Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/IzTLE4b5lDqpegZ1KkiaLyUb11A.roa
File: IzTLE4b5lDqpegZ1KkiaLyUb11A.roa (raw, json)
Hash identifier: jGqSCridatYK7NpRGljMKF9f+mxYkA4keFTBMsNcmco=
Subject key identifier: 23:34:CB:13:86:F9:94:3A:A9:7A:06:75:2A:48:9A:2F:25:1B:D7:50
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BC6808CEF4AC649293249C1D1F154
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/IzTLE4b5lDqpegZ1KkiaLyUb11A.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 109.122.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c6:80:8c:ef:4a:c6:49:29:32:49:c1:d1:f1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2334cb1386f9943aa97a06752a489a2f251bd750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:41:b0:e1:22:a6:f5:e7:49:a5:9c:83:c5:
af:ea:41:28:c0:1e:74:19:3a:fa:62:01:36:d6:8d:
c3:de:40:50:32:cd:48:f5:c5:27:6d:88:c4:5d:1d:
3a:f4:25:84:f5:04:67:d3:98:3b:47:23:f7:ed:d4:
1d:98:5f:07:5c:8d:91:2f:56:09:bc:aa:ab:58:cd:
8b:9c:4e:97:de:2c:90:f9:a1:2f:ef:66:66:fa:5c:
e9:7e:3b:37:a0:75:b8:ca:d7:f7:ea:04:48:30:1f:
91:6c:8b:fa:2f:44:59:bd:4c:dd:b7:b1:06:0d:87:
54:80:9b:ef:8c:48:36:cc:23:09:11:8c:54:28:4e:
67:f2:cd:6b:70:c8:f7:c5:63:5b:c3:c4:98:55:c5:
1f:d9:38:c5:f4:e9:b7:70:5b:62:df:80:33:0a:a1:
3c:22:a5:7b:bb:b0:94:ca:c2:ec:5c:d7:da:7a:ed:
b0:a7:8d:e3:30:79:eb:04:47:43:60:45:82:97:e8:
07:e6:91:f7:db:58:e4:0d:f9:8e:58:23:96:f3:78:
3f:7b:37:f0:aa:33:43:6a:af:63:44:ef:1d:48:42:
26:85:43:a7:e7:76:45:e3:ae:1b:59:fb:d9:66:dd:
0e:fd:ab:be:a9:23:ef:43:f8:4c:51:8d:80:f3:c0:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:34:CB:13:86:F9:94:3A:A9:7A:06:75:2A:48:9A:2F:25:1B:D7:50
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/IzTLE4b5lDqpegZ1KkiaLyUb11A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.47.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:49:1f:66:7f:ee:b7:5c:e9:a1:8c:57:90:f8:d2:9a:4d:90:
6d:0d:e9:b8:d0:5b:10:65:c3:03:ce:4c:a7:90:fa:90:e0:46:
92:42:bd:e3:56:81:01:10:50:bf:2b:2f:39:8e:53:a6:60:79:
c3:dc:93:fc:79:ef:0a:c1:d7:2b:42:a1:a4:36:f6:1b:57:0c:
3d:cc:d8:20:5e:63:c6:99:49:7f:6a:8a:b0:20:2d:fc:d6:61:
76:d0:3e:a1:0f:49:63:50:2d:b5:94:0b:f2:6e:2b:68:a2:5a:
fd:2d:9f:70:dc:83:ae:c2:d7:44:dd:95:8e:2e:0c:54:80:fb:
06:5c:21:f8:43:e7:39:fb:f7:59:71:e0:9e:60:32:16:cb:d7:
f9:50:74:3b:75:75:72:7c:e4:d8:ee:78:85:92:17:ad:4d:d4:
e7:0e:b8:8d:1b:ca:f3:6b:f4:f2:10:e9:73:0a:0d:ee:1a:b3:
e4:6b:5f:9b:e4:87:b8:04:d2:64:a4:dd:9d:75:d5:88:0f:ea:
2b:bf:0f:d8:ae:6e:0b:fe:87:38:1b:f3:30:ec:b3:a3:c7:1c:
33:0f:7b:05:b6:da:94:e2:46:93:21:e0:c1:b5:cf:6d:ee:8b:
6a:f0:32:f7:b0:6f:3a:f1:1d:03:33:12:f7:b1:59:1f:c0:b8:
0b:39:09:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:24 2025 by rpki-client