Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/tqt1nX2IFnIj6rwxMYwoMfH1srI.roa
File: tqt1nX2IFnIj6rwxMYwoMfH1srI.roa (raw, json)
Hash identifier: cTXWmveM2bua+zB5JGch+b8o2S/NihR/goxqAkfqobw=
Subject key identifier: B6:AB:75:9D:7D:88:16:72:23:EA:BC:31:31:8C:28:31:F1:F5:B2:B2
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E83332BCBAD30AB750494B0196674A
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/tqt1nX2IFnIj6rwxMYwoMfH1srI.roa
Signing time: Mon 02 Jan 2023 14:34:58 +0000
ROA not before: Mon 02 Jan 2023 14:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44658
IP address blocks: 213.175.104.0/24 maxlen: 24
213.175.105.0/24 maxlen: 24
213.175.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:33:32:bc:ba:d3:0a:b7:50:49:4b:01:96:67:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6ab759d7d88167223eabc31318c2831f1f5b2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:08:aa:c3:a1:9e:8c:cb:b9:79:00:0f:52:f1:
a7:3e:46:24:c8:67:3c:83:60:76:b7:dc:26:03:59:
2f:a6:89:57:16:b2:18:08:08:18:ce:6a:88:0f:0a:
84:80:29:50:41:08:e4:67:1b:b6:4f:78:94:da:d4:
6b:16:c4:32:08:25:1c:ed:4d:9d:d3:1d:bb:1d:c3:
83:1d:be:76:70:ae:fc:3f:c6:0c:45:53:67:d2:a3:
88:70:9e:2e:a3:42:85:8f:5c:ec:d3:7c:44:6a:19:
6b:b7:12:58:48:bb:63:64:2b:7b:b1:24:7b:7e:6a:
04:7b:c6:17:8b:e9:14:90:ce:4a:42:1a:bc:a2:d9:
b5:19:82:24:78:d1:7e:e4:5f:fc:24:73:8c:7a:d2:
a7:e2:30:70:74:5d:a7:4a:ec:57:77:13:b2:8e:f6:
31:1a:88:de:51:4e:dc:1e:31:4a:3c:29:a9:38:78:
25:55:25:0b:c8:13:13:70:39:c2:a3:6f:98:17:c5:
05:93:c4:2e:c1:17:59:45:09:4f:82:e4:d3:02:15:
74:53:cc:8e:bb:98:48:6b:8e:e2:98:31:a6:42:d9:
09:ea:b8:90:34:de:63:05:04:0d:f5:03:25:c6:8f:
64:3a:40:39:f1:fe:cf:7a:3e:95:31:c0:7c:ff:80:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AB:75:9D:7D:88:16:72:23:EA:BC:31:31:8C:28:31:F1:F5:B2:B2
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/tqt1nX2IFnIj6rwxMYwoMfH1srI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.175.104.0-213.175.106.255
Signature Algorithm: sha256WithRSAEncryption
2e:83:a6:1a:c9:f5:82:e0:fc:63:b1:21:f1:c5:af:db:86:f6:
90:ce:b3:e7:32:f1:da:95:be:b6:0f:49:7d:e8:0a:48:00:81:
62:62:43:62:96:7e:89:8b:f9:fd:cb:a1:20:68:82:5e:04:09:
df:1d:fa:8f:14:2b:41:08:ca:a3:64:df:36:62:42:5b:2b:57:
20:b5:df:49:1a:3b:8e:5f:61:8d:b9:db:20:e0:6e:af:bf:be:
61:5d:4b:3f:d6:56:15:ad:b1:29:ec:a1:3b:60:02:b0:04:03:
75:3c:bd:e5:91:14:b2:15:21:b0:cf:29:8f:c1:bc:c3:2c:72:
05:2a:78:a6:b7:b0:fd:75:86:ea:bd:c4:f8:29:f5:04:31:16:
20:4e:56:6b:f8:f8:c9:57:9d:8c:8a:5a:79:20:b6:8e:19:bc:
b5:57:4b:40:bc:6d:27:ad:73:77:69:5f:66:ea:4c:72:32:6d:
e6:af:af:63:e8:07:7b:8a:c7:d7:a0:91:0f:42:9f:6f:1f:c9:
f8:9d:c5:03:f7:d9:69:b6:7e:88:78:39:56:25:5b:2a:92:60:
42:c0:d3:98:85:4c:7c:cf:f9:c4:c1:34:fc:9b:3f:50:8e:8e:
b1:c4:0a:2c:3f:4e:02:41:73:de:bf:f1:f2:b3:30:80:13:87:
b4:85:28:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:03:31 2025 by rpki-client