Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/tev87foGLf9TpZQHMwDHXLYnBL4.roa
File: tev87foGLf9TpZQHMwDHXLYnBL4.roa (raw, json)
Hash identifier: jHI7Ehm4mIeH8EgzDR4OOBosKPRgVoLZvuWOXFcKqHU=
Subject key identifier: B5:EB:FC:ED:FA:06:2D:FF:53:A5:94:07:33:00:C7:5C:B6:27:04:BE
Certificate issuer: /CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Certificate serial: 019423D7C9064A7D83DB65769178D140C0E1
Authority key identifier: 46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/tev87foGLf9TpZQHMwDHXLYnBL4.roa
Signing time: Wed 01 Jan 2025 21:48:51 +0000
ROA not before: Wed 01 Jan 2025 21:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60524
IP address blocks: 185.153.84.0/22 maxlen: 22
185.153.84.0/24 maxlen: 24
185.153.85.0/24 maxlen: 24
185.153.86.0/24 maxlen: 24
185.153.87.0/24 maxlen: 24
2a0a:6c00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c9:06:4a:7d:83:db:65:76:91:78:d1:40:c0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46078b2dc086ce5955e62db922f354b82d13cd5b
Validity
Not Before: Jan 1 21:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5ebfcedfa062dff53a594073300c75cb62704be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:eb:58:12:bc:db:24:e7:e3:b3:67:5b:a4:03:
04:63:1a:35:64:77:21:f5:82:9d:0d:35:7b:c4:d7:
57:c3:80:f7:2b:d0:a8:db:31:95:7b:41:30:1e:68:
14:55:86:e1:3a:b8:52:b3:0a:19:4b:75:2b:6d:ee:
76:74:2f:7f:59:78:77:ac:93:78:55:1c:3a:44:83:
20:37:7d:fa:67:7d:7b:81:69:65:25:53:0a:17:6e:
83:a0:64:0e:5d:74:f9:11:f8:b9:f3:aa:a6:04:51:
92:09:d1:ca:9a:2e:67:e5:95:61:42:e8:ac:57:0b:
24:8c:a4:8f:c5:d2:d9:5c:c4:12:78:02:8b:33:a6:
fb:ff:0f:b3:e0:3a:36:16:3f:3d:73:af:26:53:61:
13:5d:cc:40:38:a1:5b:a7:5d:99:c7:6c:b2:f0:0d:
23:3a:4c:28:7e:f7:08:23:12:87:ba:f2:b5:a5:55:
46:81:45:e2:e5:00:f0:39:14:c8:79:c7:fe:bc:3b:
a7:e6:70:3a:c7:36:73:5f:09:e6:6d:ec:0b:1f:cc:
5c:b7:70:aa:13:21:10:24:9e:8b:da:4b:90:28:36:
a9:8f:25:06:4b:40:6a:65:0a:f8:9f:56:02:8b:56:
77:3a:1e:cc:d0:3e:b3:57:e4:fa:64:a2:fd:a5:f6:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EB:FC:ED:FA:06:2D:FF:53:A5:94:07:33:00:C7:5C:B6:27:04:BE
X509v3 Authority Key Identifier:
keyid:46:07:8B:2D:C0:86:CE:59:55:E6:2D:B9:22:F3:54:B8:2D:13:CD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgeLLcCGzllV5i25IvNUuC0TzVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/tev87foGLf9TpZQHMwDHXLYnBL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9ff8a1-3647-4134-b15f-e5dd6382a1c7/1/RgeLLcCGzllV5i25IvNUuC0TzVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.84.0/22
IPv6:
2a0a:6c00::/29
Signature Algorithm: sha256WithRSAEncryption
81:38:c4:c8:cb:0e:a8:e0:73:82:dd:b1:74:dd:0f:28:80:46:
ac:a5:2c:3a:b4:f6:cb:e8:17:9a:4f:28:ca:08:bd:4b:14:0e:
f8:11:66:24:97:03:83:67:f4:b7:78:4f:59:ad:a8:0b:3a:2b:
16:0f:39:68:62:c7:4e:b0:ab:be:36:b6:df:c8:9e:ab:bc:c1:
04:f8:fd:76:36:19:47:8e:35:4b:49:fa:18:d5:1b:b3:91:a9:
94:25:3c:79:72:cc:79:ad:bd:b9:17:3f:eb:46:0e:87:b2:73:
d1:4e:dd:db:0e:87:ec:af:fa:b6:c5:17:d6:bc:23:b3:2b:6f:
f4:21:a2:51:bc:33:04:04:a1:74:21:f5:6f:9b:7d:24:68:9a:
5a:73:38:13:18:ba:52:de:bf:dc:73:24:20:02:c5:a0:59:b0:
b4:c6:a0:12:c9:a3:94:ae:95:b3:de:21:93:7c:58:01:6a:e7:
be:15:4b:5d:8e:9c:5a:df:d1:79:ba:ae:ec:da:c9:4f:2c:f5:
56:c1:09:0a:a8:d1:1b:fc:e5:2a:e8:c8:5d:6b:13:7b:73:12:
70:23:b5:aa:14:53:35:e0:b5:c1:96:94:5f:d6:91:df:b9:9a:
d6:36:58:93:86:02:e8:b4:d4:a8:f6:34:ce:31:a9:27:77:84:
f5:44:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:50 2025 by rpki-client