Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa
File: TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa (raw, json)
Hash identifier: rwvG+QNgKmW7F7MUDt67iKamV918LuVdz1uOfLvRAOI=
Subject key identifier: 4E:F2:7D:14:5C:71:26:05:9B:D9:83:D6:87:19:71:62:4B:FB:E8:EB
Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial: 0194266C3F3353D2E9A03CEC7ED7C74BFF3F
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52106
IP address blocks: 91.238.56.0/22 maxlen: 22
194.247.62.0/24 maxlen: 24
195.3.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3f:33:53:d2:e9:a0:3c:ec:7e:d7:c7:4b:ff:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ef27d145c7126059bd983d6871971624bfbe8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ba:cc:5c:2c:68:28:70:bd:f5:ad:0a:c2:55:
22:ec:73:61:c4:b3:c6:39:b0:f3:3d:0c:40:0e:18:
88:57:4a:91:dd:49:8b:1e:58:61:bc:b7:bc:b6:03:
71:4f:21:14:38:11:2f:62:33:4d:e2:d9:18:af:a7:
00:b7:e5:3c:f7:fe:c1:80:59:81:8c:ae:e8:b8:0d:
df:45:f4:af:25:88:bc:92:9d:7b:b3:d8:90:c8:93:
06:b6:8a:a6:ce:f9:59:79:2c:47:ef:de:7f:20:12:
50:3d:b0:5b:f9:40:8e:5e:9f:43:38:d5:e8:24:3e:
65:bf:68:b0:5d:b9:67:64:70:f4:f4:40:1b:6c:54:
b3:ad:14:da:b5:37:91:11:07:a7:10:b9:82:9c:6e:
68:6f:ac:85:ff:c4:02:9c:3e:1f:c7:ae:1d:57:4a:
bd:79:a5:4a:1c:c2:09:e5:91:25:4d:c6:e9:c5:92:
6d:d2:b9:a9:f8:40:63:78:aa:67:11:a0:27:d2:d2:
7c:93:2e:d4:5c:ac:1b:2a:ad:eb:47:9e:8a:00:02:
8e:86:3e:55:c2:13:ea:0d:28:51:9a:0a:5f:f3:e5:
03:95:ed:c8:01:db:fb:3a:33:a7:24:e1:84:ff:0b:
0a:55:6f:37:db:25:e5:f1:25:38:33:ac:ae:ce:46:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F2:7D:14:5C:71:26:05:9B:D9:83:D6:87:19:71:62:4B:FB:E8:EB
X509v3 Authority Key Identifier:
keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.56.0/22
194.247.62.0/24
195.3.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:14:68:39:c1:ef:e2:c6:97:35:d4:d9:17:54:ba:3b:7c:d2:
1d:7e:e8:25:a7:29:fb:d3:fd:9b:d3:74:56:f4:2e:49:0f:15:
19:ef:c0:11:1f:f3:da:3d:26:c0:af:a8:14:45:7b:fc:aa:46:
00:fe:08:44:7b:c8:6c:80:05:2b:ba:fd:b8:42:c0:b3:7d:95:
40:f4:6f:83:35:e4:45:fe:5b:64:7b:7a:9e:49:2b:83:d7:44:
58:a8:c6:dd:7b:e2:1b:1b:2c:3f:21:c9:37:f4:ac:c0:bc:4c:
8e:9a:2e:fe:fe:67:2f:18:3a:b4:2d:f0:46:2d:bc:20:bf:52:
b2:d0:32:49:4c:a5:3c:64:ab:6c:a6:a0:d7:97:e8:c0:d8:95:
af:74:79:06:db:eb:63:42:21:93:a5:97:92:6f:e7:fc:7a:a2:
50:05:29:84:d1:10:7e:20:7b:2d:f8:3f:f4:7b:99:e3:9f:ee:
84:c7:89:5f:59:2a:46:90:87:01:9c:cc:af:6d:90:d7:ba:6e:
de:b5:32:6b:8d:d9:b4:94:89:78:70:af:b3:54:e6:d5:bf:95:
d8:ed:42:36:80:8c:57:af:f2:32:8b:28:b5:e8:33:de:f3:bc:
90:9a:73:92:47:06:fc:d9:15:a0:db:7b:42:51:1d:af:51:fc:
d5:d6:81:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:19:03 2025 by rpki-client