Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ptTcqqKIVXgHrnpstlwIeTpcoVc.roa
File: ptTcqqKIVXgHrnpstlwIeTpcoVc.roa (raw, json)
Hash identifier: g4WU1lgkzpCQ7NECvK6HtSQT1xIw607YGdi/8RGMaNQ=
Subject key identifier: A6:D4:DC:AA:A2:88:55:78:07:AE:7A:6C:B6:5C:08:79:3A:5C:A1:57
Certificate issuer: /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial: 01856F799F11E494EA1634895611F04DC9DD
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ptTcqqKIVXgHrnpstlwIeTpcoVc.roa
Signing time: Sun 01 Jan 2023 22:35:19 +0000
ROA not before: Sun 01 Jan 2023 22:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.50.233.0/24 maxlen: 24
194.50.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:9f:11:e4:94:ea:16:34:89:56:11:f0:4d:c9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Validity
Not Before: Jan 1 22:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6d4dcaaa288557807ae7a6cb65c08793a5ca157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:62:e0:c1:61:b0:40:19:03:12:20:b9:da:
94:01:ac:a3:33:6b:9f:d1:60:ed:b2:5e:0b:d1:b5:
c7:bc:c0:07:03:a2:7c:dd:fa:39:fc:df:de:45:33:
b8:aa:ff:57:6d:96:0a:bb:e1:41:cd:d4:f6:1c:56:
ce:15:78:f2:5d:66:4a:51:53:15:d3:05:95:b2:a6:
e9:71:de:aa:87:16:21:23:8a:95:29:01:da:72:e8:
2b:fe:26:b5:9c:01:49:95:63:08:72:2e:20:10:a9:
62:b8:1a:59:60:03:ed:7d:37:e9:b2:fb:d3:c9:89:
83:bb:4c:c2:01:94:85:ba:2b:76:31:ac:ca:09:58:
f5:c3:c6:b9:48:5d:94:25:8f:8d:ce:32:8c:48:77:
6b:42:cd:36:d7:1e:23:04:61:d0:d1:05:52:88:1a:
83:ee:94:ee:f9:36:59:65:b5:01:34:2d:2c:5b:71:
5e:0c:6c:58:99:8e:39:5b:78:85:3e:c7:a7:22:6f:
8d:0c:57:c3:6c:7a:e0:17:23:ac:c9:27:13:f8:dc:
04:61:8f:26:b4:f1:dd:8b:b2:6d:56:3e:ad:1c:74:
33:32:6a:be:ed:96:f8:ac:97:60:e2:ad:5c:9c:e0:
f5:5d:34:ba:d6:ff:79:55:48:c6:73:40:8a:64:df:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D4:DC:AA:A2:88:55:78:07:AE:7A:6C:B6:5C:08:79:3A:5C:A1:57
X509v3 Authority Key Identifier:
keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ptTcqqKIVXgHrnpstlwIeTpcoVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.233.0/24
194.50.243.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:c2:1e:d7:23:51:bb:19:d9:b1:f1:d7:9a:b6:18:e8:18:e7:
70:e6:ad:53:2d:d8:e7:2c:6f:e2:b2:c8:89:84:2e:f4:06:ba:
2c:ec:da:9d:64:9c:9d:90:e7:8a:b7:b9:7a:58:18:cd:6b:ac:
55:d1:ec:fb:03:77:89:b8:98:52:59:f4:e0:43:b9:cb:43:39:
d9:9e:26:43:7c:4a:cb:99:19:84:23:7a:58:75:48:da:9f:7e:
9f:15:f9:e3:26:0c:fc:df:46:c3:00:38:4f:cb:6c:5f:da:b2:
d9:67:f4:0d:4c:22:05:3c:8f:ea:b2:d1:d5:bc:9c:7f:e1:6c:
f4:53:c9:e9:bf:17:be:c9:eb:f3:86:0f:64:04:78:1b:2d:8d:
eb:32:b7:32:36:e3:2b:78:16:d4:62:0e:68:df:ee:52:23:78:
1d:b2:ac:1f:ed:c4:94:8c:87:93:48:e7:47:8f:f9:44:85:10:
85:3e:3f:44:53:2c:ab:67:1b:ea:33:2f:94:8b:3c:b5:a1:c8:
5a:6d:5d:8f:9b:86:f1:1a:1c:83:36:9f:ab:4c:e2:a5:cb:e6:
ca:38:a4:74:a6:cd:1e:01:7c:65:c9:5e:88:66:6f:54:25:87:
e3:82:21:f3:71:3d:5e:dd:0c:25:e0:40:e0:c1:9a:76:13:0a:
03:09:09:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:24 2025 by rpki-client