Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TDV0BLKDE1p7Ns450Mfu7Kq6ad8.roa
File: TDV0BLKDE1p7Ns450Mfu7Kq6ad8.roa (raw, json)
Hash identifier: lTO5embQ4JVR03qf/66D4vxj/cbH77aYRTX0QvQ4wLY=
Subject key identifier: 4C:35:74:04:B2:83:13:5A:7B:36:CE:39:D0:C7:EE:EC:AA:BA:69:DF
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 0194274852A9248071D8BFD80CF9AC728B01
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TDV0BLKDE1p7Ns450Mfu7Kq6ad8.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5542
IP address blocks: 194.225.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:52:a9:24:80:71:d8:bf:d8:0c:f9:ac:72:8b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c357404b283135a7b36ce39d0c7eeecaaba69df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fd:cf:c3:2c:84:49:85:18:9b:70:b9:d2:5c:
bb:19:04:4a:da:81:69:9f:6c:d7:4f:61:e6:1a:91:
9e:86:4a:3f:b6:df:30:62:6a:05:47:74:48:39:f9:
b7:94:09:b0:62:8d:9c:f2:60:9b:b9:18:ba:71:4b:
b6:74:14:a1:ad:6e:65:e5:1b:eb:23:2f:1d:a3:ad:
2e:02:81:48:98:89:85:13:50:98:08:3b:c8:ab:3b:
3a:5a:48:1b:50:77:72:0b:a1:89:89:91:42:b4:a4:
c9:b0:23:40:d6:a0:f5:d6:43:4b:3b:68:29:84:3a:
82:0d:04:e2:bb:54:cf:d4:19:38:ef:2a:b5:ea:40:
c9:1f:c8:e0:eb:35:9f:76:e9:7f:fa:d2:82:c2:03:
e6:08:72:bd:88:72:e6:c1:0b:fb:29:60:32:23:95:
f0:80:78:38:16:9e:d4:b1:29:77:6f:62:a6:5e:37:
0f:9b:f1:87:1d:02:3c:49:1b:38:2c:86:c6:92:a2:
65:ea:b7:b4:d1:cc:2a:f9:e3:ee:5a:c1:d6:2f:d4:
87:26:80:cd:da:1c:30:9a:1a:6c:53:47:2e:4f:04:
08:91:b9:2a:c3:2e:50:9e:85:2b:d7:72:6d:c2:2c:
25:ed:4e:bb:c7:a8:d4:4b:8c:e4:87:8b:c4:b7:b0:
c3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:74:04:B2:83:13:5A:7B:36:CE:39:D0:C7:EE:EC:AA:BA:69:DF
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TDV0BLKDE1p7Ns450Mfu7Kq6ad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.77.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:7e:a1:74:f9:0c:24:05:4f:f8:01:4e:2b:e4:0e:21:a7:a7:
59:fd:a5:b3:81:51:13:fa:3e:2e:5d:83:ff:79:82:13:db:d1:
3f:c3:30:5c:50:bb:e2:64:70:24:fc:30:8c:92:3a:9e:7e:52:
9c:12:ec:c7:97:35:4e:ab:a5:3d:29:47:f3:ec:8f:17:e9:67:
28:40:42:31:2f:93:a8:00:d4:67:a5:ed:e6:67:92:50:fb:60:
69:6a:71:43:9f:ac:1c:96:cb:a7:0f:d2:d7:84:43:f0:2d:ce:
40:85:24:a7:a2:0d:73:a5:97:14:e7:ad:02:3e:be:5b:82:71:
ba:17:ea:b7:6b:35:b6:4b:a6:18:15:0b:a2:f3:f9:ed:f2:90:
d3:09:0f:28:42:b8:19:44:a5:cc:8b:30:73:ee:19:c3:2b:66:
c0:fc:cc:bb:e0:b6:ba:a1:af:5a:f7:4d:93:10:3e:c8:d6:02:
b0:aa:78:a3:c7:cc:b7:af:87:d1:98:71:2a:5f:8b:03:89:86:
7c:90:39:21:39:48:86:fb:26:76:09:b8:5e:b5:27:03:93:e7:
2c:dd:89:1f:70:c2:2f:91:7e:04:80:48:82:ed:30:07:32:e9:
3b:dd:49:72:12:2b:6c:3d:de:80:5b:06:9a:4a:0d:cd:2c:48:
a9:a6:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:55:35 2025 by rpki-client