Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/TMKuZ1JVrjbzybMEYWIRN3MbLCQ.roa
File: TMKuZ1JVrjbzybMEYWIRN3MbLCQ.roa (raw, json)
Hash identifier: MV8qspsQvxCiPR5zXs8qAOCd1Mizvi5V3cJDY6w6HUQ=
Subject key identifier: 4C:C2:AE:67:52:55:AE:36:F3:C9:B3:04:61:62:11:37:73:1B:2C:24
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 016E71
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/TMKuZ1JVrjbzybMEYWIRN3MbLCQ.roa
Signing time: Fri 11 Mar 2022 09:58:11 +0000
ROA not before: Fri 11 Mar 2022 09:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 193.228.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93809 (0x16e71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Mar 11 09:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cc2ae675255ae36f3c9b30461621137731b2c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ea:c8:d5:55:63:a9:a2:2f:94:e3:6f:c1:40:
4f:96:2b:6a:a6:1f:5f:6c:99:1c:f2:69:89:3f:5b:
71:cd:89:50:fd:a9:a7:95:c4:6a:f7:f7:e4:e9:36:
c3:64:09:79:28:55:51:0f:7f:17:6f:71:ac:43:ce:
b0:c3:a6:6b:2e:fa:10:be:35:73:42:5c:22:d4:e0:
5c:f1:01:95:27:22:90:1c:66:cc:e9:54:9b:70:c5:
4a:5c:10:c7:ee:d6:fe:f8:b4:3b:1b:ff:a9:90:87:
a2:48:fe:99:ba:a9:0f:6e:f4:61:7e:51:2d:f4:e6:
25:7b:bb:f3:23:2c:01:18:96:e4:45:a9:37:2a:f7:
77:bd:48:c0:6d:49:f1:5b:b8:24:3b:d5:3a:48:f5:
bc:0c:45:2d:0c:49:51:c5:13:f8:6e:71:8b:e3:67:
ef:74:0c:c3:0d:27:cf:82:6e:32:79:f9:7a:1d:a0:
60:d9:37:84:2f:a6:14:33:ff:1a:cf:26:ee:f1:01:
c6:17:d5:b6:c7:09:95:ea:5d:d7:e1:70:0f:71:00:
99:c8:99:df:62:61:54:2c:01:5f:b3:13:94:ac:42:
4c:42:90:c2:4f:4b:45:5a:f4:8b:09:80:44:dc:fc:
db:ae:17:06:e5:87:da:5c:96:ba:cb:09:ab:ad:96:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C2:AE:67:52:55:AE:36:F3:C9:B3:04:61:62:11:37:73:1B:2C:24
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/TMKuZ1JVrjbzybMEYWIRN3MbLCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.0.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2b:70:55:e8:55:74:25:ba:3d:89:c6:45:12:45:21:94:6e:
33:12:1e:63:24:0e:ea:db:9b:39:66:95:d4:c8:16:b5:07:92:
2f:36:b0:49:3a:88:cb:da:15:9f:2b:79:6c:92:62:da:0e:fd:
38:e7:d5:a8:1a:cb:71:56:b4:f7:e6:03:0c:5b:b3:77:3a:f4:
e7:f9:75:c9:19:99:5a:76:0c:92:02:63:2d:4f:a7:02:26:ce:
d6:67:ad:f2:9b:af:d1:85:b4:9d:41:67:67:56:49:da:9c:28:
06:12:bc:bb:50:91:26:fd:69:1d:e1:ea:48:2b:2a:33:aa:78:
d3:ff:dd:84:05:7b:53:a0:7e:25:61:2e:4a:00:0b:b3:eb:04:
01:3c:c6:17:3e:0f:5b:6e:11:63:d4:fa:2d:86:09:48:cc:4b:
85:bb:c2:e3:03:93:aa:7a:02:4b:32:dd:51:f4:cd:f0:6d:64:
06:db:bd:28:49:e6:22:68:69:17:b7:ea:51:39:9c:87:7e:71:
d5:58:2a:df:58:0a:4f:09:52:e9:18:12:9c:cf:09:99:68:b5:
49:ce:c4:ed:7c:1e:df:7a:33:73:e4:43:dc:f6:fe:f5:0d:6b:
b1:f1:4a:04:bb:73:21:d8:44:23:fc:bb:3f:04:53:de:4a:14:
bc:08:7f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:42:32 2025 by rpki-client