:ce:be:49:1c:c9:f0:9d:72:1c:c6:9a:db:
88:1e:23:41:45:d5:3b:26:e6:5a:92:91:95:4a:0c:e8:e1:05:
32:4b:0e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:18 2025 by rpki-client