Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/TWemBdVK4I3iQmdswj-mpGPWFwA.roa
File: TWemBdVK4I3iQmdswj-mpGPWFwA.roa (raw, json)
Hash identifier: hsW8DjLr6d3axq/2DjkJCrZesc83XYHr5G5V7Cu6DBs=
Subject key identifier: 4D:67:A6:05:D5:4A:E0:8D:E2:42:67:6C:C2:3F:A6:A4:63:D6:17:00
Certificate issuer: /CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
Certificate serial: 019426D98656A146C2270DD41A67F516500A
Authority key identifier: E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/TWemBdVK4I3iQmdswj-mpGPWFwA.roa
Signing time: Thu 02 Jan 2025 11:49:37 +0000
ROA not before: Thu 02 Jan 2025 11:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44152
IP address blocks: 185.19.172.0/22 maxlen: 24
185.59.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:86:56:a1:46:c2:27:0d:d4:1a:67:f5:16:50:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
Validity
Not Before: Jan 2 11:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d67a605d54ae08de242676cc23fa6a463d61700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:f5:6a:41:3b:6d:c6:d4:32:31:5a:07:e9:
cb:94:98:f2:04:8c:07:15:f5:39:1a:84:f2:e1:cf:
3a:dc:a5:89:c5:a8:f1:8f:f2:08:04:00:f8:fa:b7:
cd:a9:44:b0:f5:a0:df:2b:bd:95:91:ce:81:ef:1d:
ff:8f:cd:ef:61:45:ed:e7:f4:97:34:b9:a4:30:77:
c4:04:11:7b:73:85:94:8f:cf:69:f2:64:78:20:09:
86:83:b1:4b:10:72:49:05:09:b2:28:44:4f:49:28:
28:e4:a0:0d:7a:23:b0:5f:aa:21:37:49:d1:0b:01:
ce:29:a1:fd:2d:e9:09:67:74:b9:e3:58:fa:83:42:
70:fe:1d:30:1e:4c:ae:83:a8:34:29:3e:9c:34:bd:
77:54:97:06:a8:c1:8b:a8:af:43:fa:0a:53:aa:88:
e9:f1:c3:9c:73:cd:26:3f:e7:e3:15:de:5a:cf:dd:
96:9f:bd:e4:d9:a1:b1:dd:47:d4:44:04:f6:8e:12:
a0:77:be:5f:13:aa:ef:b1:ed:8b:48:93:3d:eb:f3:
72:e5:6a:27:29:eb:5d:bd:0b:b7:ab:2e:79:ff:f1:
8d:bd:89:cc:54:44:5d:e2:68:b7:fb:fa:27:1c:cd:
51:15:a0:0c:49:ed:3f:ff:8d:e3:5f:c8:8a:28:cb:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:67:A6:05:D5:4A:E0:8D:E2:42:67:6C:C2:3F:A6:A4:63:D6:17:00
X509v3 Authority Key Identifier:
keyid:E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/TWemBdVK4I3iQmdswj-mpGPWFwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.172.0/22
185.59.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:22:21:16:63:fa:82:2b:be:0a:a8:e8:2e:55:b2:54:68:fc:
64:ad:5e:4e:92:67:bf:80:02:41:51:16:ca:49:96:25:21:1d:
84:06:42:fb:53:34:24:87:56:3b:55:fb:c1:12:35:2a:7b:0d:
f3:2c:6d:9a:49:09:81:ce:0f:07:86:c5:ea:37:59:5b:9a:f8:
f7:29:19:3d:fd:8a:de:64:99:41:d0:97:1e:2f:9d:c0:19:df:
58:6e:c7:15:cd:33:6b:3f:3a:da:f8:ca:d8:18:3b:f9:f0:e6:
9d:ce:ad:bb:18:48:9e:0f:bc:c0:2c:cf:fc:63:04:4f:4a:81:
69:d2:ce:43:73:d6:49:8d:30:2a:7e:02:81:04:ec:4f:20:c0:
54:e6:3f:74:8b:ed:c1:32:82:cc:8a:61:c0:b8:a6:00:4a:1b:
9b:23:91:fa:82:2f:8e:ac:82:bb:63:e8:2e:0e:c8:10:19:90:
8d:50:e1:cd:1e:2e:b4:44:68:8f:2c:f9:f9:69:7d:18:e3:19:
42:e5:f9:43:d2:71:90:f8:c2:80:ec:60:01:0d:9d:f2:5d:86:
72:60:4f:21:01:e1:4d:a5:18:3b:80:6f:5b:cd:45:9d:cf:de:
3c:9b:ac:64:01:8f:7b:a9:57:79:d7:d6:dc:0d:96:a4:59:24:
3d:7a:8e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:14 2025 by rpki-client