Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6f9a6d-9b1a-4fcc-ad1f-ebab7c3a35de/1/TrtJXy2KgaNdHeAOtTRD2O_LG4A.roa
File: TrtJXy2KgaNdHeAOtTRD2O_LG4A.roa (raw, json)
Hash identifier: qCISxt6pVQL4qxKH6uhMdYoxDRFD1jVvQ9JF3wN+n/s=
Subject key identifier: 4E:BB:49:5F:2D:8A:81:A3:5D:1D:E0:0E:B5:34:43:D8:EF:CB:1B:80
Certificate issuer: /CN=d0f94226321badf0aec9acec2376e246ad9d1973
Certificate serial: 0182082AF83C452F6037697F1C5285AF4542
Authority key identifier: D0:F9:42:26:32:1B:AD:F0:AE:C9:AC:EC:23:76:E2:46:AD:9D:19:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PlCJjIbrfCuyazsI3biRq2dGXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6f9a6d-9b1a-4fcc-ad1f-ebab7c3a35de/1/TrtJXy2KgaNdHeAOtTRD2O_LG4A.roa
Signing time: Sat 16 Jul 2022 18:00:09 +0000
ROA not before: Sat 16 Jul 2022 18:00:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207925
IP address blocks: 193.143.226.0/24 maxlen: 24
2a10:8700::/32 maxlen: 32
2a10:8703::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:08:2a:f8:3c:45:2f:60:37:69:7f:1c:52:85:af:45:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f94226321badf0aec9acec2376e246ad9d1973
Validity
Not Before: Jul 16 18:00:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ebb495f2d8a81a35d1de00eb53443d8efcb1b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:fe:79:36:dc:4a:43:95:53:80:c3:e9:ec:
8a:cd:6b:70:0f:da:3e:ea:ec:3d:30:81:b1:e6:bd:
04:24:72:5e:a3:6e:fd:b9:2c:f0:f8:bd:ab:28:1b:
25:e3:59:03:a8:3a:c1:5b:73:52:b2:8c:48:9c:1b:
04:f5:f7:c9:7c:01:ba:32:d6:17:50:63:54:f5:27:
55:e6:b1:af:87:4c:ea:17:aa:76:af:2b:83:e5:a2:
c0:dd:14:88:7c:6e:83:c1:7d:2c:d4:34:5f:e0:68:
07:cc:fe:3b:c4:b4:f0:9d:1b:3e:0b:6c:77:7b:36:
78:48:03:c5:f8:6a:5f:cf:0b:41:f5:f5:58:b9:63:
b7:bd:eb:f9:cf:ae:8e:d8:3e:63:4a:16:cf:36:5f:
4b:59:d2:bd:0e:df:0a:20:53:92:71:9b:6b:e8:7d:
98:ca:f0:71:b5:de:23:ca:1d:f8:e0:a3:e8:02:ff:
06:65:ab:30:59:ff:ce:21:7e:dd:b7:43:ee:f8:4f:
eb:9e:cd:5b:97:80:df:94:2e:e7:7b:eb:49:15:5d:
18:08:d3:c0:09:6c:af:81:10:4d:c9:86:9a:11:73:
1a:eb:7a:c7:f9:2c:85:6e:84:1d:1f:ec:e7:0c:91:
d8:24:41:11:92:22:d0:53:22:95:5a:46:3a:3e:c3:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:49:5F:2D:8A:81:A3:5D:1D:E0:0E:B5:34:43:D8:EF:CB:1B:80
X509v3 Authority Key Identifier:
keyid:D0:F9:42:26:32:1B:AD:F0:AE:C9:AC:EC:23:76:E2:46:AD:9D:19:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PlCJjIbrfCuyazsI3biRq2dGXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f9a6d-9b1a-4fcc-ad1f-ebab7c3a35de/1/TrtJXy2KgaNdHeAOtTRD2O_LG4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6f9a6d-9b1a-4fcc-ad1f-ebab7c3a35de/1/0PlCJjIbrfCuyazsI3biRq2dGXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.226.0/24
IPv6:
2a10:8700::/32
2a10:8703::/32
Signature Algorithm: sha256WithRSAEncryption
34:36:63:74:38:32:f6:8c:0e:41:66:04:4b:9a:91:54:1b:97:
18:f2:12:1f:7e:8e:b3:db:65:a9:c6:e3:22:f4:d3:c8:de:db:
2d:d4:1f:97:18:78:11:f5:8e:bb:94:fb:b8:5a:da:0f:e8:be:
9e:59:6d:c7:e2:ae:15:c4:9e:2f:49:9e:ab:c2:c2:6b:aa:5d:
91:2c:ab:db:35:4a:bd:16:f8:33:3c:9c:5d:22:05:2a:3b:34:
8c:60:1d:5b:a7:7a:5c:03:c0:af:71:96:7d:87:0e:e9:c0:b5:
36:62:ed:43:1c:9b:16:1e:56:cc:11:ca:f5:09:c6:30:74:f2:
a2:3d:ae:ba:4a:9f:37:7a:30:b2:59:c6:66:40:7b:9f:98:59:
ed:46:44:f8:db:b1:c9:15:6e:7f:06:98:79:36:f2:af:c5:5e:
8c:57:51:c6:cd:85:04:5f:d1:a5:08:54:65:f4:11:c1:8e:ad:
d2:6a:cb:41:eb:88:14:1a:fb:16:ee:77:fb:82:4e:fd:3f:6a:
4c:26:d3:8b:5f:58:1a:e5:f0:f3:c0:cc:04:9c:9c:e6:a7:90:
15:13:23:79:c2:68:16:a2:3d:98:b9:c4:33:61:c8:78:98:27:
e1:cc:6f:ff:c3:c6:77:67:30:34:cb:eb:54:8c:ba:c2:01:a3:
4a:81:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:46:24 2025 by rpki-client