Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/tJXQLsxT-UxVLLn_2x7nL69sc6E.roa
File: tJXQLsxT-UxVLLn_2x7nL69sc6E.roa (raw, json)
Hash identifier: MZxrJB8/Il3/IFNB30p9Jt1oPkpT8JNNcQ3+QLtcdtg=
Subject key identifier: B4:95:D0:2E:CC:53:F9:4C:55:2C:B9:FF:DB:1E:E7:2F:AF:6C:73:A1
Certificate issuer: /CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Certificate serial: 01856FA715F472988549EBECD270A80B8E52
Authority key identifier: AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/tJXQLsxT-UxVLLn_2x7nL69sc6E.roa
Signing time: Sun 01 Jan 2023 23:24:59 +0000
ROA not before: Sun 01 Jan 2023 23:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61316
IP address blocks: 185.10.208.0/22 maxlen: 22
193.33.212.0/23 maxlen: 23
2a03:6540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:15:f4:72:98:85:49:eb:ec:d2:70:a8:0b:8e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac80ebd19a626e816e18d13eeb3bc21ae86916c5
Validity
Not Before: Jan 1 23:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b495d02ecc53f94c552cb9ffdb1ee72faf6c73a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:ab:30:8d:81:b8:be:54:51:a3:6d:19:b5:
99:f4:5f:dd:fd:55:7e:47:91:b4:89:28:a3:30:ee:
40:8a:c5:21:a8:06:9c:be:aa:40:a2:82:58:65:0d:
89:9a:bf:73:b8:d6:3c:2d:8b:bd:e0:a4:77:ea:21:
41:66:9a:09:0f:a6:ad:9a:1d:b4:ca:31:ce:ec:b6:
b6:cd:7e:26:45:dd:16:54:1c:1b:6d:d2:3f:ae:3a:
18:21:4e:9e:49:6f:4c:88:d8:76:59:62:b9:3e:80:
30:e3:0e:b1:7a:dd:2b:50:aa:76:39:bb:16:c0:e9:
30:66:4e:12:ae:61:97:83:bc:e2:89:24:37:2f:73:
57:06:40:56:1d:24:0d:6b:8c:63:f7:e0:b5:80:28:
8c:24:d8:87:a0:86:3c:0a:fa:71:76:6c:02:e2:d2:
91:7d:71:0f:9b:66:ef:3e:72:8b:90:fa:45:eb:d3:
02:85:92:76:c6:04:2f:34:cc:65:66:75:5f:8c:30:
ee:94:6a:54:a1:1e:e8:53:e4:c4:98:5f:75:90:63:
6f:f3:32:d9:32:ea:28:ca:da:d1:07:1e:7c:3d:48:
df:61:65:ab:9d:cc:d1:7d:aa:15:8a:e4:02:dd:b0:
a3:b4:88:02:40:1d:b5:9f:50:b3:f1:d6:10:ff:f1:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:95:D0:2E:CC:53:F9:4C:55:2C:B9:FF:DB:1E:E7:2F:AF:6C:73:A1
X509v3 Authority Key Identifier:
keyid:AC:80:EB:D1:9A:62:6E:81:6E:18:D1:3E:EB:3B:C2:1A:E8:69:16:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIDr0ZpiboFuGNE-6zvCGuhpFsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/tJXQLsxT-UxVLLn_2x7nL69sc6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/61b3ef-d140-4ab6-9c60-ac3c77b677a6/1/rIDr0ZpiboFuGNE-6zvCGuhpFsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.208.0/22
193.33.212.0/23
IPv6:
2a03:6540::/32
Signature Algorithm: sha256WithRSAEncryption
63:34:fb:35:06:b1:d3:c5:f9:bd:c0:17:ed:8a:63:20:e6:17:
bc:0c:7c:ed:70:f0:6b:c1:c7:7a:da:3a:9f:ac:43:ec:65:52:
0d:88:61:bd:49:ba:a3:70:3d:79:cf:27:1c:4a:6c:ae:1f:c0:
9f:40:3a:52:f2:76:e2:09:42:e3:eb:f5:da:8c:09:89:22:b1:
70:d5:f6:da:a1:15:f3:81:9f:c4:cc:10:a4:ca:6d:46:d8:ec:
be:43:9e:f3:4e:30:55:f3:32:a8:ca:5f:44:88:55:46:20:6a:
81:29:29:76:77:0d:cb:fd:0b:76:28:b6:6b:aa:4a:29:9a:c5:
2e:d6:e7:47:7a:f2:23:38:a4:31:79:cf:51:2d:f4:3b:b0:56:
e0:d5:aa:ec:5c:39:05:75:83:f7:da:76:db:aa:fc:3a:5e:ef:
3b:7d:80:01:9d:68:93:db:04:c6:bc:19:27:3c:b9:b9:c4:e9:
8b:62:68:b7:63:38:89:d4:40:c9:8c:0e:2d:2f:00:e0:17:5d:
f7:de:41:c3:1e:19:60:c2:46:48:97:6e:05:c9:c7:20:cc:15:
15:a0:3b:f6:1b:61:82:c9:9d:5f:7f:44:15:95:32:69:9a:18:
5d:9e:3c:1f:2a:16:5d:3c:a4:ac:cd:e4:68:a5:b5:d5:1c:7a:
c8:5c:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:00:53 2025 by rpki-client