Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/ThgJs3kNUc1TJ0Jibz63Md7g8RA.roa
File: ThgJs3kNUc1TJ0Jibz63Md7g8RA.roa (raw, json)
Hash identifier: D2au3KjqostxFd8JOgURC1OsvCTG2y74Gi/MCmrs9II=
Subject key identifier: 4E:18:09:B3:79:0D:51:CD:53:27:42:62:6F:3E:B7:31:DE:E0:F1:10
Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial: 0194228D8008B842E25F575F411EF90FC229
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/ThgJs3kNUc1TJ0Jibz63Md7g8RA.roa
Signing time: Wed 01 Jan 2025 15:48:06 +0000
ROA not before: Wed 01 Jan 2025 15:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207551
IP address blocks: 117.55.199.0/24 maxlen: 24
194.164.87.0/24 maxlen: 24
202.181.153.0/24 maxlen: 24
212.6.53.0/24 maxlen: 24
2a10:2080::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:80:08:b8:42:e2:5f:57:5f:41:1e:f9:0f:c2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Validity
Not Before: Jan 1 15:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e1809b3790d51cd532742626f3eb731dee0f110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:ca:52:9a:28:14:2b:4a:3e:8b:6e:8f:35:
35:f5:b2:c8:77:f1:51:16:f7:bf:42:9e:29:b7:7b:
33:16:88:1c:e8:0f:f2:bb:e0:4b:6d:00:76:6f:9e:
b9:47:cb:c7:15:41:3c:d5:b6:5d:f2:b3:7e:36:7a:
b6:2a:08:03:d7:11:98:40:a8:a9:34:f2:de:2f:28:
3e:39:2f:c0:c8:10:9a:b0:57:0a:c4:0c:b3:6e:e5:
28:54:bb:bc:6e:ad:48:98:5a:7e:ac:2b:6e:38:55:
7b:76:ca:92:7d:1e:aa:d0:68:b1:a4:7f:10:74:d3:
7b:f7:0c:b9:12:e0:9b:fa:de:0b:16:6b:86:25:a7:
f7:17:ff:df:87:8c:2d:3c:c1:3b:72:be:f6:43:48:
6f:a9:c2:4b:5f:6a:0e:10:38:79:4a:bf:8f:40:c3:
55:e3:b2:72:9f:9f:84:3f:eb:d2:3b:c9:b7:33:56:
8a:42:63:97:79:a3:90:b6:56:b9:44:ff:0e:96:8c:
9f:bd:78:b5:d2:43:76:71:c8:0f:13:11:f7:48:f6:
16:46:07:b5:e3:0e:88:fa:b6:5a:12:7e:26:42:4f:
99:13:4b:e6:6b:73:46:67:cb:03:39:85:ee:2f:37:
fe:f4:fd:08:c0:5f:95:c3:a4:40:74:12:e8:d9:bd:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:18:09:B3:79:0D:51:CD:53:27:42:62:6F:3E:B7:31:DE:E0:F1:10
X509v3 Authority Key Identifier:
keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/ThgJs3kNUc1TJ0Jibz63Md7g8RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.55.199.0/24
194.164.87.0/24
202.181.153.0/24
212.6.53.0/24
IPv6:
2a10:2080::/29
Signature Algorithm: sha256WithRSAEncryption
49:2b:74:ae:88:84:ed:9a:a4:3a:45:b6:a6:16:c8:27:2e:82:
00:14:03:f6:8f:69:60:9f:e6:13:1f:e2:50:d0:02:ae:56:4f:
df:27:78:c8:71:78:0c:cd:39:fd:d7:d6:62:5f:e9:5f:3f:8b:
cf:a6:ba:5c:bb:3a:11:12:1e:43:f6:cf:b7:df:8e:f6:c8:7f:
80:32:19:23:76:0f:71:2a:10:91:13:84:58:c8:dd:73:a1:a5:
92:54:f1:09:8f:e6:a3:5a:c9:85:07:e3:96:45:60:a3:cd:9e:
46:23:b8:21:d9:f4:36:8a:c8:86:6f:53:31:5e:e0:2d:f4:b0:
83:67:4e:34:96:c4:15:cf:2f:25:3c:ff:5c:df:ac:ad:7b:51:
1c:1e:1c:1d:e9:c1:a7:17:6f:4b:93:a6:cb:2b:0b:77:ee:da:
07:74:f5:0f:ab:9f:91:7a:9f:5b:2b:f7:09:07:5f:27:39:f0:
97:2f:4e:ae:22:3f:3f:89:c5:c9:61:4c:8b:4b:85:d8:0e:3f:
ff:c4:f3:3b:1e:8f:7c:22:57:a8:35:33:ab:e1:de:98:e6:8a:
0e:c9:06:6a:f1:f0:6d:06:d8:8f:e5:fc:68:6d:91:1f:36:83:
29:c5:b3:6a:28:b1:89:df:fa:1c:3b:bc:26:6f:83:57:c5:33:
30:9c:da:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:33 2025 by rpki-client