Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/TRtXAvv_TojiVGTgeXS4Ukc_o2o.roa
File: TRtXAvv_TojiVGTgeXS4Ukc_o2o.roa (raw, json)
Hash identifier: ukDhmz4LtOdN80XhXqnwX0WD3wukoMErz1mTtDlOZj0=
Subject key identifier: 4D:1B:57:02:FB:FF:4E:88:E2:54:64:E0:79:74:B8:52:47:3F:A3:6A
Certificate issuer: /CN=951c8b406e8299a7294dd7224570fc32b629dc6b
Certificate serial: 01856F66C3CF1575DF197D86FD759C8141E1
Authority key identifier: 95:1C:8B:40:6E:82:99:A7:29:4D:D7:22:45:70:FC:32:B6:29:DC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRyLQG6CmacpTdciRXD8MrYp3Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/TRtXAvv_TojiVGTgeXS4Ukc_o2o.roa
Signing time: Sun 01 Jan 2023 22:14:43 +0000
ROA not before: Sun 01 Jan 2023 22:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 193.56.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:c3:cf:15:75:df:19:7d:86:fd:75:9c:81:41:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951c8b406e8299a7294dd7224570fc32b629dc6b
Validity
Not Before: Jan 1 22:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d1b5702fbff4e88e25464e07974b852473fa36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:a9:05:d1:5a:da:39:79:1d:f3:1c:b6:8e:
e7:06:c2:30:5c:36:61:fa:8b:53:55:80:22:ac:fe:
a8:a7:7c:80:f4:f8:57:8a:77:76:30:0b:cb:a0:cd:
de:bd:a8:a1:02:1a:87:9f:15:fa:71:e0:b4:b1:19:
c9:a2:40:2d:14:d7:01:00:8d:9b:ec:1e:f8:75:fb:
3e:af:ef:f5:21:74:e6:bd:e0:5c:a2:f4:2f:f7:0a:
3f:48:7f:87:7c:0c:29:6a:8d:70:dc:4b:c6:24:d7:
53:c6:6a:91:9b:1e:b6:3b:b0:64:6e:b3:b3:42:78:
23:b9:2a:b2:9f:57:5d:6a:57:a3:68:42:28:53:13:
e5:cb:12:3a:7b:b1:2e:4d:26:1d:5b:3b:39:20:fa:
2e:55:c5:19:1e:bc:f2:f2:1e:a0:15:e6:36:d2:dc:
f8:9f:09:d3:a0:8a:cc:a7:7b:2b:a0:79:06:c9:cf:
a1:cd:c7:9e:ad:c0:f2:07:33:8c:72:02:2e:91:91:
c5:c6:d2:63:f0:b6:f8:0e:5e:76:40:e5:25:55:05:
42:7f:fe:96:09:15:fb:c6:67:38:a2:fb:9b:10:70:
19:ea:f5:f0:64:8a:13:2f:c0:c2:b5:8e:40:b1:a5:
2c:a6:63:23:7e:75:bc:87:d3:2c:cd:97:60:bc:23:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1B:57:02:FB:FF:4E:88:E2:54:64:E0:79:74:B8:52:47:3F:A3:6A
X509v3 Authority Key Identifier:
keyid:95:1C:8B:40:6E:82:99:A7:29:4D:D7:22:45:70:FC:32:B6:29:DC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRyLQG6CmacpTdciRXD8MrYp3Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/TRtXAvv_TojiVGTgeXS4Ukc_o2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/lRyLQG6CmacpTdciRXD8MrYp3Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.112.0/24
Signature Algorithm: sha256WithRSAEncryption
18:dc:e5:8a:5a:11:68:93:57:f5:46:67:1e:91:33:40:c2:7b:
39:fc:f1:2d:52:6f:f1:a6:72:3e:f2:4e:e8:20:e9:87:f9:b8:
86:26:cf:56:0a:21:c3:00:0f:6d:10:82:60:35:51:fe:f3:db:
a1:98:9a:8d:fd:06:f5:7a:89:08:d7:46:e7:51:18:30:d1:33:
da:e3:ec:94:b9:65:13:71:44:30:9c:c1:55:a9:63:33:10:1d:
26:59:c5:ad:7a:af:b6:8d:39:7b:b0:0b:b7:f9:bf:15:f1:68:
63:27:2b:a4:73:65:0c:ed:ab:be:b8:02:b4:6b:59:4f:e4:c5:
16:f0:35:66:8b:b3:13:e5:24:31:30:db:7a:be:a9:d8:92:88:
41:9d:37:5f:85:b5:73:63:ea:c6:2e:33:ea:00:11:db:ab:ee:
e3:f8:3a:77:d2:e8:9b:9f:fa:4c:9c:39:a1:66:75:80:7a:a4:
04:98:97:b0:26:ca:1f:9b:79:d3:27:ac:28:60:e3:9a:1e:bf:
bf:3b:e8:27:49:bc:ce:03:73:b6:e0:f0:4d:34:b0:07:58:7a:
dd:1f:68:4f:69:39:2f:57:36:7d:d0:03:12:d6:be:5b:5d:a1:
03:0f:76:01:90:0c:4c:1e:10:4c:74:46:4a:4b:6d:ab:93:c1:
7b:4a:b6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:39:47 2025 by rpki-client