Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/TBM-WxKs_JnUU_yCd07gs-SEpTM.roa
File: TBM-WxKs_JnUU_yCd07gs-SEpTM.roa (raw, json)
Hash identifier: ITKz1rUEY27fZS9fRQNAXZm00rkbdJk7GbuSl5tqJwg=
Subject key identifier: 4C:13:3E:5B:12:AC:FC:99:D4:53:FC:82:77:4E:E0:B3:E4:84:A5:33
Certificate issuer: /CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Certificate serial: 019619D9E2F07DC2F400AC9C30867B9C06A6
Authority key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/TBM-WxKs_JnUU_yCd07gs-SEpTM.roa
Signing time: Wed 09 Apr 2025 09:20:31 +0000
ROA not before: Wed 09 Apr 2025 09:20:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39686
IP address blocks: 195.68.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:19:d9:e2:f0:7d:c2:f4:00:ac:9c:30:86:7b:9c:06:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Validity
Not Before: Apr 9 09:20:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c133e5b12acfc99d453fc82774ee0b3e484a533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:bb:db:6d:1f:90:82:8b:c8:6c:c1:43:8b:
b9:c2:59:0b:0f:53:42:44:28:e7:1a:b6:73:41:79:
3c:08:1c:6b:88:4f:08:f2:a0:72:a4:11:0a:36:18:
b3:5c:de:cd:ab:68:b6:fa:2d:0d:90:44:3c:ed:53:
81:3c:1e:4b:f0:32:c4:80:1f:7b:99:c1:f7:46:42:
57:ab:6f:01:ab:55:82:82:b6:4d:24:e3:80:05:b4:
ef:9a:8b:db:55:a0:0f:89:4b:24:4b:12:a0:0d:96:
f0:ce:9c:4f:76:0b:d3:42:92:6f:38:36:40:46:31:
71:56:43:d1:c7:e5:72:a4:ca:b2:8b:75:54:cf:d0:
9d:b6:c0:53:62:98:19:29:95:f3:fa:f3:aa:c8:00:
d0:2b:88:69:89:e7:2f:11:97:56:99:cc:37:3c:ac:
c6:2e:9c:7c:99:d2:b9:bd:b8:c7:a8:aa:d4:39:5a:
15:bd:b1:a7:5b:4c:a9:d8:22:27:5a:4b:9d:77:2f:
91:3a:a0:27:9d:74:02:84:3a:c3:ba:c0:e0:ae:8f:
46:32:73:de:20:07:f7:16:bf:8a:d8:69:be:de:dc:
70:a7:ee:cd:6f:a5:15:61:14:51:52:6f:b6:61:53:
8b:7b:e9:67:08:42:34:04:3f:d9:53:44:ba:93:0f:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:13:3E:5B:12:AC:FC:99:D4:53:FC:82:77:4E:E0:B3:E4:84:A5:33
X509v3 Authority Key Identifier:
keyid:32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/TBM-WxKs_JnUU_yCd07gs-SEpTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.244.0/24
Signature Algorithm: sha256WithRSAEncryption
40:83:a4:3d:b4:19:5b:b8:55:7f:f1:e1:52:c3:06:50:6e:92:
74:0c:cc:6b:dd:db:6c:72:2f:72:f0:8b:60:c8:b4:35:63:a6:
bf:34:1a:12:9b:9a:0b:b1:89:49:ea:5d:2d:09:d7:93:47:8c:
c1:5e:6e:58:0e:89:01:57:4c:db:f2:69:b5:79:67:9e:c3:9c:
b1:f4:b6:2b:ce:89:f5:50:82:7c:f4:08:19:b7:65:29:c7:c3:
ac:6e:e3:4a:18:c6:5e:07:b2:be:61:07:ad:b8:5c:a6:38:de:
44:f2:e3:74:38:72:c3:03:76:7e:c1:89:99:6d:e6:08:eb:9b:
99:81:0c:17:be:ae:b0:6d:70:ce:40:89:5c:9e:81:49:8d:ef:
b1:c4:6c:93:ca:16:36:2c:42:42:6a:a6:b2:89:02:88:00:5c:
77:fc:fa:16:48:5f:56:7b:ff:e4:63:b7:a5:51:18:84:c4:5d:
8b:54:6d:f0:8e:c6:71:18:42:a9:26:da:6f:bf:c6:e9:ed:29:
7e:87:91:76:fc:da:fb:f2:dd:32:59:29:f6:49:6c:53:60:81:
df:67:ff:69:9c:55:12:79:83:a1:c2:48:8e:1c:cc:6f:2e:e6:
55:17:a8:b4:f0:da:66:87:2d:72:e1:af:72:53:b6:b4:40:bc:
6f:b4:b9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:36 2025 by rpki-client on console.sobornost.net