Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/tlinpnG0x8FYKHJRgnQl2MhzT9I.roa
File: tlinpnG0x8FYKHJRgnQl2MhzT9I.roa (raw, json)
Hash identifier: xcfqy/HROXDkvuMKBhdlM9zJKi6smcXuo63HPeYf4G4=
Subject key identifier: B6:58:A7:A6:71:B4:C7:C1:58:28:72:51:82:74:25:D8:C8:73:4F:D2
Certificate issuer: /CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Certificate serial: 019427B3F3C6B3359BE5A8BCF0EB0F0AC75E
Authority key identifier: 6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/tlinpnG0x8FYKHJRgnQl2MhzT9I.roa
Signing time: Thu 02 Jan 2025 15:48:12 +0000
ROA not before: Thu 02 Jan 2025 15:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211797
IP address blocks: 185.193.160.0/24 maxlen: 24
185.193.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:f3:c6:b3:35:9b:e5:a8:bc:f0:eb:0f:0a:c7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f9e9696dccf6c1a432090408514aecdc3f60739
Validity
Not Before: Jan 2 15:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b658a7a671b4c7c158287251827425d8c8734fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:9c:ac:90:96:6f:92:b6:3e:b1:75:fb:7a:
8a:42:bb:16:c7:ba:51:66:a1:21:42:3a:b4:31:46:
b6:e9:2e:b8:60:fd:9b:1f:8b:2b:9d:4d:b9:03:48:
26:25:02:d3:0f:3d:80:f1:97:83:8c:40:ac:60:9e:
b8:00:c0:34:7d:9d:e0:ad:2d:63:32:0e:7f:08:82:
81:80:b1:5d:c0:4a:41:08:4a:1a:9a:61:5c:36:2b:
81:3e:d7:fc:c3:2e:39:a6:28:81:9c:b3:61:4b:44:
aa:7f:bb:82:9d:49:95:19:00:f0:c6:79:5a:f8:c3:
74:07:8b:4d:3d:97:ab:2d:57:f0:fc:70:e8:2f:5e:
f8:d7:a6:05:49:36:a1:b4:d5:6b:a4:a2:27:8a:16:
79:13:bd:d9:ab:8a:4c:64:64:75:49:82:8b:4a:45:
14:25:53:28:09:55:c0:89:58:66:4b:0a:df:ce:16:
ce:da:22:e3:a3:43:30:94:8d:5d:bd:df:5c:f7:b3:
87:f8:27:94:82:60:dc:85:d1:6c:15:b5:bf:5f:4d:
b2:98:44:14:b3:32:03:59:07:b2:86:dc:4b:64:54:
a1:44:8a:f4:37:ed:44:6a:dd:fa:d4:97:1f:d9:8f:
b2:56:55:f8:66:5b:d6:a5:7b:6a:28:e4:e0:67:a2:
1f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:58:A7:A6:71:B4:C7:C1:58:28:72:51:82:74:25:D8:C8:73:4F:D2
X509v3 Authority Key Identifier:
keyid:6F:9E:96:96:DC:CF:6C:1A:43:20:90:40:85:14:AE:CD:C3:F6:07:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b56WltzPbBpDIJBAhRSuzcP2Bzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/tlinpnG0x8FYKHJRgnQl2MhzT9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/57cd72-33e4-42dd-9f22-baf4e0b4a69e/1/b56WltzPbBpDIJBAhRSuzcP2Bzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.160.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:fa:7f:72:ca:3f:dc:a7:49:2e:20:b0:69:5a:f2:2f:9b:9b:
3d:a9:5d:c1:06:f9:d9:9e:e3:51:08:b6:09:51:6c:ec:81:76:
d9:77:84:15:b5:e5:e9:46:36:25:ca:db:ac:e2:23:0a:4b:9f:
90:b5:d7:be:ac:07:b1:fb:45:c7:52:51:d1:be:ab:28:cd:ac:
61:94:c6:1e:c4:14:de:e9:a5:d5:63:9c:5c:5a:3a:aa:a0:00:
81:f8:eb:95:fc:31:61:73:e5:b1:cc:0e:a0:48:2d:34:fc:1d:
c9:c4:4d:f9:64:4e:cc:c3:a3:40:6f:90:73:29:ba:3f:72:52:
0c:2f:a4:65:ff:5e:18:aa:87:c4:ac:68:95:c5:59:64:27:f9:
b6:af:bb:50:19:ba:47:79:78:17:d9:4b:e7:81:53:ea:f5:64:
8c:52:f1:a6:fa:af:04:f8:cd:57:16:c4:ce:60:09:d9:2a:6c:
8c:b0:f9:c1:fb:c7:9b:fe:0a:fa:e4:ca:9a:16:f7:08:1a:e4:
95:94:85:4f:34:75:7a:a0:0d:89:d3:85:6a:97:57:0f:96:d5:
17:64:1d:fa:04:71:a1:e3:7a:75:f7:58:bb:46:98:22:b1:71:
ec:7a:d7:ea:15:10:e1:cd:7b:b9:df:43:ad:c6:de:36:fb:e0:
0e:39:29:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:52:18 2025 by rpki-client