Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/TwcW7ry__ldmLwpiB7VevhQqAqI.roa
File: TwcW7ry__ldmLwpiB7VevhQqAqI.roa (raw, json)
Hash identifier: uBxAlXDXXFqGZEkkBChFuQhwTVN5EZjcpMYp/y3cS/k=
Subject key identifier: 4F:07:16:EE:BC:BF:FE:57:66:2F:0A:62:07:B5:5E:BE:14:2A:02:A2
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA6B191F8332886E5051B4F148DF00
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/TwcW7ry__ldmLwpiB7VevhQqAqI.roa
Signing time: Wed 01 Jan 2025 03:48:12 +0000
ROA not before: Wed 01 Jan 2025 03:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 5.57.33.0/24 maxlen: 24
185.26.32.0/24 maxlen: 24
185.26.33.0/24 maxlen: 24
185.212.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6b:19:1f:83:32:88:6e:50:51:b4:f1:48:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f0716eebcbffe57662f0a6207b55ebe142a02a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:61:23:62:f0:68:e5:3e:44:3a:ae:71:f4:e2:
4f:1a:a8:97:88:74:de:ad:8d:60:a3:21:a4:26:94:
34:41:56:21:e4:55:6a:5b:fe:84:56:80:d4:8b:a2:
ec:cb:07:a3:cd:1b:7c:e0:b6:a5:e7:36:36:78:d0:
66:6b:4e:50:69:fb:a9:84:f8:59:fa:32:04:9a:fa:
43:5a:5b:9e:79:46:d4:6f:10:cb:56:6f:c4:7f:eb:
0a:8d:8b:98:5c:a2:94:05:6b:5c:89:71:fd:ea:dd:
7a:5c:da:e5:41:bd:41:92:aa:bc:cf:62:e8:74:01:
04:92:1a:87:29:04:f5:10:40:a0:1a:ed:0b:0a:e8:
93:b1:9b:6d:59:ad:37:78:08:1b:58:41:7c:d7:d8:
64:25:8c:fb:bd:15:b0:51:66:95:de:04:93:b0:ed:
18:fe:1f:56:c0:18:df:d4:55:01:54:cb:97:0e:93:
87:eb:13:d8:8b:a2:d7:6f:3d:e6:df:bb:e9:6d:d1:
c4:f3:2a:9c:fa:2e:56:b0:b9:41:02:9e:7b:20:99:
c8:28:97:48:83:4a:d1:6b:ef:51:4d:ab:bc:e2:5e:
51:c1:2f:da:3e:dc:23:fa:18:45:bf:61:56:be:f5:
df:d3:28:c3:88:6b:e2:67:dd:06:fc:53:e3:ab:14:
3a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:07:16:EE:BC:BF:FE:57:66:2F:0A:62:07:B5:5E:BE:14:2A:02:A2
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/TwcW7ry__ldmLwpiB7VevhQqAqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.33.0/24
185.26.32.0/23
185.212.50.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b1:71:06:e0:1b:94:96:c7:65:6a:bb:a5:35:cc:98:5e:ed:
ca:3f:6a:0d:3f:10:28:5c:5d:66:1d:12:27:dc:86:41:97:84:
0d:2b:90:9e:00:52:ab:0e:c0:84:4f:6c:5d:3b:ad:b2:4c:00:
d5:59:30:cf:82:65:9d:24:6c:54:4f:1b:cd:fe:05:ff:89:28:
e8:79:04:89:45:ba:eb:d7:3b:1a:8f:e5:4d:e9:a9:1e:35:83:
76:a6:03:42:94:b1:c6:95:80:3b:41:c5:10:32:74:3e:e1:07:
ec:4f:bd:ab:96:f8:2f:b2:7e:47:33:62:69:3e:59:27:93:ae:
0d:66:99:11:2e:3c:50:e4:0e:f2:24:9c:16:73:56:5e:46:f7:
2d:f8:b2:33:ae:37:16:5c:ef:5e:b1:66:fb:60:36:a6:ee:44:
c1:b4:79:77:4b:25:f8:70:89:a8:7c:46:b5:bb:ad:f2:d0:9d:
ed:ff:8f:a7:4d:2a:01:21:4e:56:67:70:24:40:e4:b5:5c:6a:
a4:cd:9c:d5:d2:00:39:74:25:9c:78:59:68:d3:fd:36:2a:0f:
51:a3:c8:69:5e:a0:8d:34:ce:eb:ae:50:e7:d0:4e:dd:5a:40:
55:c6:fd:00:58:65:19:69:82:ae:90:bf:15:aa:d0:a5:7b:ca:
58:55:42:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:00 2025 by rpki-client