Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/tBwbvVkRx7tiigJvabZjuGdnpBY.roa
File: tBwbvVkRx7tiigJvabZjuGdnpBY.roa (raw, json)
Hash identifier: d7Zp+BRTHnxt8s53ryw5c9y5CaJMgwW2OM5XwqLhxHk=
Subject key identifier: B4:1C:1B:BD:59:11:C7:BB:62:8A:02:6F:69:B6:63:B8:67:67:A4:16
Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial: 019425218A977E3AFAB8877BDD7F45F55F1C
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/tBwbvVkRx7tiigJvabZjuGdnpBY.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19875
IP address blocks: 185.156.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8a:97:7e:3a:fa:b8:87:7b:dd:7f:45:f5:5f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b41c1bbd5911c7bb628a026f69b663b86767a416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:e6:79:ed:6c:a9:4b:41:99:2a:5a:44:df:
34:3a:d5:ec:ad:66:9f:f3:05:26:ed:f7:a9:23:2f:
f8:51:b9:3b:90:7e:33:49:f0:e6:49:5d:9e:87:ff:
fe:e5:b0:57:07:f2:b1:78:fc:ea:4d:c7:e5:b9:cd:
31:af:11:6a:3a:f4:7b:bf:06:c6:df:87:47:51:73:
68:ec:68:b5:f1:d3:4f:b2:ae:42:30:f5:63:a5:d1:
27:f2:df:25:99:df:88:78:43:6f:bc:b3:90:d3:e0:
32:d5:31:5f:54:b6:37:0d:d9:1a:4a:c0:e7:b2:86:
ff:52:31:2d:7d:10:d2:ff:e0:84:b8:90:02:38:87:
c4:9e:31:5b:78:8f:82:1d:a5:bb:3a:e3:6c:96:f2:
13:99:4c:97:80:06:a2:76:45:1c:56:23:95:8c:be:
a5:88:e2:84:41:2b:01:3e:d4:4f:42:2d:a0:25:82:
c2:6c:04:9c:81:a2:fe:ac:e7:d8:e1:dc:80:71:25:
1f:4f:d7:e0:5b:6f:f4:d1:96:aa:a7:45:6f:94:2c:
59:8d:4e:0e:36:89:c2:60:71:95:93:5f:8a:b6:bd:
b5:a3:63:9b:03:55:ee:59:d9:bc:55:03:b2:67:fc:
3a:e1:50:65:0b:4a:0c:0c:e6:3a:de:e4:04:64:15:
c4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1C:1B:BD:59:11:C7:BB:62:8A:02:6F:69:B6:63:B8:67:67:A4:16
X509v3 Authority Key Identifier:
keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/tBwbvVkRx7tiigJvabZjuGdnpBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.184.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:e1:e3:52:dd:15:3f:68:74:0d:3d:cd:66:78:06:04:b4:66:
6c:a8:ca:c3:d4:ba:6c:11:54:2f:db:9a:e6:50:1b:a5:1f:ce:
cd:4f:3b:d5:b4:5f:53:5a:5d:ee:d1:39:dd:77:68:1c:fd:74:
49:40:e8:26:ce:1e:aa:31:17:ce:94:c7:37:a3:4f:f7:85:99:
b0:bf:46:fd:ad:a3:f9:c7:98:18:0d:60:6e:f2:15:88:15:9f:
16:2e:80:46:f2:43:43:24:d7:f8:8d:68:64:fb:de:3c:67:b4:
93:34:3c:45:e9:fd:18:4f:5a:3b:bb:c8:e7:76:02:07:18:23:
1e:99:d4:5b:94:dd:b8:14:a6:74:74:a5:6e:6b:49:96:43:c8:
22:aa:c6:35:44:86:24:28:97:61:cf:c6:b3:31:f0:7d:4f:9a:
79:a6:34:7c:fb:1f:5c:75:ae:70:a9:71:1a:cf:06:fc:21:c4:
00:a2:c4:ec:ed:b2:74:f3:16:dd:75:e0:47:6e:2d:d3:f5:01:
c2:02:25:50:a1:9b:02:66:e6:51:9a:47:58:64:c9:3e:dc:26:
0e:18:c9:fa:6d:0b:78:8f:6c:b0:e6:7e:b3:08:58:05:dc:20:
ef:b4:31:71:7d:6b:1a:99:f4:71:90:15:db:ff:2b:67:d7:66:
66:ac:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:08:11 2025 by rpki-client