Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa
File: Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa (raw, json)
Hash identifier: 1/urxUwqVm4ILEtV4SR7woJSlB4+PTBY3yo3Lt2enUw=
Subject key identifier: 4F:3E:DA:33:D9:BA:75:66:40:1C:0C:62:18:A8:63:4E:D8:EC:A7:A2
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 019420D5EEE0F2667997E2B9588E747FCBFE
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa
Signing time: Wed 01 Jan 2025 07:47:58 +0000
ROA not before: Wed 01 Jan 2025 07:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.33.182.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ee:e0:f2:66:79:97:e2:b9:58:8e:74:7f:cb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f3eda33d9ba7566401c0c6218a8634ed8eca7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:fa:d2:da:a5:7b:23:a5:5b:0a:88:9e:c5:
e6:58:00:37:d9:1f:28:a9:6a:9b:78:d0:ee:88:8c:
30:bd:bf:73:3e:48:3c:39:af:2f:7f:3e:09:10:33:
25:84:72:29:0a:05:1c:79:7c:1c:ce:e2:f8:de:98:
95:1e:07:a6:c7:26:47:cd:df:b8:ab:9f:c6:2f:cc:
e1:64:01:ee:95:7b:6a:5b:99:b9:96:65:f5:3a:ba:
61:40:a6:e1:a7:8a:15:fb:52:9a:ff:2e:4c:6d:1b:
f1:9e:02:f8:d1:55:48:83:93:2b:9a:66:79:0e:b0:
be:48:6f:3e:ad:d3:76:4e:91:90:76:d7:24:6f:e6:
4f:4e:5a:9d:bf:f8:e2:27:2f:8d:4b:ed:7b:a3:3a:
aa:07:54:3c:00:d5:f7:e9:30:2a:46:a9:1d:e4:5c:
51:a9:6d:77:0f:47:23:a3:4f:c1:19:46:b6:8e:ff:
bf:b2:0b:90:3a:d7:ec:ca:ab:79:80:84:3d:c5:06:
a7:29:dd:b4:20:15:00:87:26:d2:2a:ca:d6:69:ce:
08:16:8c:77:30:bf:09:6a:c9:ae:5a:f0:75:11:20:
74:89:83:f6:ef:86:ae:a2:81:62:41:47:fd:2e:d2:
0c:6c:e6:b3:f3:8e:62:53:2f:f9:e5:f7:44:63:bc:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3E:DA:33:D9:BA:75:66:40:1C:0C:62:18:A8:63:4E:D8:EC:A7:A2
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.182.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:ba:1a:35:2b:d4:06:ac:50:86:f7:ba:77:e8:87:54:b7:5f:
01:7c:2e:60:10:1d:1b:dc:cd:a4:29:c7:83:74:fc:53:69:76:
27:ee:82:5c:42:7d:3f:2a:d2:a5:8c:a6:5c:fc:e3:33:d3:5d:
91:a6:24:09:ab:3d:a4:08:2d:d1:31:8e:49:10:d9:f5:9a:83:
ee:11:c2:14:a2:26:ce:cc:25:fe:69:70:13:c0:4b:56:b4:c9:
98:3b:d7:28:5f:86:9c:3f:f0:f3:d6:20:9b:db:46:bd:0c:9f:
c6:c2:7a:f3:3a:54:da:78:3b:a6:49:fd:20:3d:82:4d:ea:32:
4f:4a:5f:a8:71:83:1d:2f:c4:94:09:02:10:4a:e2:5d:e0:1d:
76:73:04:cb:d4:3e:a5:ae:e5:e5:c7:bf:8e:58:23:d4:b4:91:
bf:73:3a:ee:e0:4a:f5:4d:05:3c:58:50:a6:dc:fd:c4:4f:40:
07:e3:33:c3:06:db:f0:6e:31:47:d3:61:5f:d7:75:0f:8c:59:
f8:90:30:6e:65:da:6e:6f:37:77:ad:0d:85:3d:bc:1c:2e:74:
c4:ca:d6:9e:71:26:a2:07:ce:e0:4d:e2:9c:aa:f9:e2:69:94:
02:9e:75:bd:04:fd:c4:62:70:86:fc:48:05:f7:62:1f:15:fc:
ad:1b:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:30:32 2025 by rpki-client