Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/tNraF_vYfkVNYT3rk3dbIhzsa14.roa
File: tNraF_vYfkVNYT3rk3dbIhzsa14.roa (raw, json)
Hash identifier: Cyq1XU96xKn0Vjeuoq5f1b6ik1hGAwtTzIf0Tu199FY=
Subject key identifier: B4:DA:DA:17:FB:D8:7E:45:4D:61:3D:EB:93:77:5B:22:1C:EC:6B:5E
Certificate issuer: /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Certificate serial: 0194228DF53D461EDD8242C1B26D71CC7BC5
Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/tNraF_vYfkVNYT3rk3dbIhzsa14.roa
Signing time: Wed 01 Jan 2025 15:48:36 +0000
ROA not before: Wed 01 Jan 2025 15:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 193.138.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f5:3d:46:1e:dd:82:42:c1:b2:6d:71:cc:7b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4dada17fbd87e454d613deb93775b221cec6b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:13:4e:41:52:65:2f:2a:a4:84:21:69:dc:
ea:4d:2e:55:f2:dc:8e:b3:54:f4:24:90:6e:38:42:
e9:b1:1c:de:7f:9a:74:f6:93:49:92:89:80:5a:bf:
1c:65:03:65:c8:6c:e9:2f:dd:4a:dd:f9:71:45:fd:
6b:4f:ca:fd:11:f7:7d:0f:8c:69:dc:d1:bc:07:0f:
e6:b5:34:69:c5:83:d2:4b:77:eb:3d:07:ed:06:81:
ba:a1:b8:37:f1:2f:27:94:cd:8c:38:3a:0e:96:59:
0e:1a:b1:32:cf:48:ad:98:fc:c9:25:6b:78:69:df:
5c:47:d9:99:ed:88:1a:d6:8a:d1:e8:de:fa:c5:23:
2d:81:14:2d:19:b3:3b:2c:d4:ac:29:ba:7e:39:7e:
88:1c:20:be:95:83:2b:52:83:40:5d:4b:85:56:a5:
38:39:2c:22:1b:ab:75:df:0f:8f:9e:5c:43:fc:44:
de:d1:71:3d:be:3f:40:10:18:c6:91:b2:8e:90:39:
3d:04:32:96:13:f8:9b:43:bb:7a:d5:cb:15:fb:e0:
2b:db:f4:cb:0b:9a:31:72:da:1e:c6:cf:7f:8b:f2:
dc:5f:fd:d1:c3:2c:2f:7d:ee:49:79:ec:0d:9c:1a:
b3:3e:1e:0e:d9:b5:34:ec:f7:f5:d4:d3:af:36:e5:
99:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DA:DA:17:FB:D8:7E:45:4D:61:3D:EB:93:77:5B:22:1C:EC:6B:5E
X509v3 Authority Key Identifier:
keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/tNraF_vYfkVNYT3rk3dbIhzsa14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:2c:78:12:ed:c6:0b:aa:ad:1c:61:e3:4d:53:2d:2a:f4:96:
be:51:be:fe:e1:17:4e:b0:28:96:7f:1f:4c:a6:3e:d4:9d:63:
98:35:c4:14:8d:b7:67:a9:80:3c:ea:ea:e3:d6:97:32:5e:9a:
2d:d4:0c:32:8b:10:04:d4:0e:ff:29:27:9c:b9:6f:91:5e:72:
96:8e:b5:89:96:e3:93:7e:96:ae:72:d1:ed:40:14:41:24:5b:
c5:71:be:94:82:2d:72:25:20:b4:6e:ec:fb:06:d4:e5:6a:88:
25:e6:31:fd:5c:07:c7:89:5f:f1:a2:9d:79:7f:fa:dd:fb:5a:
6b:e7:b2:41:11:9d:4a:36:ea:ea:5d:f9:42:20:af:dc:ed:6b:
9d:cd:81:0c:f4:36:7e:59:44:cf:86:ca:f0:28:57:a7:36:dc:
44:bf:c2:02:5f:88:30:7e:75:cb:f8:c7:88:8b:fe:d0:92:69:
81:c6:58:88:67:83:b5:7f:83:24:07:48:02:9e:83:69:83:ab:
0d:cb:64:2a:44:ab:b1:92:d1:d2:30:8c:9c:9f:4c:55:ff:57:
62:79:0e:3d:f7:16:32:37:25:87:c3:98:90:7e:fc:fb:9b:19:
56:af:fe:4c:5f:52:39:fa:98:7a:56:f1:d2:2f:a0:24:6c:b0:
05:3b:e0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:00 2025 by rpki-client