Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/TLQxNUtLVfORhjXoTvKCLWFfaBI.roa
File: TLQxNUtLVfORhjXoTvKCLWFfaBI.roa (raw, json)
Hash identifier: JYG7x40Ue2E8ZUpO85ky8eT8r/MSQqCpmUrwUoEowjs=
Subject key identifier: 4C:B4:31:35:4B:4B:55:F3:91:86:35:E8:4E:F2:82:2D:61:5F:68:12
Certificate issuer: /CN=bd2aac0640e07c735e13488ae87035bd083b5a21
Certificate serial: 0310E9B4
Authority key identifier: BD:2A:AC:06:40:E0:7C:73:5E:13:48:8A:E8:70:35:BD:08:3B:5A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSqsBkDgfHNeE0iK6HA1vQg7WiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/TLQxNUtLVfORhjXoTvKCLWFfaBI.roa
Signing time: Sat 01 Jan 2022 11:04:02 +0000
ROA not before: Sat 01 Jan 2022 11:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8677
IP address blocks: 193.41.176.0/22 maxlen: 24
194.9.220.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51440052 (0x310e9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2aac0640e07c735e13488ae87035bd083b5a21
Validity
Not Before: Jan 1 11:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4cb431354b4b55f3918635e84ef2822d615f6812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:35:92:b6:ee:ac:8f:3d:f1:82:97:ad:83:
f2:c3:48:6e:e3:95:b0:13:a1:9e:9e:f1:ee:93:a1:
32:0d:22:eb:81:2a:60:76:01:da:20:af:22:e3:70:
4b:83:c3:9b:e7:07:78:18:d5:47:d6:0e:c6:70:8f:
6d:45:0a:98:23:18:fe:84:26:3f:42:74:fa:bc:06:
d7:ad:1e:81:0d:2a:df:11:10:d0:7c:4d:b5:f0:d8:
78:a1:4a:f1:15:29:b2:eb:be:36:0e:dd:4d:08:a2:
2f:ac:a0:9b:ff:f1:89:bb:82:4a:c0:c3:10:fa:e0:
38:bb:ba:1e:e7:2d:90:81:56:21:50:e5:be:4e:2c:
9d:2a:4b:4e:0b:d2:78:08:3a:a2:b2:cd:f7:8e:d6:
99:65:70:c2:83:0d:f6:03:37:5f:46:49:89:95:10:
ab:86:8b:67:99:d2:9b:dc:e6:3f:cc:e3:3b:7d:df:
41:c3:fa:f9:23:4a:7e:33:af:09:9c:74:ce:7d:45:
18:2d:e3:1a:3a:1a:9b:21:b0:f2:5c:6c:62:d0:e7:
0f:e2:62:47:7e:fe:12:e9:42:7b:c4:41:8e:e2:e7:
71:9f:82:d9:86:19:e3:b8:d7:3c:92:4c:18:a0:fc:
19:e2:4e:30:00:85:1b:ea:15:6f:a0:84:57:02:4c:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B4:31:35:4B:4B:55:F3:91:86:35:E8:4E:F2:82:2D:61:5F:68:12
X509v3 Authority Key Identifier:
keyid:BD:2A:AC:06:40:E0:7C:73:5E:13:48:8A:E8:70:35:BD:08:3B:5A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSqsBkDgfHNeE0iK6HA1vQg7WiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/TLQxNUtLVfORhjXoTvKCLWFfaBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b281ce-0e59-4911-82aa-0a08e47f27d1/1/vSqsBkDgfHNeE0iK6HA1vQg7WiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.176.0/22
194.9.220.0/23
Signature Algorithm: sha256WithRSAEncryption
22:36:ec:9a:6f:21:b1:c8:b0:22:2a:21:ae:ef:70:d3:56:8b:
08:0c:ef:c4:0c:68:cb:f2:17:af:5c:5d:56:ad:8f:cf:31:d0:
8a:df:bf:92:37:3f:ca:43:2b:76:aa:a3:46:1b:ab:dd:7d:3b:
16:74:88:27:a5:1a:2c:f1:3a:a1:2e:b1:56:36:b9:0b:9d:04:
66:3f:75:cb:42:27:df:a4:5a:80:22:c7:c7:91:d5:f4:55:5c:
a6:f0:a6:f8:74:88:a7:cd:f2:44:6d:18:65:f5:07:c4:03:09:
4b:e6:f3:c4:10:3e:23:23:5f:d6:47:b8:06:ff:7a:4c:ff:ad:
95:2e:79:5d:ea:3d:20:27:59:1f:e2:94:c2:f7:2e:8d:4a:c1:
47:58:db:57:8b:a2:1b:b3:15:26:2a:4f:42:2f:ba:47:d4:01:
36:c6:48:b1:1b:37:23:db:8f:18:4e:c7:be:01:a0:31:2b:22:
04:23:56:93:34:95:b8:cc:e9:94:7e:41:5d:8d:b8:00:26:69:
ad:15:b9:e5:cc:89:98:8d:75:7b:21:20:f9:c4:ee:6c:08:b4:
7f:0d:16:89:02:c3:80:80:0d:94:fe:db:2e:96:94:9e:eb:5a:
1b:cb:56:64:30:a1:a9:e6:2d:0c:c3:2d:1b:10:65:11:d0:3c:
15:90:15:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:33 2025 by rpki-client