Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tjdSYCE35MPLY9Eaz6Fa0qH8sS4.roa
File: tjdSYCE35MPLY9Eaz6Fa0qH8sS4.roa (raw, json)
Hash identifier: Lk56WC/ZPslK0OaopVcDxGYRcr/VJ9jCftdTbu8q4uk=
Subject key identifier: B6:37:52:60:21:37:E4:C3:CB:63:D1:1A:CF:A1:5A:D2:A1:FC:B1:2E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019500EFB06972ACE1E53D83FBE0E9A0F142
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tjdSYCE35MPLY9Eaz6Fa0qH8sS4.roa
Signing time: Thu 13 Feb 2025 20:11:02 +0000
ROA not before: Thu 13 Feb 2025 20:11:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213438
IP address blocks: 93.123.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:00:ef:b0:69:72:ac:e1:e5:3d:83:fb:e0:e9:a0:f1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 13 20:11:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b63752602137e4c3cb63d11acfa15ad2a1fcb12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f4:32:be:57:e5:ac:f3:21:80:4f:1a:5e:38:
ee:4d:bb:ea:0f:40:eb:9a:93:5f:20:c2:73:aa:a9:
f2:67:2e:b4:8b:31:57:94:d0:0b:03:91:c1:0f:73:
7e:5c:cf:e6:d5:f2:a6:78:35:4c:29:d7:b1:87:77:
02:4b:0d:05:b5:16:17:05:1c:ad:23:27:c8:8a:9d:
3a:7a:3c:64:05:13:af:8c:91:ba:2b:5e:3a:b3:f0:
78:1a:02:b5:99:b4:cc:ed:39:97:80:15:87:9e:b3:
ef:b1:15:90:da:ef:ad:ea:74:93:0e:cc:5c:aa:5d:
af:72:ac:50:39:3a:69:3e:81:98:39:d7:f0:1a:d0:
0e:6a:a8:56:23:6d:8e:64:46:e6:44:6f:32:f9:1b:
98:dc:71:eb:22:a1:2b:f3:db:9d:98:c5:91:27:6d:
51:2e:61:2e:e1:e4:ca:64:ff:f2:a6:8c:94:43:f3:
50:f7:c7:b5:18:60:2c:bb:1d:42:fa:5e:2e:14:cc:
6b:22:a7:0c:af:47:e2:a4:4c:f1:04:83:5c:96:56:
19:ff:5b:c3:bc:5f:b2:d7:08:a4:be:f8:11:d1:2f:
7a:48:c9:2c:bb:7b:fb:8e:ed:b3:4e:51:07:01:93:
dd:06:7b:53:e8:09:ba:b8:cd:a1:af:6f:e4:09:ec:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:37:52:60:21:37:E4:C3:CB:63:D1:1A:CF:A1:5A:D2:A1:FC:B1:2E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tjdSYCE35MPLY9Eaz6Fa0qH8sS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.118.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e6:1a:b2:8a:68:99:21:73:01:e1:73:f7:c7:44:0b:97:48:
6e:1e:83:80:e1:8c:c9:d8:b2:83:54:91:40:a0:7c:49:e5:d9:
a6:79:8a:03:c9:63:46:44:02:af:04:ae:02:df:2c:50:ad:d6:
79:34:bb:cd:c7:9f:10:e6:a6:75:8c:40:02:34:30:26:64:9a:
b2:d9:df:eb:b3:ea:9e:3f:9d:a1:a0:dc:ed:37:6a:e2:17:77:
e0:9a:56:c4:ec:86:09:be:b9:73:25:8e:32:53:77:4c:49:0b:
f2:55:0c:ee:88:4b:d2:49:c6:e4:9f:fe:18:c2:c2:df:4e:9f:
7a:fb:17:4a:43:1d:bc:40:c3:2e:54:56:a4:2b:82:37:a4:65:
bd:9d:4d:52:52:95:e5:45:62:d2:30:b7:01:82:bd:c5:5a:bc:
28:89:a0:19:1f:2b:6d:79:69:d7:56:f2:05:88:d1:b6:e3:33:
9c:64:95:01:b1:26:12:fb:c6:21:f9:2d:46:8f:9f:a9:c1:b1:
f6:95:b0:91:97:2c:d7:34:6a:e7:12:67:f3:56:0e:6e:8c:15:
7e:8e:b4:27:8c:5e:58:6d:20:2b:1b:5b:7f:fa:3e:36:12:b7:
1e:c8:fc:e0:78:57:3a:f1:8d:f3:c0:ca:a9:8c:91:d5:0f:c0:
26:a3:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:25 2025 by rpki-client