Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa
File: TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa (raw, json)
Hash identifier: Xr3qy5kR4VkDonVYgHy7lT3Fh2h3GWbp6XrLzLyjUKY=
Subject key identifier: 4C:06:74:81:CF:B9:73:9B:77:87:CB:74:8B:06:BE:78:73:37:A3:77
Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial: 0194244575170F652FFB8C676A6107B2859B
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa
Signing time: Wed 01 Jan 2025 23:48:39 +0000
ROA not before: Wed 01 Jan 2025 23:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33970
IP address blocks: 185.45.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:75:17:0f:65:2f:fb:8c:67:6a:61:07:b2:85:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Validity
Not Before: Jan 1 23:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c067481cfb9739b7787cb748b06be787337a377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:ee:40:12:3a:bf:2f:d4:ec:dc:ea:7e:19:
c5:3e:04:fd:e7:65:38:0b:c4:2f:2a:a9:72:03:50:
d2:5e:5e:1d:a1:34:30:f3:b8:c7:f7:ee:3f:0c:66:
16:cb:0c:5a:b4:d3:ae:4e:fe:f2:b6:30:37:a9:4e:
88:41:b3:4f:60:aa:c2:da:59:cd:7c:1d:59:aa:db:
14:c8:38:a3:fa:ef:d0:88:7a:5e:5a:2e:5b:99:d9:
b8:77:5a:63:88:1d:e3:bf:4f:8c:06:99:36:84:95:
63:fe:9c:3c:73:b1:3b:78:ca:47:7a:9a:e8:5d:8d:
a8:0b:e8:70:64:cf:7a:7a:88:27:ad:59:cb:c4:ba:
a9:3b:5b:c1:74:87:51:e9:4f:4b:f3:1b:aa:14:3a:
08:40:24:b6:ab:cc:43:e4:06:2d:37:2a:50:40:d2:
bb:ee:a5:a1:76:fa:72:57:0b:a7:80:53:57:39:de:
4b:ac:e8:5a:07:fa:86:b1:04:4c:f8:e7:60:3a:18:
8c:b3:5c:21:ed:14:27:12:5c:5c:0d:60:27:01:b2:
6f:f0:3b:bb:d7:0a:5d:03:cd:3b:5a:80:ea:0d:b9:
29:ae:ad:ad:db:6f:01:e0:85:94:0b:ce:d3:e7:19:
7e:95:41:16:92:42:13:7f:48:18:69:1c:75:6a:fb:
54:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:06:74:81:CF:B9:73:9B:77:87:CB:74:8B:06:BE:78:73:37:A3:77
X509v3 Authority Key Identifier:
keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/TAZ0gc-5c5t3h8t0iwa-eHM3o3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.15.0/24
Signature Algorithm: sha256WithRSAEncryption
04:30:20:bc:5a:9f:c6:fe:e2:b4:99:3b:88:40:50:cc:60:36:
d4:cf:a8:8d:0d:69:0e:67:33:90:39:0e:99:5f:b9:dc:9e:a0:
6b:91:34:d3:f5:7a:76:7e:19:e7:5c:1f:a5:79:33:36:d5:e8:
71:33:e8:ea:ac:bc:51:16:de:30:04:0c:c9:f5:5d:fc:b4:1f:
7c:3d:1a:41:da:c0:7d:fb:06:6c:75:79:95:15:05:3c:68:af:
8d:1c:fb:ed:99:93:f1:dc:14:e3:e7:7d:fb:b4:2f:bb:c7:24:
d2:e0:42:56:06:ac:fd:54:70:b5:03:34:b7:e6:12:77:d7:e1:
29:4e:7a:79:11:a7:e7:5c:fd:04:d0:af:10:ab:5c:47:6d:dc:
27:88:a3:48:58:88:43:67:33:e2:55:22:a3:1a:96:80:34:ed:
7c:28:79:15:d5:fc:9b:ed:9e:2e:ec:cb:c8:b5:d3:1a:e2:2d:
95:95:3e:21:8b:5e:0f:df:4c:57:f2:32:65:86:c5:33:98:da:
37:91:2d:c5:39:0a:99:8d:b3:78:58:67:8d:b6:c4:6a:1f:34:
39:a9:ed:ec:be:6f:aa:ed:13:dd:18:cf:5f:b3:9f:a6:c6:90:
d9:b9:92:15:ea:9a:4c:6b:b9:7a:af:15:67:ea:c1:67:55:d4:
91:83:96:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:33 2025 by rpki-client