Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa
File: TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa (raw, json)
Hash identifier: ebCgIhbDpPxtlRtDjitUarjC0W1nxe0ujpocy11Koxs=
Subject key identifier: 4D:B7:00:27:EE:E4:81:96:CB:10:C7:81:02:B9:FE:68:8D:AC:D0:E7
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 01942521692BC6588BC6FE6233FCE3C26C39
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197746
IP address blocks: 62.1.216.0/24 maxlen: 24
194.219.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:69:2b:c6:58:8b:c6:fe:62:33:fc:e3:c2:6c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4db70027eee48196cb10c78102b9fe688dacd0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:9a:eb:f8:a6:e5:10:b6:37:f8:7c:e4:a9:
eb:b5:0f:c5:32:b3:27:78:f8:ee:b5:e0:bd:31:d6:
ec:67:59:28:9e:6c:61:c0:2f:cb:4c:19:ea:00:67:
1a:c6:10:b4:47:14:0f:9b:eb:a6:00:3e:fb:24:54:
2f:6b:7f:5f:2f:51:26:e2:91:ca:5e:61:e0:54:90:
d9:46:e6:cb:20:bd:ff:7c:e4:f0:a1:71:b8:60:6e:
90:a1:d9:23:d8:8b:ff:57:6e:c2:b0:54:cf:1d:71:
1b:cd:c0:26:b4:9d:21:59:8f:7a:39:b6:61:67:7a:
3d:8b:45:d5:75:1c:42:47:de:93:a5:2f:45:95:40:
ab:02:04:7c:c8:61:f8:59:71:e1:85:87:e3:c3:b6:
b1:79:c8:3e:44:0b:42:81:ba:f5:83:66:aa:af:c8:
f6:1e:76:34:e0:2c:4a:0d:36:78:50:65:7e:86:f4:
1c:b9:3f:58:f8:92:6c:b5:0b:07:cf:74:61:74:b6:
15:62:50:70:85:97:94:c5:2a:ac:83:b7:c5:9e:61:
f2:06:ed:0f:2b:43:a2:2c:31:80:aa:01:3e:50:e5:
a8:fe:35:8f:b4:25:9a:8d:ca:90:fb:b5:db:12:7e:
27:c3:b2:1e:14:51:52:bd:34:1c:5c:a3:0c:dd:97:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B7:00:27:EE:E4:81:96:CB:10:C7:81:02:B9:FE:68:8D:AC:D0:E7
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/TbcAJ-7kgZbLEMeBArn-aI2s0Oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.1.216.0/24
194.219.79.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:a3:76:04:c8:08:22:60:bd:e4:14:67:75:cd:7d:90:b7:2e:
47:37:ed:d4:0d:79:fd:d9:ed:88:e6:0c:b9:7d:32:a6:75:0f:
b2:5b:5b:1f:61:3f:35:44:e9:94:72:68:d5:c3:ac:31:ca:96:
27:a6:3b:17:85:be:ea:ef:63:9a:84:50:f8:f7:d6:5a:90:eb:
11:ce:2a:26:2b:7b:4c:14:86:4b:d3:9a:3f:73:1a:4e:77:3f:
d8:c0:8f:4f:2f:28:1f:81:b1:c9:2b:10:4d:81:12:17:51:cf:
43:5c:25:ff:de:4b:a7:07:02:bb:80:30:b4:1f:fc:06:b4:b9:
a5:48:d4:20:1e:be:b5:e7:c8:db:0c:01:d3:ad:4d:a7:3c:f7:
9b:88:24:8a:99:cf:8c:2d:02:ee:eb:c4:21:52:9f:53:a9:6c:
15:69:35:99:ee:bf:76:ee:dc:7f:22:da:09:68:0d:b1:f5:b7:
16:46:49:8f:95:24:76:aa:64:51:8a:e5:f8:2f:85:11:89:1a:
13:76:48:03:47:a1:84:8f:51:6d:7f:69:92:a7:65:9b:3c:84:
fa:d5:3d:f5:3b:0d:14:39:28:92:5f:6a:0c:86:0e:4a:e8:a6:
01:60:e6:5a:08:7e:6a:95:01:08:d5:f0:ce:9b:8a:34:a3:c4:
10:e1:0c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net