Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/TfDOBJVmJoj40V_l3LjkaTEjm8g.roa
File: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (raw, json)
Hash identifier: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=
Subject key identifier: 4D:F0:CE:04:95:66:26:88:F8:D1:5F:E5:DC:B8:E4:69:31:23:9B:C8
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 01942444C36732D9CE2E24B2E9B6F99DE4B1
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/TfDOBJVmJoj40V_l3LjkaTEjm8g.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208128
IP address blocks: 193.108.110.0/23 maxlen: 23
193.108.110.0/24 maxlen: 24
193.108.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c3:67:32:d9:ce:2e:24:b2:e9:b6:f9:9d:e4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4df0ce0495662688f8d15fe5dcb8e46931239bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:00:fa:6c:65:51:95:08:1b:a4:ed:ae:30:98:
49:10:a8:f1:b8:43:2c:85:50:a8:d4:7b:7f:d3:5d:
66:de:49:06:53:d2:c5:7f:cb:92:bf:a9:8a:6f:26:
81:b0:d1:79:9d:6b:a7:c7:b6:2d:32:0f:df:8e:e3:
da:88:d7:04:cc:86:00:9e:30:77:6a:cc:cd:e8:68:
48:ed:60:8b:04:97:83:ff:07:a3:54:d5:91:ae:38:
a7:b7:77:6f:04:74:71:19:b0:d6:0a:1d:e3:a6:ff:
ff:e0:f1:3d:21:d0:ec:3b:58:ba:5c:cf:54:35:59:
60:75:2a:55:db:4e:aa:f8:f9:ec:29:3c:8f:6f:11:
df:46:f5:28:38:a3:12:23:55:46:1c:df:e2:dc:45:
b7:1c:ec:4e:e2:e1:ae:0b:fe:4d:e8:d9:03:0d:9d:
9b:7c:fc:5e:0e:79:e3:49:ab:4e:b7:d7:37:41:38:
9d:be:ae:72:7e:1b:78:45:fe:6f:b0:6d:2c:9a:bc:
1a:90:d1:52:6b:3a:68:0e:a2:08:1d:30:b0:ce:2b:
fe:6d:21:b4:b4:7f:51:ea:30:43:88:2f:d9:f3:d6:
b7:cf:62:02:7d:bc:ab:e4:fc:e8:cf:b0:0d:b1:c5:
01:2c:11:87:ce:ce:19:e2:7e:44:61:7b:9f:c3:ba:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F0:CE:04:95:66:26:88:F8:D1:5F:E5:DC:B8:E4:69:31:23:9B:C8
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/TfDOBJVmJoj40V_l3LjkaTEjm8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.110.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:78:5b:e6:70:35:ef:f8:ad:c3:b2:f0:34:e0:cb:2b:f1:55:
59:ea:ce:86:24:e8:81:3b:7f:bb:09:94:d4:62:10:71:1e:bf:
09:2d:f4:c7:5e:77:36:71:d6:3b:c9:ae:84:bf:24:21:19:bf:
0b:b3:f8:d3:8b:e3:ff:7c:43:28:7a:58:6a:ba:b6:48:28:a6:
e9:c1:87:51:e6:d8:ba:dd:e2:ab:7c:3a:7d:eb:ae:3a:e3:42:
d7:15:51:25:62:5a:9c:2c:fb:47:82:2a:fe:13:23:5a:76:c3:
04:fa:df:43:14:af:29:a5:c6:dd:bc:86:8c:5a:23:5a:7b:bd:
37:54:0c:e7:c0:05:df:2f:8c:e9:79:8c:68:1c:23:ef:cc:4a:
26:82:99:41:be:86:18:e8:e7:39:4c:dd:af:f1:d0:c7:62:35:
d6:eb:c3:23:45:e1:07:4f:a2:82:69:87:86:d9:3b:78:28:37:
78:1f:55:e0:c3:89:6d:a1:97:7e:0e:2e:e2:6f:69:b6:4a:86:
67:cf:15:a3:9a:7b:b2:35:31:a9:de:2a:4a:81:6a:45:c7:e0:
27:c0:f2:47:8b:fd:4c:01:e5:e5:67:a0:e4:f3:b1:e8:47:c8:
7d:ff:0b:a0:1f:d1:fc:4d:05:d2:82:12:1e:0c:1b:a3:7a:70:
af:fe:b3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:19 2025 by rpki-client