Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/Tjeo1WmIkn1TfxuXYhk9r4gFwTk.roa
File: Tjeo1WmIkn1TfxuXYhk9r4gFwTk.roa (raw, json)
Hash identifier: OzL+U5DSKVSFJwICcNjGpO9oUrSPwiGey45zDs/0u8w=
Subject key identifier: 4E:37:A8:D5:69:88:92:7D:53:7F:1B:97:62:19:3D:AF:88:05:C1:39
Certificate issuer: /CN=2186c46e3b1826b782d23e6304e50f1301494fc7
Certificate serial: 019427B60CFB7661D9C3095A0DBD749662B4
Authority key identifier: 21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYbEbjsYJreC0j5jBOUPEwFJT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/Tjeo1WmIkn1TfxuXYhk9r4gFwTk.roa
Signing time: Thu 02 Jan 2025 15:50:29 +0000
ROA not before: Thu 02 Jan 2025 15:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42369
IP address blocks: 193.30.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0c:fb:76:61:d9:c3:09:5a:0d:bd:74:96:62:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2186c46e3b1826b782d23e6304e50f1301494fc7
Validity
Not Before: Jan 2 15:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e37a8d56988927d537f1b9762193daf8805c139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:49:e1:c6:c2:05:9e:c4:9f:3b:15:6d:b9:
38:2c:fe:33:35:f8:2e:a1:64:8d:af:84:53:17:3d:
c8:a3:58:74:56:c8:54:10:34:d6:b0:1a:cd:2e:0f:
c3:42:61:a5:b1:1d:4b:5a:28:f4:47:5d:98:74:00:
be:a0:ad:fe:33:2f:6f:cd:e4:7a:74:ad:15:c0:59:
a2:85:a7:ba:ed:34:a7:f3:fb:70:3f:62:af:0e:0c:
d8:c8:90:1b:d1:15:e7:0c:72:1f:27:93:55:0c:fb:
9f:da:01:21:c3:d3:81:ea:1d:2b:a1:07:a1:68:4f:
9a:61:3b:d6:49:3c:b7:ed:55:ab:28:77:ff:62:f5:
74:7f:89:db:b2:a0:b2:2e:23:be:4d:cb:cd:4e:b5:
df:a5:25:e2:a7:4f:fd:3b:cc:2d:ac:cb:81:b2:db:
ca:25:9f:0f:d6:db:1f:3f:79:ec:69:e2:c7:e9:dc:
73:b5:78:bc:9b:a7:91:ae:65:e7:4c:30:47:ed:96:
b6:be:86:3e:e8:13:1d:26:d2:e9:c6:38:5f:d8:b3:
fd:12:18:e6:6c:f8:ce:18:fb:8f:22:26:36:35:46:
a1:6b:0b:d3:f1:a9:42:6d:b0:6e:4b:83:ea:0e:29:
8a:4e:13:27:15:bc:aa:bd:5a:21:97:2b:8f:c1:8a:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:37:A8:D5:69:88:92:7D:53:7F:1B:97:62:19:3D:AF:88:05:C1:39
X509v3 Authority Key Identifier:
keyid:21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYbEbjsYJreC0j5jBOUPEwFJT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/Tjeo1WmIkn1TfxuXYhk9r4gFwTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/IYbEbjsYJreC0j5jBOUPEwFJT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.127.0/24
Signature Algorithm: sha256WithRSAEncryption
34:56:2a:ef:38:b9:05:d3:8c:a0:56:6b:d6:3e:cc:40:70:29:
84:0b:11:e6:36:f4:9e:f5:66:a5:26:78:69:1b:97:bf:9f:79:
5e:a0:d7:e8:2b:e1:a8:84:50:5d:67:28:9c:15:4c:92:2d:ac:
4a:28:89:97:9b:d9:b1:61:a0:7d:00:93:bf:db:97:ee:11:65:
eb:7e:1e:a5:ea:b3:98:77:f8:59:83:9d:9d:79:15:ac:c5:0e:
92:b2:09:87:9d:8c:9f:bf:8b:21:c6:93:69:d4:d3:65:c0:e4:
b6:a8:c9:03:4e:c3:c5:c8:0a:73:37:3b:ad:f7:2b:3e:0f:0e:
62:3a:33:2a:d5:9c:e5:eb:3e:ae:41:8b:4a:54:bf:34:7c:65:
7d:a9:91:3b:cb:f9:19:ae:9f:11:c4:8e:1e:31:26:21:d8:7d:
15:0a:49:64:39:80:3b:47:0d:33:db:14:10:77:c6:74:09:f3:
e8:69:9b:fe:75:94:00:5b:2e:fe:9d:d1:4f:ef:19:b2:a3:0b:
ba:f0:0e:f1:f6:91:65:39:92:a9:2f:ac:42:81:67:1b:94:15:
ab:06:89:6f:11:08:9a:a1:53:cc:00:33:2c:dc:40:8b:81:06:
9b:81:e5:20:6e:25:cc:a3:56:a2:e5:46:ba:fb:22:a3:34:fd:
07:72:4c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:39 2025 by rpki-client