Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/TSzzT-wDXDGDMx-4wmmQgF1l3HA.roa
File: TSzzT-wDXDGDMx-4wmmQgF1l3HA.roa (raw, json)
Hash identifier: yUpCizyCuVdygvZFqIzlfSb6NuJnZoyRJzdQ53d5l/A=
Subject key identifier: 4D:2C:F3:4F:EC:03:5C:31:83:33:1F:B8:C2:69:90:80:5D:65:DC:70
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 0194266AEB2DA31C166E1F707F4B74CC210A
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/TSzzT-wDXDGDMx-4wmmQgF1l3HA.roa
Signing time: Thu 02 Jan 2025 09:48:48 +0000
ROA not before: Thu 02 Jan 2025 09:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47576
IP address blocks: 185.126.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:eb:2d:a3:1c:16:6e:1f:70:7f:4b:74:cc:21:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Jan 2 09:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d2cf34fec035c3183331fb8c26990805d65dc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:51:ed:26:ae:ff:d4:7f:af:ef:d0:4f:22:
72:e0:37:db:7d:0a:cf:25:97:80:b8:43:fd:7d:0a:
5d:a3:57:46:aa:a5:ef:cd:d8:92:3d:6f:f6:29:16:
d1:b7:c2:50:9c:0f:88:e3:e8:89:a7:06:b1:ba:e9:
46:e3:31:9e:16:a9:ce:54:18:ca:92:38:7c:b6:4d:
ef:ea:42:37:9a:5f:35:32:b0:c0:1e:b9:b9:20:41:
f6:f6:db:bb:ba:23:b6:14:81:6f:29:cd:86:2b:c7:
80:88:83:59:5c:41:a6:00:cd:31:f8:d0:71:1e:f9:
d2:97:a1:49:2b:a6:e7:85:89:55:d6:31:d6:90:3c:
d1:e9:1d:ba:23:0f:05:30:08:d9:80:dd:20:b4:89:
30:23:c0:63:cb:bc:84:53:2c:5f:98:40:db:86:29:
05:ac:c7:29:c0:ef:a0:96:ae:e6:b3:d0:ef:2e:0d:
1c:45:19:bb:cf:43:f2:3b:28:b4:0e:d7:9d:cb:6f:
ec:97:4b:25:9e:a1:48:93:95:e2:57:e6:3f:2b:90:
44:ed:c4:2c:c5:cf:af:29:cd:d7:0e:6b:d1:84:9d:
7d:3e:62:4c:54:26:79:ba:e4:46:a9:d5:c4:4e:f7:
31:4e:12:e8:e5:5f:cf:c8:9a:d8:27:7e:a8:44:ff:
21:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2C:F3:4F:EC:03:5C:31:83:33:1F:B8:C2:69:90:80:5D:65:DC:70
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/TSzzT-wDXDGDMx-4wmmQgF1l3HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.20.0/22
Signature Algorithm: sha256WithRSAEncryption
96:ae:a6:d7:0b:b8:d1:9a:50:f5:d6:6e:be:ca:58:2d:93:60:
0d:4e:8d:29:30:8b:c4:47:7f:eb:2c:e0:0e:c5:19:6c:02:3e:
d6:dd:7c:60:ba:1e:64:ad:41:74:2d:9e:55:e1:69:2b:58:95:
d2:6b:74:c6:aa:7c:69:20:43:b8:86:b3:c0:7d:65:75:56:9c:
b5:09:b3:f7:bd:7c:6b:eb:11:fd:cd:ee:2b:36:e1:5d:a6:f7:
aa:31:80:7d:58:94:89:0f:50:7e:78:e8:e3:4b:9a:44:c5:41:
76:fb:5c:73:31:13:a6:28:91:52:c8:04:7a:cd:dc:cf:34:a4:
72:0f:e0:ab:83:ac:7a:87:c3:da:26:47:09:d4:9e:df:86:b8:
cb:18:2d:41:49:97:b2:65:08:ef:9d:12:e1:7b:b2:e9:81:37:
67:1d:e7:f8:b9:6a:ad:a4:e5:80:c0:49:b3:a9:9c:0d:58:d6:
df:17:56:d1:1a:26:62:ac:31:db:88:b4:e1:84:73:f4:ed:38:
12:14:7f:07:a0:0e:82:46:b1:ab:48:72:74:a6:ba:3a:c6:e6:
62:55:da:50:51:11:79:2d:bb:ec:3a:12:59:c1:98:ac:87:f2:
96:b9:df:c8:7b:63:31:e0:63:59:84:c9:8e:0b:37:9d:8d:fb:
eb:f6:53:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net