Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/tLmXVGY6n6fVRzQmW79aMR0MJps.roa
File: tLmXVGY6n6fVRzQmW79aMR0MJps.roa (raw, json)
Hash identifier: TSYx/9L1XrTJwYjdabKmZhceP9EJlWD0fOeM06mdy/g=
Subject key identifier: B4:B9:97:54:66:3A:9F:A7:D5:47:34:26:5B:BF:5A:31:1D:0C:26:9B
Certificate issuer: /CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Certificate serial: 019423D754F0710C75C3F1D9F946951C0921
Authority key identifier: C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/tLmXVGY6n6fVRzQmW79aMR0MJps.roa
Signing time: Wed 01 Jan 2025 21:48:21 +0000
ROA not before: Wed 01 Jan 2025 21:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210021
IP address blocks: 185.75.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:54:f0:71:0c:75:c3:f1:d9:f9:46:95:1c:09:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b051e8e68149b66044e7de4ae59d736e537aaa
Validity
Not Before: Jan 1 21:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4b99754663a9fa7d54734265bbf5a311d0c269b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:b3:75:ab:40:d4:2f:d7:6c:a7:a4:89:26:
80:db:b4:04:7f:f3:65:86:28:d2:ed:27:8c:b5:91:
19:1c:c6:55:bc:58:d4:53:2a:d9:12:ff:b7:3b:c7:
1f:ee:13:6a:3e:85:09:5b:d3:36:1b:bf:b7:85:93:
3d:55:b9:5d:ac:03:e1:f1:01:21:f2:78:40:d5:0d:
2c:9a:cf:04:0c:b3:15:b8:95:47:55:95:44:1c:a7:
de:ea:45:3c:18:43:eb:8a:47:6c:33:44:18:4c:4c:
51:61:7d:43:20:ec:1f:eb:dc:02:85:9d:4d:ef:8d:
05:c8:95:2b:4c:fb:6d:21:a3:93:fd:47:5c:76:34:
02:43:41:d7:87:14:74:2b:fa:3d:7b:e8:21:12:cb:
20:7b:45:27:9c:ee:ce:7a:ee:37:f8:1e:ba:e3:db:
c1:a0:a7:09:01:8d:68:6d:ed:f0:87:96:b6:75:3f:
db:f5:01:6f:2a:d6:0d:3b:af:f0:3e:45:02:87:45:
c4:e4:e7:f2:9a:05:9a:86:ad:f4:35:b7:be:82:06:
16:a5:61:95:d3:cd:56:f9:e8:8c:98:d1:bd:3d:ec:
da:39:31:8d:f9:c1:f8:92:ab:00:36:11:e8:f9:6f:
d6:f3:ef:a6:b1:e9:e0:3d:74:c1:9e:da:c7:d3:2f:
93:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B9:97:54:66:3A:9F:A7:D5:47:34:26:5B:BF:5A:31:1D:0C:26:9B
X509v3 Authority Key Identifier:
keyid:C9:B0:51:E8:E6:81:49:B6:60:44:E7:DE:4A:E5:9D:73:6E:53:7A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybBR6OaBSbZgROfeSuWdc25Teqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/tLmXVGY6n6fVRzQmW79aMR0MJps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b756b4-ce41-41b5-a1d9-bb4d242ed2cd/1/ybBR6OaBSbZgROfeSuWdc25Teqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.99.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:68:ca:96:28:e8:c9:d1:5f:5b:c5:f4:69:08:1f:ff:1b:79:
94:ab:b2:27:60:1e:78:61:5a:99:db:ff:63:32:06:e4:ae:90:
85:be:5b:2e:71:7b:5f:a8:65:fe:94:91:88:75:ac:ec:4f:b7:
b7:e6:50:d5:b6:51:0c:02:7c:53:58:c3:f3:fe:cb:7a:35:e0:
ad:b4:22:84:29:2d:a5:34:2e:b0:b9:fb:1b:ff:e5:82:80:35:
1e:84:db:b3:9f:ea:fb:1c:53:b2:8a:6a:57:b8:fe:44:dc:67:
b0:8e:b0:4b:08:1f:e0:91:0a:fb:bf:3d:96:cb:f9:13:a7:25:
c9:94:f3:96:4e:11:ec:ec:c4:85:91:78:bf:f8:74:2a:fa:a4:
fc:1d:e5:f9:a0:0d:98:ca:59:aa:4a:aa:af:f4:e8:e8:80:5a:
6f:8f:84:cc:69:51:31:b9:a0:e2:db:c9:3f:c9:be:50:8f:d9:
f3:e5:5e:7a:ff:4e:ec:fb:38:e9:57:f8:6b:f6:30:d7:79:71:
83:49:9f:c0:95:17:16:a1:31:53:5c:a1:57:64:b1:24:91:36:
fd:53:26:c1:7c:ec:c2:6d:51:d9:a9:a4:a2:10:bb:a0:34:cd:
8c:25:e7:a3:0e:f4:81:b5:6b:da:9a:fb:cd:0a:cd:10:55:80:
45:17:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:36 2025 by rpki-client