Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TzE260Z5eGtMmSjKCHDwaVkvPdA.roa
File: TzE260Z5eGtMmSjKCHDwaVkvPdA.roa (raw, json)
Hash identifier: xLqgOeaW9KiXPuXc0HiIbWWxB+5zHdy/V4oGNPOdPfs=
Subject key identifier: 4F:31:36:EB:46:79:78:6B:4C:99:28:CA:08:70:F0:69:59:2F:3D:D0
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01878F5A6F8C7862D9119746A188A6F8E3EC
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TzE260Z5eGtMmSjKCHDwaVkvPdA.roa
Signing time: Mon 17 Apr 2023 13:14:41 +0000
ROA not before: Mon 17 Apr 2023 13:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.105.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:5a:6f:8c:78:62:d9:11:97:46:a1:88:a6:f8:e3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Apr 17 13:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f3136eb4679786b4c9928ca0870f069592f3dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fa:cc:9d:5f:0a:ca:1e:18:76:fd:3b:06:ab:
d5:9d:a6:76:5d:65:34:0c:54:cf:e6:99:52:2b:2e:
55:d1:79:e9:19:fb:01:ce:b3:85:2a:e7:2f:7e:d5:
c2:48:ec:64:8d:b4:a5:74:1b:18:ac:d3:10:5a:51:
c9:8e:2a:ea:82:12:1b:92:e8:7c:a3:ee:79:71:6b:
b6:0e:71:3d:88:eb:fa:98:a1:68:bd:a5:61:45:f1:
a3:22:cf:68:ce:f9:9b:4e:c7:3a:89:da:60:3f:38:
8a:28:94:e2:c9:58:fa:6b:26:ee:f7:8f:67:1d:e3:
d7:74:c3:7f:50:90:b6:2d:fc:76:0b:1e:97:fd:98:
6c:51:57:68:20:a2:a9:c1:e9:b9:f1:c6:47:63:da:
c8:d9:8c:fd:21:e6:2b:bb:f1:fc:f9:37:0d:96:25:
7c:d4:63:32:76:58:70:7e:15:9c:39:26:06:02:27:
b5:88:40:a8:c1:06:e3:08:a7:c3:07:ea:be:24:55:
aa:e2:54:5d:5b:51:f4:ae:97:47:4f:c5:b7:27:93:
0b:63:33:2d:ec:fe:f8:9c:f6:fd:ae:93:30:e2:8c:
f6:40:e5:42:f4:0e:48:bf:04:00:85:b2:fa:18:aa:
a2:3c:fd:b0:5d:1b:92:3e:5e:d1:8f:75:a4:5c:d2:
ae:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:31:36:EB:46:79:78:6B:4C:99:28:CA:08:70:F0:69:59:2F:3D:D0
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/TzE260Z5eGtMmSjKCHDwaVkvPdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
09:36:76:b4:3a:ef:78:fb:f4:0c:ab:05:d3:56:57:49:aa:4f:
26:af:61:d3:14:6d:02:3a:1d:b5:42:68:47:78:fe:82:e0:a5:
c1:bb:b7:b2:be:11:bc:9a:41:54:c6:c2:2a:c1:8f:9a:f2:f4:
34:b1:56:81:cd:1e:76:83:98:95:63:0c:21:c3:be:67:c3:13:
8b:44:d0:27:3c:51:a6:4e:c4:e6:4c:d4:e8:e5:1b:ac:22:2c:
13:66:ae:f6:36:e7:1e:82:7d:cd:87:87:15:db:ac:f3:64:f1:
50:ec:0d:91:9e:82:5f:36:c0:f9:51:ad:78:ea:1c:5f:79:ed:
4b:e6:3d:1f:ea:a8:2f:ad:2b:3f:c7:ef:bd:22:19:4e:3e:4e:
d2:8a:61:06:3b:c0:9d:08:f3:f7:45:e4:a5:da:a7:3f:d2:88:
00:85:04:12:6f:33:e9:61:64:f1:2c:f3:25:18:fc:68:41:e9:
98:d4:65:96:86:e2:a9:fa:fd:95:c1:1e:c9:04:02:ba:9c:11:
8a:33:79:77:ea:c0:b5:75:f0:db:7c:54:d7:26:d6:c4:f0:25:
fe:ce:e4:aa:c5:38:44:72:93:d3:2e:98:ed:4c:2a:30:74:22:
99:36:e9:42:c2:5e:a1:52:90:88:d2:48:c6:4b:5e:28:4b:b0:
a6:87:6f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:32:19 2025 by rpki-client