Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/TxShveMXkagPpI8acAIIbuuHf-w.roa
File: TxShveMXkagPpI8acAIIbuuHf-w.roa (raw, json)
Hash identifier: Yj05HPe3EYjPmxF4dbUmE24GvdhxKQjouYz6ySk5apU=
Subject key identifier: 4F:14:A1:BD:E3:17:91:A8:0F:A4:8F:1A:70:02:08:6E:EB:87:7F:EC
Certificate issuer: /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Certificate serial: 019427B696CF099B7E23C2C6E5CAEFCE3435
Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/TxShveMXkagPpI8acAIIbuuHf-w.roa
Signing time: Thu 02 Jan 2025 15:51:05 +0000
ROA not before: Thu 02 Jan 2025 15:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199895
IP address blocks: 185.37.12.0/24 maxlen: 24
185.37.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:96:cf:09:9b:7e:23:c2:c6:e5:ca:ef:ce:34:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Validity
Not Before: Jan 2 15:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f14a1bde31791a80fa48f1a7002086eeb877fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:50:3b:9b:46:6a:8b:81:ff:ae:85:07:9e:
29:35:32:34:39:30:8b:f3:c0:06:ae:8d:29:0b:b5:
d0:37:1d:8b:dc:31:1b:b6:2a:7d:57:8b:26:05:28:
36:fe:d0:76:8c:8d:ca:d1:05:d2:d5:fe:74:a4:e5:
32:5c:9b:32:c7:4a:df:8e:7d:48:85:7d:c8:63:0a:
c2:7f:fd:0e:64:75:25:4d:9e:99:09:e9:5b:58:89:
45:13:82:66:44:09:20:dd:0e:8b:92:46:bf:64:76:
4c:99:29:b8:86:13:e1:28:9d:d8:a8:a4:2e:6e:e4:
76:86:00:dd:47:98:a2:49:79:43:c3:e8:23:16:75:
41:0e:4a:62:45:22:5c:d9:b3:a7:a5:c8:28:78:8a:
2c:91:bf:d9:10:c2:27:c0:a9:5d:ec:7d:1b:6d:10:
d1:00:1b:2a:99:39:33:c7:7f:eb:05:68:22:89:85:
63:43:a3:c0:bf:7f:c8:95:8a:75:b6:5e:57:be:59:
22:19:81:99:7f:71:cc:8c:42:47:41:13:50:ac:63:
9e:3b:3a:9b:80:5f:e1:d8:4e:18:16:54:9a:4c:da:
2d:d1:76:82:d6:da:af:d1:24:69:08:fb:ba:4f:da:
36:30:90:10:70:c4:e5:76:02:eb:09:04:33:e6:a1:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:14:A1:BD:E3:17:91:A8:0F:A4:8F:1A:70:02:08:6E:EB:87:7F:EC
X509v3 Authority Key Identifier:
keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/TxShveMXkagPpI8acAIIbuuHf-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.12.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:b8:d2:b5:42:c9:61:c2:c5:0d:bc:b6:f4:6a:00:79:aa:29:
c0:e7:43:54:55:d0:c9:ce:78:a7:8e:e5:ec:be:47:b4:5b:57:
fc:e8:be:97:06:7b:c0:a1:82:c7:4d:7e:3c:20:78:19:55:6f:
cd:c5:8d:67:74:23:c7:cf:5f:b5:9d:e6:bb:02:f3:c3:bf:c7:
a4:e3:70:4b:7a:eb:a5:b3:d3:cd:e2:ae:51:0e:ac:86:be:b2:
bb:5b:d4:bb:c3:17:1f:0e:1d:ea:f9:93:37:26:61:aa:95:46:
91:6e:50:45:23:1d:f3:db:a0:ce:dd:f5:9f:9c:41:55:98:af:
c9:a5:6b:01:b6:01:c2:61:21:d8:e5:5e:d0:89:ca:45:7e:48:
bd:d5:51:e8:a8:2b:06:7c:44:33:6b:ea:78:a1:6d:e8:78:2a:
e0:0a:7e:d0:a3:ec:f9:b3:cb:e6:48:e3:26:be:fc:cf:84:72:
a6:25:df:dc:65:74:3f:53:09:24:f0:75:c3:5d:51:c6:d8:29:
af:8d:36:d3:d1:78:51:0c:8c:ac:b9:b1:16:b2:4a:25:ec:bc:
3a:76:ad:fb:f2:93:55:ef:b9:ce:1b:ba:26:0e:f0:ae:ed:05:
df:ff:52:b3:d8:80:67:bf:c8:9a:61:f0:3c:cd:7e:64:f8:e3:
3a:97:b6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:09:18 2025 by rpki-client