Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/tanL-Od8fSFgUzHWSnn-wJATeQc.roa
File: tanL-Od8fSFgUzHWSnn-wJATeQc.roa (raw, json)
Hash identifier: y2Z1JlU4KhHRVIn3hdXA35bEXloxesOZQwuLLa14qX0=
Subject key identifier: B5:A9:CB:F8:E7:7C:7D:21:60:53:31:D6:4A:79:FE:C0:90:13:79:07
Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Certificate serial: 0194228D3EDF380E876611E397BE412AC0FF
Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/tanL-Od8fSFgUzHWSnn-wJATeQc.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33387
IP address blocks: 93.113.44.0/24 maxlen: 24
93.113.130.0/24 maxlen: 24
94.176.109.0/24 maxlen: 24
94.177.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3e:df:38:0e:87:66:11:e3:97:be:41:2a:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5a9cbf8e77c7d21605331d64a79fec090137907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:61:d0:96:2b:61:0a:d9:0a:e5:8e:16:38:
22:fa:01:c8:10:d0:2f:a1:37:07:60:48:eb:0b:73:
eb:d2:ec:07:16:55:a6:59:b7:11:c5:e2:02:bf:eb:
11:d6:3a:20:4d:bb:97:36:40:37:ae:23:59:da:1a:
84:d3:79:69:36:e5:2c:da:84:f1:bb:e9:44:0e:aa:
e8:27:ca:2b:49:6b:75:96:45:85:37:bc:81:52:ad:
b2:04:39:da:89:a0:64:46:38:73:30:ea:a9:d5:d6:
ac:0e:9f:a9:28:05:1f:c8:81:e3:af:50:be:94:79:
aa:e1:56:53:e1:6b:52:70:b0:1c:e8:43:b1:d6:66:
12:37:75:39:28:f6:3d:ad:f7:c8:38:14:4b:f6:39:
31:26:87:c9:12:2c:48:f5:49:d0:a0:ee:59:9a:54:
90:12:45:02:88:b9:33:9b:33:d2:75:ee:bb:ae:8b:
03:cb:96:b7:23:8d:e7:73:14:82:b9:4c:32:2a:39:
df:76:04:08:cc:41:33:22:6e:f2:f5:19:52:2e:c4:
99:2f:11:14:e0:a3:36:16:46:bb:f8:f1:e3:16:bb:
1b:62:47:6e:f6:c6:08:e4:95:ea:f6:8a:5e:0e:18:
43:80:6e:c2:ab:2e:1b:e6:18:91:00:71:87:f7:a7:
02:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A9:CB:F8:E7:7C:7D:21:60:53:31:D6:4A:79:FE:C0:90:13:79:07
X509v3 Authority Key Identifier:
keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/tanL-Od8fSFgUzHWSnn-wJATeQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.44.0/24
93.113.130.0/24
94.176.109.0/24
94.177.67.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:55:c6:3d:e9:24:de:aa:95:56:09:cd:43:a3:74:20:a1:d2:
0a:51:b9:7d:94:29:0f:be:8a:e1:9d:f8:4c:52:42:8a:bd:6a:
f9:86:5a:48:d3:71:e5:48:fc:23:be:c1:ff:a5:9f:ef:e5:d0:
54:00:53:fb:af:12:b8:89:c2:2e:e8:78:fc:74:0e:6d:73:05:
b8:73:9a:0f:56:d2:a1:81:0e:0e:6c:af:31:18:bd:fd:bf:1f:
0d:eb:a7:21:2d:5b:82:3f:91:63:85:ae:c7:2e:5d:d3:47:40:
42:fc:81:23:64:ac:d4:e1:5e:75:93:58:2f:10:c1:56:07:c4:
4a:67:b0:5c:99:13:26:73:3c:09:4c:57:f7:d5:3e:05:47:94:
b5:c7:29:d0:3f:ab:b3:da:0f:66:df:0c:19:a8:70:77:b5:1b:
03:d7:6c:9c:00:5f:25:29:21:1d:13:d6:85:33:0b:58:4e:17:
9a:57:32:59:6a:25:19:74:1b:d6:65:65:f0:40:5c:d4:c3:02:
a8:dd:73:61:51:19:ec:82:0c:37:05:b2:c0:d5:a1:2b:c7:96:
23:6a:1d:32:a6:ff:8d:6d:ae:05:38:2e:8b:57:20:7d:51:90:
69:17:a3:13:de:31:a2:b3:1b:07:20:95:da:4c:3d:67:11:c5:
c5:24:ad:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:06 2025 by rpki-client