Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/TWprmIRYABwJKC3e_3_5wzunOVk.roa
File: TWprmIRYABwJKC3e_3_5wzunOVk.roa (raw, json)
Hash identifier: ax2e42jwFW+IhzbsKHYLodyYVLy/wsVmS87dwyQkShM=
Subject key identifier: 4D:6A:6B:98:84:58:00:1C:09:28:2D:DE:FF:7F:F9:C3:3B:A7:39:59
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 01944949C5A04D76FD44B22783E9CB6DB0F3
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/TWprmIRYABwJKC3e_3_5wzunOVk.roa
Signing time: Thu 09 Jan 2025 04:19:18 +0000
ROA not before: Thu 09 Jan 2025 04:19:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214729
IP address blocks: 193.104.198.0/24 maxlen: 32
2a00:8740:f002::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:49:49:c5:a0:4d:76:fd:44:b2:27:83:e9:cb:6d:b0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 9 04:19:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d6a6b988458001c09282ddeff7ff9c33ba73959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:2e:c1:60:a9:a4:5d:04:aa:76:30:65:41:
86:13:f5:ec:15:02:68:62:61:3a:18:da:04:6b:3a:
39:08:d1:55:b4:87:cf:bc:14:ce:d8:0b:21:5c:44:
40:6f:9a:c8:70:cc:b5:a1:47:af:9b:6b:63:f6:07:
83:e2:50:89:bb:fa:ec:c4:9b:10:ba:5a:3d:89:c9:
9c:81:64:df:9c:fb:e3:3f:e3:d2:a3:af:30:fe:eb:
31:bd:01:09:36:72:c0:03:f6:7e:83:0e:36:02:57:
9f:be:3b:94:03:f1:a0:fd:e5:7c:2c:69:fa:e2:6f:
d8:7c:87:24:dc:89:9e:4c:b7:76:5a:f6:de:1b:c9:
7e:c0:e3:f1:f9:82:93:84:10:af:91:c5:35:79:3c:
1f:fa:57:cb:39:2c:72:2b:45:34:1d:e1:27:74:ff:
6b:53:0d:eb:85:8e:7e:73:1d:df:02:d1:c6:05:30:
fe:1d:0f:27:b0:b0:8c:56:57:18:ff:2e:a4:b9:b5:
be:5d:73:05:75:28:15:10:7d:de:fd:3d:dc:4b:60:
b2:b7:17:e1:c5:a7:c8:ca:67:35:dc:14:23:de:58:
35:ff:f3:30:d4:8e:5b:d4:85:f8:d3:39:d5:a2:bb:
49:38:63:87:8c:02:53:ae:72:90:c9:37:3c:ab:22:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6A:6B:98:84:58:00:1C:09:28:2D:DE:FF:7F:F9:C3:3B:A7:39:59
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/TWprmIRYABwJKC3e_3_5wzunOVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.198.0/24
IPv6:
2a00:8740:f002::/48
Signature Algorithm: sha256WithRSAEncryption
71:5a:33:ee:c4:d0:cd:df:4a:dc:dd:74:06:dd:9a:f5:ec:4a:
75:14:c5:b0:f3:7d:3f:02:fe:ea:e2:8b:2a:77:76:bd:7d:a3:
56:96:15:99:e2:1a:0e:cd:2e:d6:8c:e2:be:43:d2:7f:44:36:
ee:6d:c3:9c:99:9b:a5:f7:22:05:fb:b3:b0:e2:e0:26:8d:de:
8c:32:b8:a5:2e:a9:31:12:4d:ad:ab:f3:9b:b6:f1:e0:ca:de:
75:19:d4:88:2d:24:b3:3d:82:b7:ce:fe:a1:91:db:2b:f9:14:
e6:da:69:5d:55:d8:24:7c:47:20:d4:c0:4a:c4:e6:ad:4b:e9:
ff:aa:7d:cd:e1:8c:4e:14:36:94:7f:fd:43:cb:9d:2d:37:39:
b3:5c:7e:db:b0:0d:d6:4a:5f:ba:94:3e:68:2a:02:52:70:a1:
56:dd:53:41:4f:d1:6a:c2:0d:87:89:da:01:a5:15:a2:97:79:
e3:22:d6:ec:be:9f:32:e4:e4:b6:a3:ba:7d:a2:68:1c:7b:05:
24:c5:04:ee:90:69:b2:ee:79:5e:6a:4f:78:aa:f0:5d:69:79:
73:9a:27:89:c6:56:bd:2a:46:ae:bf:25:ac:6f:4d:90:c0:da:
dc:b9:2d:e3:3e:5a:db:ca:70:54:84:44:7f:28:c8:9f:c3:c1:
41:ca:3a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:13:22 2025 by rpki-client