Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/tLb53q7NzsVp-YXE3RGHGznTVi4.roa
File: tLb53q7NzsVp-YXE3RGHGznTVi4.roa (raw, json)
Hash identifier: qrOJEXhhHuZBxdduCkIhvAmYF6NHpagfrEEj5ZlJ8Sk=
Subject key identifier: B4:B6:F9:DE:AE:CD:CE:C5:69:F9:85:C4:DD:11:87:1B:39:D3:56:2E
Certificate issuer: /CN=91a6e7ce7d5a021fac332baf85410b5e3d61cd94
Certificate serial: 0182226864F030B2D74CE9CE8886D18AB6BE
Authority key identifier: 91:A6:E7:CE:7D:5A:02:1F:AC:33:2B:AF:85:41:0B:5E:3D:61:CD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kabnzn1aAh-sMyuvhUELXj1hzZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/tLb53q7NzsVp-YXE3RGHGznTVi4.roa
Signing time: Thu 21 Jul 2022 20:17:23 +0000
ROA not before: Thu 21 Jul 2022 20:17:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35112
IP address blocks: 193.163.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:22:68:64:f0:30:b2:d7:4c:e9:ce:88:86:d1:8a:b6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91a6e7ce7d5a021fac332baf85410b5e3d61cd94
Validity
Not Before: Jul 21 20:17:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4b6f9deaecdcec569f985c4dd11871b39d3562e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:06:5e:13:cb:12:21:d1:de:dc:eb:5b:92:
3b:7f:71:32:41:f3:d1:05:71:96:e3:11:55:94:21:
0e:a4:75:3a:41:6b:89:30:23:a9:e7:37:83:0c:0e:
56:e6:56:20:f0:a3:c7:bb:40:a7:0e:4d:9d:83:69:
96:03:a1:16:0c:da:66:4e:31:da:d7:38:4a:fc:a1:
b4:48:57:6c:05:3e:97:a9:d7:87:28:e2:9d:59:c0:
ff:df:d8:9e:75:f7:07:d7:2a:45:0f:9e:6e:e3:6a:
bb:59:d4:88:64:4d:09:1e:f9:c2:6a:64:a6:a2:f1:
c3:0e:c4:d7:9a:4a:86:54:a0:e1:22:ea:ea:c6:67:
7e:71:2e:21:c9:5f:5d:66:e1:86:65:fa:ad:7c:a9:
f6:e9:0c:22:e2:8a:ff:3b:b9:f5:83:46:c4:4a:7f:
5f:b8:ba:fb:e5:24:86:c2:5a:77:3b:0f:80:69:c8:
ee:cd:1a:c2:1e:6b:ff:df:30:61:36:14:0f:15:e5:
49:bd:43:2c:18:b5:dc:d0:fe:45:e8:40:2d:9f:a8:
ee:de:81:79:ff:0b:28:3f:f2:3f:b3:5e:c4:24:92:
c1:42:7a:a3:ea:43:45:85:7b:54:d3:da:71:06:81:
eb:19:66:53:e4:a6:3e:fa:23:66:38:78:43:f4:e1:
c3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B6:F9:DE:AE:CD:CE:C5:69:F9:85:C4:DD:11:87:1B:39:D3:56:2E
X509v3 Authority Key Identifier:
keyid:91:A6:E7:CE:7D:5A:02:1F:AC:33:2B:AF:85:41:0B:5E:3D:61:CD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kabnzn1aAh-sMyuvhUELXj1hzZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/tLb53q7NzsVp-YXE3RGHGznTVi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9dd732-37a9-4d76-aeb7-bfd652b7cf2f/1/kabnzn1aAh-sMyuvhUELXj1hzZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.203.0/24
Signature Algorithm: sha256WithRSAEncryption
50:2a:6a:23:66:37:03:58:2c:35:b4:4a:3b:78:87:43:23:dc:
ac:89:dc:b3:59:a5:e4:4a:6e:f6:4a:d7:b0:8c:0c:0f:48:7e:
c1:f6:33:1f:19:18:20:30:7b:53:db:60:9d:c5:83:8f:f1:9c:
09:8d:13:86:ab:39:2f:34:ea:64:24:20:8a:d8:f3:56:74:03:
49:d7:84:2f:4c:77:03:a3:b0:00:48:82:ad:c5:c6:20:ee:1a:
80:55:bc:7a:f0:93:82:63:56:25:49:f5:bf:39:e4:2e:15:07:
7a:3a:f1:12:31:94:b3:20:9c:13:9c:51:e7:ba:1a:67:17:14:
f9:66:49:2e:54:e2:41:6c:53:f4:b5:03:a7:f8:65:7a:81:9a:
99:7f:6f:53:cc:a4:da:20:71:32:e7:a4:9d:fd:27:79:f6:57:
17:0a:bd:18:f8:b4:69:08:4e:da:ac:b9:d9:56:e0:c9:39:95:
be:76:35:ca:70:31:ed:1a:a0:81:c7:c1:65:fa:4e:64:51:2c:
79:0f:3d:02:14:40:61:50:7f:0a:3a:bd:29:92:54:c6:9f:af:
58:47:5f:53:a6:2e:46:0d:8f:87:f2:31:b4:10:7c:c1:c6:f5:
21:9f:26:2f:6a:7c:e2:aa:7e:39:f0:c7:d7:b4:33:09:41:c2:
66:cc:80:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:26:31 2025 by rpki-client